Controller

No data protection officer has been appointed: we do not permanently employ at least 20 people on the automated processing of personal data (§ 38 (1) BDSG), and the conditions of Art. 37 (1) GDPR are not met either.

What data do we collect?

When visiting the website

When this website is accessed, our hosting provider Raidboxes GmbH (Hafenstraße 32, 48153 Münster) automatically records technical access data in server log files: full IP address, time of access, page accessed, referrer URL and the browser identifier (user agent), from which browser and operating system can be derived. These log files are deleted automatically after 7 days. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and functional operation of the website). A data processing agreement pursuant to Art. 28 GDPR is in place with Raidboxes. According to Raidboxes, the server location is Germany. Raidboxes uses sub-processors; the current list is provided by Raidboxes under the data processing agreement.

Fonts

The fonts used on this website (Google Fonts) are stored and delivered locally on our own server. No connection to Google servers takes place and no data is transmitted to Google.

Light or dark appearance

On our website you can switch between a light and a dark presentation. We remember your choice in the local storage of your browser, so that the page looks the way you set it on your next visit. This entry contains nothing but the information “light” or “dark”, does not leave your browser and is not read out by us. The legal basis is § 25 (2) no. 2 TDDDG, as you request this function yourself and expressly.

Newsletter sign-up form

The sign-up form for our newsletter is embedded technically via our service provider Brevo. This form only loads after you have consented to the use of non-essential content via our cookie banner — without this consent no connection to Brevo is established and no data is transmitted. If you consent, your browser transmits technical data (including your IP address) to Brevo when the form loads.

When you sign up, the form transmits your email address to Brevo. Stored there is when the contact was created and whether you confirmed the sign-up via the confirmation link (double opt-in) — this allows us to demonstrate your consent. Providing your email address is voluntary but a prerequisite for receiving the newsletter. No further form fields and no open or click tracking of the newsletter emails are used. Brevo logs technical dispatch events (delivery, non-delivery, unsubscribe, spam complaints) so that we can ensure delivery; the legal basis is Art. 6 (1) (f) GDPR.

Order, payment processing and access code (support contribution)

If you pay a support contribution (early adopter contribution) via the support button, we process additional data for this. When you order we collect your email address, the contribution you chose, the resulting number of prepaid months and the resulting permanent monthly price, the access code assigned to you, your customer account data including a user ID for unambiguous assignment, a marker indicating whether it is a purchase for yourself or a gift, and the order number and date.

If you mark your order as a gift, we additionally collect the name and email address of the person receiving the gift, to whom we send the access code, and – if you provide them – your personal lines to them; you, as the paying person, still receive the invoice. The contracting party for the support contribution remains exclusively you (§ 328 BGB). If the person receiving the gift creates their own customer account to redeem the code, we process the same data set as for an account resulting from a purchase for oneself; for this, the separate withdrawal instructions and pre-contractual information in Part Happly to this, as a separate contract is concluded between us and the person receiving the gift.

This data is stored in our shop system (WooCommerce with the Germanized plugin), which runs as a WordPress plugin on the same Raidboxes instance as the website — no separate hosting location.

The payment is processed by the payment service provider Mollie (Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands). In doing so Mollie processes your payment data (name, address, payment data, order amount and — if provided — your telephone number and, depending on the payment method chosen, logistics data) as a data controller in its own right, not as our processor — in particular for its own purposes such as fraud prevention and fulfilling its own statutory obligations. According to Mollie the processing takes place within the European Economic Area; no transfer to third countries takes place. You can find information on data processing by Mollie in Mollie's own privacy policy at https://www.mollie.com/legal/privacy.

The legal basis for our processing of your order and payment data is the performance of the contract concluded with you (Art. 6 (1) (b) GDPR) and our commercial and tax retention obligations (Art. 6 (1) (c) GDPR).

The access code assigned to you is stored linked to your customer account until you have redeemed your consideration or your claim becomes time-barred. We also send you an order confirmation with the applicable GTC and the Right of Withdrawal as a PDF attachment.

If you use the electronic withdrawal function (§ 356a BGB, see Right of Withdrawal), we process the data provided for it (name, contract identifier, contact address) as well as the date and time of receipt, in order to send you an automated acknowledgement of receipt. The legal basis for this is our statutory obligation under § 356a BGB (Art. 6 (1) (c) GDPR) and the performance of the contract (Art. 6 (1) (b) GDPR).

Gift function — information for the person receiving the gift (Art. 14 GDPR)

If you have been given h_OURs access as a gift without having ordered from us yourself, we do not collect your name and email address from you but from the person giving the gift, who entered these details with their order – as well as the personal lines to you, if they wrote any. We use this data exclusively to deliver the gift to you by email and to enable you to redeem the access code — for nothing else, and in particular not for advertising.

The legal basis is our legitimate interest (Art. 6 (1) (f) GDPR) in delivering to you the gift commissioned by the person giving it. Art. 6 (1) (b) GDPR does not cover this processing, because you yourself are not a contracting party to the underlying support contribution (§ 7 para. 8 Terms and Conditions) — the contracting party remains exclusively the person giving the gift.

We do not send the gift email via Brevo but directly from our shop system via our own company address (shop@h-oursapp.com), hosted by our hosting provider Raidboxes GmbH, Hafenstraße 32, 48153 Münster (a data processing agreement pursuant to Art. 28 GDPR is in place). No transfer to third countries takes place. If you create your own customer account to redeem the access code, from that point on we process your own account data as described for any purchase for oneself; the separate withdrawal instructions and pre-contractual information that apply to this can be found in Part H.

If you do not redeem the access code, we store your name and email address until the gift-giver's claim to the consideration becomes time-barred by law. If you redeem it, the storage periods stated for your own customer account apply from that point on, and we reduce the data collected specifically for the gift to what is necessary for that purpose.

Since we rely on a legitimate interest here, you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 (1) GDPR). A short email to datenschutz@h-oursapp.com is sufficient. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Your objection does not undo the gift itself; it remains with the person who gave it.

In addition, you have the rights to information, rectification, erasure, restriction of processing and data portability described below under “Your rights”, as well as the right to lodge a complaint with a data protection supervisory authority — details and the authority responsible for us can be found there. The controller for this processing is us, MW – mehr wollen UG (haftungsbeschränkt), Industriestraße 15, 18069 Rostock, reachable at datenschutz@h-oursapp.com; for further contact details see “Controller” above.

Registering an account without a purchase

You can also register on the website without paying a support contribution or buying a merchandise product. In doing so, we collect your email address, your password and your username. Registration is confirmed via double opt-in: you receive an email with a confirmation link, and your registration only takes effect once you click it. This account also receives a user ID for unique identification (as with the customer account from a purchase).

An account registered in this way currently offers no function of its own beyond the mere registration; it is being prepared for a later purchase or for the shop/app launch. The legal basis and consumer protection rights for this registration — including the Right of Withdrawal — follow from Part I: as a precaution we treat this account as a separate contract about digital content (§ 327 (3) BGB).

“Linked accounts” — the same account also serving as a login for the app in future — are expressly not covered here: the app does not exist yet; this will only be regulated with the app launch and a separate amendment to the terms and conditions.

Voluntary mention as a supporter

You can optionally agree via a checkbox to be named with your name in our public supporter list on the website. Only your name is published; your user ID is never shown publicly, but only internally in your own account profile.

The legal basis is your consent (Art. 6 (1) (a) GDPR). You can revoke it at any time with effect for the future; your name will then be removed from the list. The revocation does not affect the lawfulness of the publication carried out up to that point.

Contacting us by email or telephone

If you contact us by email or telephone, we process the data arising from this (email address or telephone number, the content of your enquiry) solely in order to deal with your request. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in responding), and for contract-related enquiries Art. 6 (1) (b) GDPR. We delete this data as soon as your enquiry has been dealt with conclusively. Business correspondence subject to commercial or tax retention obligations is kept for the statutory period: commercial letters six years, accounting documents eight years (§ 257 (4) HGB, § 147 (3) AO).

Analysis and reach measurement

We do not use any tools to analyse your usage behaviour and no advertising or reach trackers (for example Google Analytics, Meta Pixel); this also applies to the ordering path. Our newsletters also contain no open or click tracking. For the pre-sale a deliberately data-minimising, aggregated count without personal reference is planned, not individual tracking.

No third-party advertising, no selling of data, no commissions on exchanges. We process your data only to run and improve h_OURs. It is only shared where this is necessary for operation (e.g. hosting, payment processing), required by law, or where you have given your consent.

Online-Umfrage

Über Links in unserem Newsletter, auf unserer Website, auf Instagram und über QR-Codes laden wir zur Teilnahme an einer Online-Umfrage zu h_OURs ein. Die Umfrage läuft über den Dienst Survio; mit dem Klick auf den Link verlässt du unsere Website. Verantwortlich für die Verarbeitung ist MW – mehr wollen UG (haftungsbeschränkt), Industriestraße 15, 18069 Rostock. Fragen zum Datenschutz erreichen uns unter datenschutz@h-oursapp.com. Weitere Informationen findest du in unserer Privacy Policy.

Verarbeitet werden deine Antworten auf die Fragen des Fragebogens. Das sind Angaben dazu, wie du dir heute Hilfe holst, was du anderen anbieten könntest und wie dir h_OURs gefällt, dazu Angaben zu Alter, Wohnort, Engagement, Geschlecht und dem Geld, das du im Monat persönlich zur Verfügung hast. Bei den Fragen nach Geschlecht und Einkommen kannst du »Möchte ich nicht angeben« wählen. Die Teilnahme ist freiwillig, eine Anmeldung ist nicht nötig, und wir fragen weder Namen noch Anschrift ab. Du kannst die Umfrage jederzeit abbrechen; bis zum Absenden erreichen uns deine Antworten nicht.

Am Ende kannst du freiwillig deine E-Mail-Adresse angeben, wenn wir dich zur Alpha einladen und über die Entwicklung informieren sollen. Nur wenn du dort zustimmst, verarbeiten wir sie, und zwar zusammen mit deinen Antworten.

An der Umfrage kannst du in jedem Alter teilnehmen. Deine E-Mail-Adresse kannst du uns erst ab 16 Jahren hinterlassen; jüngere Antworten werten wir ohne E-Mail-Adresse ganz normal mit aus.

Wir werten die Antworten zusammengefasst aus. Nach außen, etwa an Geldgeber oder in Beiträgen auf Instagram, geben wir nur Gesamtergebnisse weiter, keine Einzelantworten und keine Freitexte.

Rechtsgrundlagen. Deine Antworten verarbeiten wir auf Grundlage unseres berechtigten Interesses an Markt- und Produktforschung (Art. 6 Abs. 1 lit. f DSGVO). Du kannst dieser Verarbeitung jederzeit widersprechen; es genügt eine Nachricht an datenschutz@h-oursapp.com. Deine E-Mail-Adresse und die Einladung zur Alpha beruhen auf deiner Einwilligung (Art. 6 Abs. 1 lit. a DSGVO), die du jederzeit mit Wirkung für die Zukunft widerrufen kannst, formlos an widerruf@h-oursapp.com.

Deine Rechte. Du kannst Auskunft über deine Daten verlangen, sie berichtigen oder löschen lassen, ihre Verarbeitung einschränken und sie dir übertragen lassen. Außerdem kannst du dich bei der Aufsichtsbehörde beschweren, dem Landesbeauftragten für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern.

Speicherdauer. Deine Antworten speichern wir bis zum 31.12.2027; danach bleibt nur die zusammengefasste Auswertung. Deine E-Mail-Adresse speichern wir ebenfalls bis zum 31.12.2027; widerrufst du vorher, löschen wir sie sofort.

Wer die Daten für uns verarbeitet. Survio s.r.o., IČO 28300785, Palachovo náměstí 799/5, 625 00 Brno-Starý Lískovec, Tschechien, verarbeitet die Daten in unserem Auftrag (Art. 28 DSGVO). Im kostenlosen Tarif zeigt Survio nach dem Absenden eigene Werbung. Informationen zur Datenverarbeitung durch Survio findest du in der Datenschutzerklärung von Survio. Auf den Umfrageseiten setzt Survio Google Analytics und weitere Google-Dienste ein. Dabei werden Cookies gesetzt und Daten wie deine IP-Adresse und dein Nutzungsverhalten an Google übertragen. Google hat seinen Sitz in den USA; die Verarbeitung kann auch dort erfolgen. Dafür ist Survio verantwortlich; Einzelheiten dazu findest du in der Datenschutzerklärung von Survio.

What do we use your data for?

For the secure operation of the website, the display of the newsletter sign-up form, sending information about the progress and news of h_OURs, dealing with your enquiries, demonstrating the consents given, permanently observing unsubscribes and processing your order and the associated payment, if you pay a support contribution. We do not sell your data and do not pass it on for advertising purposes. Recipients are the processors named below, who process your data only on our instructions, and the sub-processors they engage, and in the case of payment processing also the payment service provider Mollie as a controller in its own right (see below). Beyond that we only pass on data where we are legally obliged to do so.

Cookies and local storage

Without your consent we do not set any cookies that are not technically necessary. As soon as you have made a choice in the consent banner — agreement or refusal — we store that decision in a technically necessary cookie (name: real_cookie_banner-*, storage period: 1 year). Under § 25 (2) no. 2 TDDDG no consent is required for this. Further cookies of our content management system only arise for logged-in editors and do not concern visitors to this website. Non-essential content — namely the Brevo newsletter form — is only loaded after your consent via our cookie banner. You can revoke your consent at any time with effect for the future (Art. 7 (3) GDPR). A click on “Cookie settings” in the footer of this website is enough. The revocation does not affect the lawfulness of the processing carried out up to that point.

In addition, our shop system (WooCommerce) stores technically necessary information for the shopping cart and the ordering process — a session identifier and the contents of your cart — as soon as you add something to your cart. This information is required for the ordering process you have requested (§ 25 (2) no. 2 TDDDG) and is stored partly as a cookie and partly in your browser’s local storage. The cookies are woocommerce_cart_hash and woocommerce_items_in_cart (storage period: session) and wp_woocommerce_session_ (storage period: 2 days). Your setting for the light or dark view is also kept in local storage (hours-farbe, see above). You will find the current full overview in our cookie banner under “Cookie settings”. Our payment service provider Mollie sets no cookies of its own on the payment page.

Processors and recipients

• Raidboxes GmbH, Hafenstraße 32, 48153 Münster (web hosting and email accounts). A data processing agreement pursuant to Art. 28 GDPR is in place.

• Brevo GmbH, Köpenicker Str. 126, 10179 Berlin (newsletter dispatch including the double opt-in confirmation email, and form integration — all other emails we send ourselves via our own company addresses hosted at Raidboxes). Data processing is part of Brevo's terms of use (Data Processing Agreement). According to Brevo, primary data processing takes place on servers in the EU; where further service providers are used (among others for hosting/infrastructure and support), transfers to the USA and India may occur. For the USA, the transfer is based on the certification of Sendinblue, Inc. (dba Brevo USA) under the EU-U.S. Data Privacy Framework, for which the EU Commission established an adequate level of protection by decision of 10 July 2023. In addition, according to Brevo, the EU Commission's standard contractual clauses apply to this transfer and to transfers to countries without an adequacy decision — in particular India. You can obtain a copy of the safeguards on request at datenschutz@h-oursapp.com.

• Survio s.r.o., IČO 28300785, Palachovo náměstí 799/5, 625 00 Brno-Starý Lískovec, Tschechien (Durchführung unserer Online-Umfrage). Survio verarbeitet die Umfragedaten in unserem Auftrag (Art. 28 DSGVO). Zu Google Analytics und weiteren Google-Diensten, die Survio auf den Umfrageseiten in eigener Verantwortung einsetzt, siehe Abschnitt Online-Umfrage.

In addition we use Mollie (Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands) for payment processing. Towards us Mollie is not a processor, but a data controller in its own right for the data it processes for its own purposes. A data processing agreement under Art. 28 GDPR is not the appropriate instrument for this; nor is there, in addition, any narrowly limited processing on our behalf for technical sub-steps. Reference is therefore made to Mollie’s own privacy policy.

Legal bases

• Website visit (log files): Art. 6 (1) (f) GDPR (legitimate interest)
• Loading the newsletter form: Art. 6 (1) (a) GDPR / § 25 (1) TDDDG (consent via the cookie banner)
• Newsletter sign-up and dispatch: Art. 6 (1) (a) GDPR (consent)
• Retention of unsubscribed contacts on the suppression list: Art. 6 (1) (f) GDPR (legitimate interest in permanently observing and being able to demonstrate your unsubscribe)
• Technically necessary cookies and storage entries, including the setting for light or dark appearance: § 25 (2) no. 2 TDDDG (no consent required) in conjunction with Art. 6 (1) (f) GDPR (functional provision of the website)
• Demonstrating newsletter consent (double opt-in status and date the contact was created): Art. 6 (1) (f) GDPR (legitimate interest in demonstrating consent, Art. 7 (1) GDPR)
• Logging technical dispatch events when sending the newsletter: Art. 6 (1) (f) GDPR (legitimate interest in reliable delivery)
• Dealing with enquiries by email or telephone: Art. 6 (1) (f) GDPR, and for contract-related enquiries Art. 6 (1) (b) GDPR
• Order, payment processing, access code: Art. 6 (1) (b) GDPR (performance of a contract), Art. 6 (1) (c) GDPR (commercial and tax retention obligations)
• Electronic withdrawal function (§ 356a BGB): Art. 6 (1) (c) GDPR (legal obligation), Art. 6 (1) (b) GDPR (performance of the contract)
• Voluntary mention as a supporter: Art. 6 (1) (a) GDPR (consent)
• Gift function — delivery of the access code to the person receiving the gift: Art. 6 (1) (f) GDPR (legitimate interest in delivering the gift commissioned by the person giving it)

Retention periods

• Server log files: 7 days
• Consent cookie: 1 year
• Setting for light or dark appearance: until you clear your browser storage
• Newsletter: your email address on the distribution list until you unsubscribe. If you do not confirm the sign-up, we delete the record after 30 days.
• Suppression list entry at Brevo (only your email address is stored): for as long as we operate the newsletter. If you object to this storage as well, we delete the entry; we can then no longer technically prevent renewed contact.
• Demonstrating consent (date the contact was created and double opt-in status): three years from the end of the year in which you unsubscribed, based on the limitation periods of §§ 195, 199 BGB
• Enquiries by email or telephone: until conclusively dealt with; commercial letters six years, accounting documents eight years (§ 257 (4) HGB, § 147 (3) AO)
• Technical logs arising at Brevo (access data when the form is loaded, dispatch events): 6 months
• Order and invoice data: 7 years
• Access code: until the consideration is redeemed or until your claim becomes time-barred by law
• Name and email address of the person receiving the gift: until the access code is redeemed; if it is not redeemed, until the gift-giver's claim to the consideration becomes time-barred by law
• Voluntary mention as a supporter: until you revoke it
• Acknowledgement of receipt for the electronic withdrawal function: 3 years from receipt of the acknowledgement (regular limitation period, § 195, § 199 (1) BGB)

Your rights

You have the right to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR), where the respective legal conditions are met. You can revoke consent you have given at any time (Art. 7 (3) GDPR). The revocation does not affect the lawfulness of the processing carried out up to that point. An email to datenschutz@h-oursapp.com is enough to exercise these rights. Beyond that you can lodge a complaint with any data protection supervisory authority (Art. 77 (1) GDPR), in particular the authority of your place of residence, your workplace or the place of the alleged infringement. The authority responsible for us is: Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern, Werderstraße 74a, 19055 Schwerin, www.datenschutz-mv.de.

Right to object to processing based on legitimate interests

Insofar as we process your data on the basis of Art. 6 (1) (f) GDPR — this concerns the server log files, the consent cookie, the suppression list entry after unsubscribing, the handling of enquiries by email or telephone, proof of consent given, the logging of technical dispatch events and the delivery of a gift to you as the person receiving it —, you have the right to object to this processing at any time on grounds relating to your particular situation. An email to datenschutz@h-oursapp.com is sufficient. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Unsubscribing from the newsletter

You can unsubscribe at any time via the unsubscribe link in every email or by email to datenschutz@h-oursapp.com. After unsubscribing, your email address remains on a suppression list at Brevo so that you receive no further newsletters from us and we can demonstrate your unsubscribe. Only the email address is stored there; if you object to this storage as well, we delete the entry.

Automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

How current this privacy policy is

Diese Datenschutzerklärung ersetzt Version 2.2 und trägt die Version 2.3 mit Stand vom 10.11.2026. Wenn wir unser Angebot oder die eingesetzten Dienste ändern, passen wir sie an. Die jeweils aktuelle Fassung findest du unter h-oursapp.com/datenschutz.