Website Privacy Notice

Controller

Lasse Kumm, Am Langenberg 8, 21445 Wulfsen, Germany. Contact: privacy@heados.app.

Delivering the website

When you open a page, your browser sends technical information needed to deliver it, including an IP address, the requested address, connection information and browser information. Website infrastructure processes this information for delivery, reliability and protection against misuse.

Cloudflare provides website hosting, content delivery and network security. It processes technical request information, including IP addresses, requested URLs, timestamps, browser information and security or error signals, to deliver and protect the website.

Cloudflare operates global infrastructure. Processing may take place outside the EEA, including in the United States. Its Data Processing Addendum provides for international-transfer safeguards, including the European Commission's Standard Contractual Clauses for relevant restricted transfers: https://www.cloudflare.com/cloudflare-customer-dpa/ Provider privacy information: https://www.cloudflare.com/privacypolicy/

The legal basis for proportionate delivery and security processing is Article 6(1)(f) GDPR: our legitimate interest in providing a functioning, secure information website. This purpose is limited to the technical information needed to deliver and protect the website.

Cookies and similar technologies

This website does not use advertising pixels or embedded social-media tracking. It measures visits with Google Analytics as explained below. It does not offer an account login or take payment. Cloudflare security features may use cookies to recognise legitimate traffic or remember a completed security check. Their use depends on the protection features enabled. Storage or access strictly necessary to deliver and protect the service you request is assessed under section 25(2) TDDDG.

Your choice in the cookie banner is stored in your browser's local storage for 180 days so that we do not ask again. You can change it at any time under Cookie settings at the bottom of every page.

Google Analytics

We use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how the website is used, for example which pages are visited, where visitors come from and how many sign up for the beta. Google Signals and ad personalisation are switched off.

When you open a page, your browser loads the Google tag from Google's servers. In doing so, Google receives your IP address and technical information about your browser. Google states that Google Analytics 4 does not log or store IP addresses.

If you accept, Google Analytics sets the cookies _ga and _ga_823E0MJDW5 for 90 days to recognise your browser on later visits. Google then processes the pages you view, the time, the referring website, your approximate location, device and browser information and events such as a beta sign-up. The legal basis is your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. You can withdraw it at any time under Cookie settings.

If you decline or have not chosen yet, Google sets and reads no cookies. The Google tag still sends cookie-free signals about the page view, the time, browser information and your choice. Google uses these signals for aggregated statistics. The legal basis is our legitimate interest in measuring the reach of the website under Article 6(1)(f) GDPR. You can object at any time: if your browser sends Global Privacy Control or Do Not Track, the Google tag does not load at all, and you can also write to privacy@heados.app.

Google may process data in the United States. Google LLC is certified under the EU-US Data Privacy Framework, and Google's data processing terms include the European Commission's Standard Contractual Clauses. Google Analytics retains event data for 2 months. Provider privacy information: https://policies.google.com/privacy

Beta sign-up

If you sign up for the beta on the home page, we store your email address, the language of the page and the time of your sign-up. We use them only to invite you to the HeadOS beta. For the invitation, we either email you ourselves or enter your address in Apple's TestFlight, which then sends you the invitation.

The sign-up list is stored in a Cloudflare D1 database that runs and stores its data only in the European Union. To keep the form from being flooded, Cloudflare counts sign-up attempts per IP address for one minute. These counts are not added to the list.

The legal basis is Article 6(1)(b) GDPR, because you ask us to include you in the beta. We delete your entry when the beta ends, at the latest 12 months after your sign-up. You can ask us to delete it earlier at privacy@heados.app.

Contact

If you email us, IONOS processes the mailbox data, including your address, message and attachments. We use this information to answer you. The legal basis is Article 6(1)(b) for service-related or pre-contractual requests, Article 6(1)(f) for other ordinary correspondence, and Article 6(1)(c) where a legal duty applies.

We retain correspondence while needed to answer and resolve the matter and retain proportionate evidence where required. Technical records are retained for their delivery and security purposes rather than to build advertising profiles.

External links

Following a link to another website involves that website's own processing. A link alone is different from embedding a third-party component that loads before you choose to visit.

Your rights

You have the applicable rights of access, correction, erasure, restriction, portability and objection, and can withdraw consent where processing relies on it. Contact privacy@heados.app. We normally respond within one month and explain a permitted extension within that period.

You can complain to the supervisory authority where you live or work or to: https://www.lfd.niedersachsen.de/beschwerde