We are pleased that you are visiting our website https://todo-listo.app

Below you will find information about what data is collected during your visit to the website and how it is used. If you register to use our products, further personal data about you will be processed. Further data protection information when using our products can be found in the data protection declaration for customers.

Name and contact details of the person responsible for processing and the company data protection officer, hosting

This data protection information applies to data processing by

Responsible person
Alex Kirsch IT GmbH, represented by the manager Dr. Alexandra Kirsch
Eckbergstr. 18/1, 72135 Dettenhausen, Tel.: +49 176 36067878, E-Mail: info@todo-listo.app

We are currently not obliged to appoint a data protection officer. You can contact the person responsible at any time using the contact details provided.

Hosting
Our website is hosted by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe. The servers are located in Germany. We have concluded an order processing agreement with netcup.

Collection and storage of personal data and the type and purpose of their use

When you visit the website

When you visit our website at

https://todo-listo.app

information is automatically sent to the server of our website by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:

• IP address of the requesting computer,
• date and time of access,
• name and URL of the retrieved file,
• website, from which the access has been requested (Referrer-URL),
• browser used and, if applicable, the operating system of your computer and the name of your access provider.

The data mentioned are processed by us for the following purposes:

• ensuring a smooth connection to the website,
• ensuring comfortable use of our website,
• evaluation of system security and stability, and
• for other administrative purposes.

The legal basis for data processing is Article 6 Paragraph 1 Clause 1 Letter f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

When you contact us by email

When you contact us by e-mail, the data you provide, i.e. your e-mail address and, if applicable, your name and other contact details, will be stored by us in order to be able to answer your request. We delete the data arising in this context as soon as it is no longer necessary to store it, or restrict its processing if there are statutory storage obligations.

The legal basis for this is Article 6 Paragraph 1 Letter b GDPR: The relevant data processing serves to carry out pre-contractual measures, which are carried out at your request.

Storage

Your personal data collected by us will be deleted by us if we do not need the personal data in accordance with Art. 6 (1) sentence 1 lit. b GDPR to fulfill a contract concluded between us or if we are subject to statutory storage and retention obligations, Art. 6 paragraph 1 sentence 1 lit. c GDPR

Sharing of Data

The following categories of recipients may have access to your personal data:

• Service providers for the operation of our website and the processing of the data stored or transmitted by the systems (e.g. for server and data center services, payment processing, IT security). The legal basis for the transfer is then Article 6 Paragraph 1 Clause 1 Letter b or Letter f GDPR;
• State bodies/authorities, insofar as this is necessary to fulfill a legal obligation. The legal basis for the transfer is Article 6 Paragraph 1 Clause 1 Letter c GDPR.

In addition, we only pass on your personal data to third parties if you have given your express consent to this in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR.

Cookies

We use cookies on our website. Cookies are small text files that are stored on your hard drive, being assigned to the browser you are using by a characteristic string and that provides information for the place that sets the cookie. Cookies cannot run programs or transmit viruses to your computer and therefore cannot cause any harm. This involves storing information in end devices in accordance with Section 25 TTDSG.

A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.

We only use technically necessary cookies for the registration and login of registered customers into their customer account. These cookies are absolutely necessary to be able to use the basic functions of the customer account. We do not collect information about you for marketing purposes, nor do we store which websites you have visited. The legal basis for the use of these cookies, which are absolutely technically necessary, is Article 6 Paragraph 1 Sentence 1 Letter f GDPR. Consent is also not required in accordance with Section 25 Paragraph 2 No. 2 TTDSG.

Newsletter

We send newsletters without third parties and via our servers rented from netcup GmbH.

To receive one of our newsletters, you must subscribe to our newsletter on our website.

If you register for our newsletter, the following data will be processed by us:

• the page from which the page was requested (Referrer-URL),
• the date and time of access,
• the description of the type of web browser used,
• the IP address of the requesting computer,
• your e-mail address,
• the date and time of registration and confirmation.

The data processing during registration takes place on the basis of the consent you have given in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR. We use the so-called double opt-in procedure to register for our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address provided, in which we ask you to confirm that you are the owner of the e-mail address provided and wish to receive the notifications. If you do not confirm your registration, your information will be deleted within one month.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter e-mail, by e-mail to info@todo-listo.app or by sending a message to the contact details given in the imprint.

Tip option

You have the option to tip any amount on the website regardless of using our paid services. The payment of this tip is not subject to any obligation on our part and is entirely voluntary.

If you decide to pay a tip and click on the corresponding button or link, you will be redirected to the website of our payment service provider Stripe, a service of Stripe Inc. based in San Francisco, USA. The following personal data is collected there and stored by Stripe:

• E-Mail-Adresse
• Bankverbindung bzw. Zahlungsdaten

The legal basis for this is Article 6 Paragraph 1 Letter f GDPR.

Tools

Our website is hosted by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe. Netcup collects statistics about website visits. It is recorded how many visitors our website has and from which countries the visitors come. No other data is collected or processed.

According to Article 6 Paragraph 1 Clause 1 Letter f GDPR, the data processing is necessary to protect our legitimate interest so that we can adapt our offer to the visitors (e.g. language).

YouTube Link

We have linked YouTube videos and our YouTube channel on our website. These are external links. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland.

As soon as you click on the YouTube link on our website, a connection to YouTube's servers will be established. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after starting a video, YouTube can store various cookies on your device or use comparable recognition technologies. YouTube can further process your data without us having any influence on this.

Further information on data protection can also be found at https://policies.google.com/privacy.

Data subject rights

You have the right

• to request information about your personal data processed by us in accordance with Article 15 GDPR. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data was or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right to complain, the origin of your data, if not collected from us, and the existence of automated decision-making including profiling and, if necessary, meaningful information about their details;
• in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
• in accordance with Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert exercise or defense of legal claims is required;
• in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you do you need them to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible;
• in accordance with Art. 7 Para. 3 GDPR, to revoke your consent to us at any time. As a result, we are no longer allowed to continue the data processing based on this consent for the future and
• to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or our registry.

Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a particular situation.

If you would like to make use of your right of revocation or objection, an e-mail to info@todo-listo.app is sufficient.

Data security

When you visit our website, we use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitting in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Updating and changing this data protection declaration

This data protection declaration is currently valid and has the status of October 2023.

Due to the further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on the website at https://todo-listo.app/en/privacy.html.