Privacy Notice

I. Name and Address of the Controller

II. Data Protection Officer

You can contact our Data Protection Officer at the above address or by email at: info@mypaytech.de

III. Definitions

This privacy policy uses terms defined in the GDPR. To ensure clarity, we explain the most important terms below:

• Personal Data: Any information relating to an identified or identifiable natural person. A person is identifiable if they can be identified directly or indirectly, e.g., via name, identification number, location data, online identifier, or specific characteristics.
• Data Subject: Any identified or identifiable person whose personal data is processed by us.
• Processing: Any operation performed on personal data, such as collection, storage, retrieval, use, disclosure, restriction, or deletion, whether automated or not.
• Restriction of Processing: The marking of stored personal data with the aim of limiting its future processing.
• Profiling: Automated processing of personal data used to evaluate or predict personal aspects such as interests, behavior, location, or economic situation.
• Pseudonymization: Processing of personal data in such a way that it can no longer be attributed to a specific individual without additional information. This additional information is stored separately and protected.
• Controller: The entity that determines the purposes and means of processing personal data.
• Processor: An entity that processes personal data on behalf of the controller.
• Recipient: An entity to whom personal data is disclosed, whether a third party or not.
• Third Party: Any entity other than the data subject, controller, processor, or persons authorized to process data under the controller’s or processor’s responsibility.
• Consent: Any freely given, informed, and unambiguous indication of the data subject’s wishes by which they agree to the processing of personal data.

IV. General Information on Data Processing

Scope of Processing Personal Data

We process personal data only insofar as necessary to provide a functional website and deliver our content and services. Processing generally takes place only with prior consent, unless consent cannot be obtained and processing is legally permitted.

Legal Bases

Depending on the purpose, processing is based on:

• Art. 6(1)(a) GDPR (Consent)
• Art. 6(1)(b) GDPR (Contract / Pre-contractual measures)
• Art. 6(1)(c) GDPR (Legal obligation)
• Art. 6(1)(d) GDPR (Vital interests)
• Art. 6(1)(f) GDPR (Legitimate interest)

Deletion and Storage Duration

We delete or block personal data as soon as the purpose for storage ceases to apply. Longer storage may occur if required by law. After statutory retention periods expire, data is deleted unless required for contract conclusion or performance.

V. Provision of the Website and Log Files

Description and Scope

Each time our website is accessed, our system automatically collects information such as:

• Browser type and version
• Operating system
• Internet service provider
• IP address
• Date and time of access
• Referrer pages
• Pages accessed via our website

Log files may contain data allowing personal identification (e.g., IP address). This data is not merged with other personal data.

Legal Basis & Purpose

Legal Basis: Art. 6(1)(f) GDPR (Legitimate interest)
Purpose: Ensuring technical delivery, functionality, IT security, error analysis, and optimization. No marketing evaluation occurs in this context.

Storage Duration & Objection

Session data is deleted after the session ends. Log files are generally deleted after one day; IP addresses may be anonymized if stored longer. Since collection is technically necessary, there is no option to object.

VI. Use of Cookies

Description

We use cookies (small text files stored in the browser). Some enable analysis of website usage, including search terms entered, page visit frequency, use of specific functions, visitor types, traffic sources, and user behavior.

Data is pseudonymized and not stored together with other personal data. Users are informed via a cookie banner and can disable cookies in browser settings.

Legal Basis & Purpose

Legal Basis: Technically necessary cookies: Art. 6(1)(f) GDPR. Analytical cookies: Art. 6(1)(f) GDPR.
Purpose: Improving website functionality and user experience.

Storage & Control

Cookies remain on the device until deleted. Disabling cookies may limit functionality.

VII. Contact Forms and Email Contact

Description

When using contact forms, entered data is transmitted and stored. Additionally, the IP address and date/time are collected. Depending on the form, we require Name and Email, while Phone and Company details may be optional. Data is not shared with third parties and is used solely to process inquiries.

Legal Basis

• Contact form: Art. 6(1)(b) GDPR
• Email contact / FAQ: Art. 6(1)(f) GDPR
• Contract-related inquiries: Art. 6(1)(b) GDPR

Storage Duration & Withdrawal

Deleted once the inquiry is fully processed. Technical submission data is deleted within 7 days. You may object at any time via email: info@mypaytech.de

VIII. Use of Google Analytics

This website uses Google Analytics, a web analytics service. IP anonymization is activated. IP addresses are shortened within the EU/EEA before transfer. Only in exceptional cases is the full IP transferred to the US and shortened there.

Legal Basis: Art. 6(1)(a) GDPR (Consent)
Purpose: Analyzing usage frequency, optimizing content and structure, and improving services.

Opt-Out: You can prevent tracking by installing a browser plugin or clicking an opt-out link. If cookies are deleted, the opt-out must be repeated.

IX. Use of Hotjar

We use Hotjar to analyze user behavior and improve usability. Collected data includes: anonymized IP, screen size, device/browser info, country, preferred language, pages visited, time spent, click behavior, date/time, and referring domain. Data is pseudonymized and Hotjar does not sell data.

Legal Basis: Art. 6(1)(a) GDPR (Consent)
Withdrawal: Consent may be revoked anytime via info@mypaytech.de

X. Benefit Calculator

We provide a benefit calculator to estimate savings under the MYPAYTECH program. No personal data is stored or linked to IP addresses. Processed data includes purchase price, gross salary, tax class, and (in expert mode) state, children status, tax/insurance contributions, etc.

Legal Basis: Art. 6(1)(f) GDPR (Legitimate interest). No data is stored; calculations occur in real time.

XI. Feedback and References

Users may submit testimonials for publication. Collected data includes date/time, name, company, email, optional image/logo, and reference text.

Legal Basis: Art. 6(1)(a) GDPR (Consent). Publication is generally unlimited in time unless withdrawn. Withdrawal is possible via info@mypaytech.de

XII. Rights of Data Subjects

You have the following rights regarding your data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Restriction of Processing (Art. 18 GDPR)
• Erasure (Art. 17 GDPR)
• Notification
• Data Portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of Consent
• Automated Decision-Making Protection (Art. 22 GDPR)
• Right to Lodge a Complaint with a supervisory authority