Privacy Policy

With the following privacy policy, we inform you about the nature, scope, purpose, duration, and legal basis of the processing of personal data when visiting this website. Personal data is any information relating to an identified or identifiable natural person (Art. 4 No. 1 of Regulation (EU) 2016/679, the General Data Protection Regulation, hereinafter the "GDPR").

I. Controller

The controller responsible for the processing of personal data on this website within the meaning of the GDPR is:

Attouch GbR
c/o IP-Management #10878
Ludwig-Erhard-Str. 18
20459 Hamburg
Germany

For data protection inquiries, please contact us at privacy@attouch.app.

II. General notes on data processing

We process personal data of our visitors only insofar as necessary to provide a functional website and, where you choose to use it, our beta waitlist signup. Beyond the cases described below, we do not collect any personal data. This website uses no cookies, no analytics tools, no trackers, and no marketing pixels.

Where we process personal data, this is based on Art. 6 Para. 1 lit. f) GDPR (legitimate interest) for the technically necessary provision of the website and the server log files, and on Art. 6 Para. 1 lit. a) GDPR (consent) for the beta waitlist signup.

Your data will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion is not in breach of any statutory storage obligations or unless otherwise stipulated below.

III. Hosting and server log files

This website is hosted on our own servers rented from Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany, and no personal data is transferred outside the European Union. Technical operation of the servers is carried out on our behalf by our processor, Simão Gomes Viana (c/o IP-Management #10911, Ludwig-Erhard-Str. 18, 20459 Hamburg, Germany), who is bound by a data processing agreement pursuant to Art. 28 GDPR.

When the website is accessed, the following data is processed for technical reasons:

• IP address of the requesting device
• Date and time of access
• Name and URL of the file requested
• Website from which access was made (referrer URL)
• Browser used and, where applicable, your operating system

This data is stored in server log files for security reasons — for example, to ensure the availability and integrity of the site and to defend against attacks. The legal basis is Art. 6 Para. 1 lit. f) GDPR; our legitimate interest lies in the secure, stable, and efficient provision of this website. Log data is not merged with other data sources, is retained only for as long as necessary for these purposes, and is then deleted automatically as part of log rotation.

IV. SSL/TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the fact that the browser's address bar shows "https://" and by the lock symbol in your browser bar.

V. Locally hosted fonts

This website uses the Inter and Montserrat fonts, which are hosted locally on the same server that delivers this page. No connections are made to external servers (in particular not to Google Fonts) to retrieve fonts. Consequently, no personal data is transferred to third parties in this context.

VI. Beta waitlist / newsletter signup

When you sign up for our beta waitlist, we collect the following data:

• Name and email address — to contact you about beta access
• Area of interest (optional) — to understand what features matter most to you

Legal basis: Your explicit consent (Art. 6 Para. 1 lit. a) GDPR), given via the consent checkbox on the signup form. You may withdraw your consent at any time with effect for the future (Art. 7 Para. 3 GDPR).

Storage: Your data is stored on our self-hosted mailing list system (Listmonk), operated on our own servers hosted with Hetzner Online GmbH in Germany, under the same processing arrangement described in Section III. No data is shared with third parties.

Retention: Your data is retained until you unsubscribe or request its deletion. You can unsubscribe at any time using the link provided in every email, or by contacting us at privacy@attouch.app.

Consent provenance: We record the source, method, and date of your consent alongside your subscription data.

VII. Rights of data subjects

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7 Para. 3 GDPR)

In particular, under Art. 21 GDPR you have the right to object to the future processing of your data pursuant to Art. 6 Para. 1 lit. f) GDPR. To exercise your rights, please contact privacy@attouch.app.

You also have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR (Art. 77 GDPR). The supervisory authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
www.lda.bayern.de

VIII. The Attouch app

The Attouch mobile application has its own detailed privacy policy, available on this website and inside the app. For downloading the app, the privacy provisions of the respective platform provider (Google or Apple) additionally apply.

IX. Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or in order to implement changes to our services. The new privacy policy will apply on your next visit.