Privacy notice

Responsibility

The operator identified on this page is responsible for its own account, support and service-security data. An independent studio determines the purpose and legal basis of its customer records. Contact that studio or support to identify the responsible controller. DPA/AVV terms with independent studios still require agreement.

Account, calendar and support

Sign-in and operation use email, name, avatar, account and session identifiers, permissions and settings. Calendars contain contacts, appointments, notes, photos, comments and attachments entered by owners and participants. Support processes information you send it. Website and API requests also process IP address, browser details, time and technical events for service delivery and protection. Email and necessary authentication data are required for account sign-in; that sign-in is unavailable without them. Other fields depend on the features chosen.

Purposes and legal bases

Providing a requested service may rely on GDPR Article 6(1)(b) where you are a party to the contract; security, abuse prevention and support on legitimate interests under 6(1)(f); legal obligations on 6(1)(c). Any required consent must be obtained separately. Health data and other special categories also require an applicable Article 9 condition.

Providers and recipients

Cloudflare serves the web application, D1 database and R2 attachments. Supabase handles authentication, sign-in security emails and photo storage. Google sign-in starts at your choice. Support email uses Zoho. The separate website and its support form run on WordPress.com/Automattic; the form sends your entered name, email, subject and description to support. Calendar owners and participants receive access according to the permissions granted.

International processing

These providers operate internationally. Exact contracting entities, the scope of processing regions and applicable international-transfer safeguards for this service are still being checked. Exclusive storage and processing of all data in the EU is not promised. Public provider documents are linked below; their existence does not confirm that every operator agreement has been completed. Contact support for details before entering customer data.

Cookies, preferences and access recovery

The application uses cookies for sign-in, temporary authorisation, language, calendar selection and password recovery. The refresh cookie lasts up to 30 days, the language preference up to a year, the authorisation flow up to 10 minutes and the separate permission to set a new password up to 15 minutes. Security checks may process hashes of email and IP address, time and attempt status. Display preferences are also stored on the device. The calendar code does not integrate advertising analytics or session replay. This does not cover every setting of the separate WordPress website or its provider.

Retention and deletion

Working records remain in a calendar while responsible participants manage them; deleted appointments may initially remain recoverable. Session-revocation fences are retained to prevent older access from being reused. Account deletion does not immediately erase shared-calendar history, all external objects and backups. Final periods for logs, support requests, backups and permanent content removal still need to be established. Requests are considered according to purpose, other people’s rights and legal obligations.

Your rights

Subject to GDPR conditions, you may request access, correction, erasure, restriction or portability, object to applicable processing or withdraw consent for processing based on consent. Write to support; only necessary information is needed to verify identity. Requests generally receive a response within one month, subject to statutory exceptions. You may complain to a competent data-protection authority, including where you live, work or an infringement occurred.

Provider documents

• Cloudflare
• Supabase
• Zoho
• WordPress.com / Automattic

Hessian Commissioner for Data Protection and Freedom of Information