Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Nico Härter
c/o Block Services
Stuttgarter Str. 106
70736 Fellbach
Deutschland

Email: spam@nicohaerter.de

2. The key points at a glance

We process as little data as possible and do not share it for advertising purposes.

• This website does not set any cookies and stores nothing in your browser.
• We do not use any third-party tracking or advertising services (no Google Analytics, no Facebook Pixel).
• Fonts are loaded from our own server, not from Google.
• Our audience measurement runs entirely on our own server in Germany and stores IP addresses only in truncated form.

3. Hosting and provision of the website

The website is operated on a server of netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.

When you visit the website, the server processes, as technically necessary, your IP address, the date and time of access, the requested address, the referrer URL as well as your browser and operating system (user agent) in order to deliver the page to you and to ensure secure operation. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the technically error-free and secure provision of the website.

The connection is encrypted via TLS. You can recognise this by the “https://” in the address bar.

4. Waiting list and beta test

If you sign up for the waiting list, we store your first and last name, your email address, whether you are interested in becoming a beta tester, the language you selected and the time of your consent. We use this data to confirm your registration, to inform you about the launch of ScanMyBody and – if you wish – to contact you about the beta test. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

As proof of your consent (Art. 7(1) GDPR) and to protect against misuse, we additionally store the IP address from which you signed up. We also store how you found us (e.g. referring website, referral link or campaign tag), your approximate location (country, region, city – derived from the IP address) as well as device type, browser and operating system. This allows us to see which channels work for ScanMyBody. The legal basis for this is Art. 6(1)(f) GDPR.

The sign-up form consists of several steps. So that we can understand at which point interested people drop out, we store the details already entered in the individual steps (email address, first and last name, interest in the beta) even before the form is submitted. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in improving the sign-up process. As long as you have not completed your sign-up, we do not use these details to contact you. We automatically delete incomplete details after 30 days.

We send the confirmation email and any later information via the email server of IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, acting as our processor.

You can withdraw your consent at any time with effect for the future – most easily via the unsubscribe link in every one of our emails or at scanmybodyapp.com/abmelden, or alternatively by sending a message to spam@nicohaerter.de. We will then delete your data immediately; for statistical purposes, only the anonymous fact that an unsubscription took place is retained. If you do not withdraw your consent, we will delete your data as soon as the purpose no longer applies, at the latest twelve months after the app’s market launch.

5. Our own cookieless audience measurement

To understand how our website is used and which content and channels work, we operate our own audience measurement on our server. No cookies are set, and no information is stored on or read from your device unless this is technically necessary for that purpose. The data is not shared with third parties and is not combined with other data sources.

The following is recorded:

• pages visited, sections viewed and how long they were visible, scroll depth
• clicks on links and buttons, opening of the menu, language selection and FAQ
• periods of active use and inactivity as well as interactions with the sign-up form (without the content entered)
• referring website, referral link (ref) and campaign parameters (utm_*)
• language, device type, browser, operating system and screen size
• approximate location (country, region, city)

Your IP address is stored only in truncated form (for IPv4, the last segment is removed). Beforehand, your approximate location is determined locally on our server using the “IP to City Lite” database by DB-IP (db-ip.com, licence CC BY 4.0); your IP address is not transmitted to anyone for this purpose. To group visits together, we generate a pseudonymous identifier from the IP address and user agent using a random value that changes daily. This makes it impossible to recognise you across several days.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in improving the website and measuring the success of our communication. The raw data is automatically deleted after twelve months.

You can object to the audience measurement at any time (Art. 21 GDPR): if you enable “Do Not Track” or “Global Privacy Control” in your browser, no measurement takes place. Alternatively, a message to spam@nicohaerter.de is sufficient.

6. Fonts

The fonts used on this website (Manrope, JetBrains Mono) are delivered from our own server. There is no connection to servers of Google or other providers.

7. Recipients and transfers to third countries

Your data is shared only with the processors named above (hosting, email delivery), who are bound by our instructions. No transfer to countries outside the EU or the EEA takes place.

8. Your rights

You have the following rights at any time:

• access to your stored data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on legitimate interests (Art. 21 GDPR)
• withdrawal of any consent given with effect for the future (Art. 7(3) GDPR)
• lodging a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority at your place of residence

For all requests, an informal message to spam@nicohaerter.de is sufficient.

9. No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

10. Changes

We will update this privacy policy if our website or the legal requirements change. The version published here at any given time applies.