Privacy policy, dotog.app
1) Introduction and contact details of the controller
1.1 We are pleased that you are visiting our website dotog.app and thank you for your interest. Below, we explain how we handle your personal data when you use our website. Personal data means any data that can be used to identify you personally.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (DSGVO) is:
Frank Reuter, trading as “Minntera”
Döhlener Hang 3
01705 Freital
Deutschland
Tel.: +49 173 1843424
Email: mail@dotog.app
“DOTOG” and “BlueBuddys” are product brands of Minntera / Frank Reuter.
2) Data collected when you visit our website
2.1 When you use our website solely for information, meaning that you do not register or otherwise send us information, we only collect the data that your browser transmits to the website server (known as “server log files”). When you access our website, we collect the following data, which we require for technical reasons:
- Website accessed
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you reached the site
- Browser and browser version used
- Operating system used
- IP address
The server log files are maintained by our hosting provider Hostinger (a processor in the EU, see section 3). We do not analyse the IP address or create location or movement profiles. The IP address processed for spam prevention in the forms is only stored as a hash and for a short period (see section 5.3).
Processing takes place pursuant to Art. 6 Abs. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not shared or used for any other purpose. We reserve the right to review the server log files subsequently if there are specific indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser's address bar.
3) Hosting
We use Hostinger International Ltd. (61 Lordou Vironos Street, 6023 Larnaca, Zypern) to host our website. The provider delivers its services on servers within the European Union. We have concluded a data processing agreement (AVV) with Hostinger pursuant to Art. 28 DSGVO. The pages are hosted by Hostinger in the EU. Optional analytics using PostHog is described in 4.4.
Provider's privacy information: https://www.hostinger.com/legal/privacy-policy
4) Fonts, cookies and browser storage
4.1 This website only uses locally hosted fonts. No connection is made to Google Fonts, Adobe Fonts or other external font servers. No IP addresses are transmitted to third parties to display fonts.
4.2 This website uses no advertising pixels and no social media plugins. Non-essential storage only takes place if you expressly consent to the optional analytics category in the cookie settings (see 4.4). Without this consent, only technically necessary browser storage is used (cookie consent storage, see 4.3).
4.3 Notice banner and browser storage: On your first visit, we show you a notice banner that informs you about browser storage. No consent is required for strictly necessary storage (banner acknowledgement) (§ 25 Abs. 2 Nr. 2 TDDDG). We obtain your express consent in advance for the optional analytics category (see 4.4). By clicking “Understood”, you only acknowledge that you have been informed about strictly necessary storage, so that the banner does not appear again on every visit. You can use the “Cookie settings” link in the footer to view the details again and change your choice for the optional category at any time.
- Strictly necessary (always active): storage of the banner acknowledgement (
dotog-cookie-consent, storage period 12 months). This entry is kept in your browser's local storage (localStorage), is technically necessary (§ 25 Abs. 2 Nr. 2 TDDDG) and does not require consent. No data is transmitted to third parties. - Help & feedback, tester checklist (only if you use them): your selected role (
dotog-hilfe-role) and your checked steps and notes (dotog-hilfe-protokoll) are stored in your browser's localStorage so that they are still available on your next visit. They only leave your browser if you submit the log yourself. You can delete them using “Clear” on the page or through your browser storage settings.
4.4 Optional category: analytics. In addition to technically necessary storage, you can voluntarily enable an analytics category in the cookie settings. It is disabled by default and only takes effect after your express consent (Art. 6 Abs. 1 lit. a DSGVO). You can withdraw your consent at any time with effect for the future using the “Cookie settings” link in the footer.
- Provider: PostHog Inc., data processing on servers in the EU (Frankfurt).
- Data processed: pages accessed, technical device and browser metadata. When it receives an event, PostHog also processes your IP address and uses it for an approximate geographical assignment at country and region level (GeoIP) and to prevent abuse. This processing also takes place exclusively on the basis of your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO. No names, no email addresses and no creation of a user profile, as we use PostHog without a personal identifier (configuration
person_profiles: identified_onlywithout an identification call). - Form of storage: localStorage in your browser, no cookie. Storage continues until you clear your browser storage or withdraw consent.
- Processing on our behalf: processing is based on PostHog's standard contractual terms for cloud customers (Art. 28 DSGVO). This contractual model does not provide for a separate, individually negotiated data processing document.
- Provider's privacy information: https://posthog.com/privacy
5) Contacting us and web forms
5.1 Personal data is collected when you contact us (by email at mail@dotog.app). This data is stored and used solely to respond to your enquiry. The legal basis for processing is our legitimate interest in responding to your enquiry pursuant to Art. 6 Abs. 1 lit. f DSGVO. If you contact us with the aim of entering into a contract, Art. 6 Abs. 1 lit. b DSGVO is an additional legal basis. Your data will be deleted once your enquiry has been fully handled.
5.2 Several forms are available on this website. Entries are not stored in a database, but are sent immediately by encrypted email (authenticated SMTP) to our mailbox mail@dotog.app on EU servers. No transfer to a third country takes place through the website. The same applies to feedback and the test log on the help page.
- Contact form: we process your selected topic, your email address, your message and, optionally, your name. Purpose: responding to your enquiry. Legal basis: Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in responding), and additionally Art. 6 Abs. 1 lit. b DSGVO for contract-related enquiries. Deletion once the enquiry has been fully handled.
- Account deletion: we process your account email address and, optionally, a reason and a message. Purpose: handling your request for deletion pursuant to Art. 17 DSGVO. Legal basis for handling the deletion request: Art. 6 Abs. 1 lit. c i.V.m. Art. 17 DSGVO; we process the optional information (reason, message) on the basis of your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO.
5.3 Protection against abuse: to prevent spam and automated mass requests, when you submit a form we store a cryptographically hashed (obscured) value of your IP address together with timestamps in a temporary directory, normally for one hour, or for up to 24 hours in the event of repeated abuse. Afterwards, we automatically delete it the next time the form is accessed. This also applies to the account recovery page. In addition, a hidden field (“honeypot”) and a timing check are used. The legal basis is our legitimate interest in preventing abuse pursuant to Art. 6 Abs. 1 lit. f DSGVO. No tracking or profiling takes place.
5.4 The forms are intended for adults or persons able to give consent under Art. 8 DSGVO (from the age of 16 in Germany). If users are younger, a parent or legal guardian must make the enquiry.
5.5 Note on the difference between the website and the app: the threshold under Art. 8 DSGVO applies to this website (ability to consent to information society services from the age of 16). The same threshold applies in the app: an independent account from age 16; younger users join with a child code. For details, see section 6 of the app privacy policy.
6) Rights of the data subject
Applicable data protection law grants you comprehensive rights as a data subject in relation to the controller. You can exercise these rights by contacting mail@dotog.app:
- Right of access (Art. 15 DSGVO): information about the data stored about you.
- Right to rectification (Art. 16 DSGVO): correction of inaccurate data.
- Right to erasure (Art. 17 DSGVO): deletion of your personal data.
- Right to restriction of processing (Art. 18 DSGVO).
- Right to data portability (Art. 20 DSGVO).
- Right to withdraw consent given (Art. 7 Abs. 3 DSGVO).
- Right to lodge a complaint with a supervisory authority (Art. 77 DSGVO): you have the right to lodge a complaint with any supervisory authority, in particular the authority at your habitual residence or place of work. The authority responsible for us is the Saxon Data Protection and Transparency Commissioner, Devrientstraße 5, 01067 Dresden, www.datenschutz.sachsen.de.
We respond to access requests within one month of receipt pursuant to Art. 12 Abs. 3 DSGVO. For complex or numerous requests, the period may be extended by two further months; we will inform you within the first month.
Right to object (Art. 21 DSGVO): if we process your personal data on the basis of our overriding legitimate interest following a balancing of interests, you have the right to object to this processing at any time, with effect for the future, on grounds relating to your particular situation.
7) Storage period
Server log files are stored for a maximum of 7 days and then deleted automatically unless there are specific indications of unlawful use. Email correspondence and enquiries submitted through the web forms are deleted once the respective matter has been fully handled, unless statutory retention periods prevent this. We store the hashed IP values used to prevent abuse normally for one hour, or for up to 24 hours in the event of repeated abuse. Afterwards, we automatically delete them the next time the form is accessed. This also applies to the account recovery page.