Privacy
The controller is Global Prepaid UG (haftungsbeschränkt), Skarbinastraße 63, 12309 Berlin, [email protected], +49 30 70767051. The registered office and the register are named in the imprint. We do not appoint a data protection officer. The legal threshold for it has not been reached. Data protection requests go to [email protected].
Account
A customer account stores name, email and a password. The password is only stored as a check value, not in plain text. The sign-in is remembered by a cookie, thirty days, only for this website. Whoever turns on two-step sign-in stores the key for the six-digit codes as a check value. We store address and city if you enter them at checkout. The legal basis is the contract, Article 6(1)(b) of the General Data Protection Regulation.
We do not publish the email of the account. The account serves the purchase of the technical book and the storage of PDF and source code after payment.
Order
An order stores the technical book, the amount, the payment method, the status and the billing address. The cart is held in a cookie of its own until you order or empty it. The purpose is providing PDF and source code in the account. We keep invoices and payments for eight years, as far as the German Fiscal Code requires it. A software engagement does not come into being through an order in the shop, but through a written estimate that names scope and price.
Payment
Card and Klarna run through Stripe, PayPal through PayPal, if the method is connected at checkout. For the payment process these providers are controllers of their own. The data needed for the payment arises with them. We store the order number, the amount, the method and the provider's reference. We do not store card numbers. We show the account number for a bank transfer, it is not stored as your bank details.
License check of downloaded apps
An app that you downloaded asks our server at the start, at most once a day, whether its license key is active and whether a newer version exists. The license is for one workplace. The request contains the license key, the version number and a workplace id. The workplace id is encrypted in the app and decrypted on our server, then checked against the workplace stored for that license. On the first successful check we store that id with the license. Texts, photos and other details that you enter into the app are not sent. The license key belongs to your customer account, so that we and the support can tell which license applies to you. The purpose is the protection of the license and the notice about new versions. The legal basis is the contract and our legitimate interest, Article 6(1)(b) and (f).
The IP address of the request is part of the connection data that the operators named under operations and recipients may keep in their logs. We do not store it with the license key.
The editor in the account keeps your application data in the browser of the device, like the downloaded file. Only if you order the Bewerbungs-Cloud is a copy stored on our server: the texts, the photo and the saved applications. The copy is encrypted. The purpose is the sync between your devices and the PDF we build for you, Article 6(1)(b). You can delete the copy in the account. It is deleted with the account, and 30 days after the cloud contract ends. We do not use it for anything else.
Purchases on other platforms
If you buy from us on a marketplace such as eBay, the platform passes us your name, your email address and the order data. We use them to deliver the purchase and to prepare an account for you with this email address. The account stays inactive until we release it. Then you get an email with a link, and only after you confirm the address and choose a username and a password the account is active. Without this step you cannot sign in, and nobody else can. The legal basis is the contract, Article 6(1)(b). If you do not want the account, tell us and we delete it.
Contact, tickets, messages
The contact form stores name, email, subject and message. A ticket is attached to the signed-in account: topic, messages and number. Messages from the editorial team you see in the account, marked read or unread. The purpose is the answer to your request, Article 6(1)(b) or (f). The row stays as long as the process is open, and afterwards as far as retention is necessary.
An order and a request via the form currently do not trigger any automatic email. The message stays in the system. Write to [email protected] if you want a reply to this address.
Newsletter
Whoever enters their address in the footer stores with us the email, the time and a random key for the unsubscribe link. There is currently no sending by email. The address only lies in the list. Unsubscribing works via the link with this key. The legal basis is consent, Article 6(1)(a). You can withdraw consent at any time without the processing that was permissible until then becoming impermissible. On request we delete the address. Write to [email protected].
Besucherstatistik
Public pages count how often they are called up on a day and whether this browser has already been counted that day. For this a cookie with a random identifier and the date lies there, for about a year. We do not write the identifier into the statistics, nor names, addresses or IP addresses. The editorial team only sees totals per day and per page. The cookie is not required for the purchase. You can delete it in the browser. The next day the browser then counts as a new visitor.
Cookies
We set our own cookies, no advertising cookies and no reach measurement by a third party. The sign-in cookie is called pdf-templates-customer and applies for thirty days. The cart cookie is called pdf-templates-cart and applies for thirty days. The shop editorial cookie is called united-solutions-admin and applies for thirty days. The portfolio maintenance cookie is called rt_admin_session and applies for twelve hours. The counting cookie is called pdf-templates-view and applies for about a year. Sign-in, cart and editorial are required to provide the respective requested service, § 25(2) no. 2 of the Telecommunications Digital Services Data Protection Act. The cookies are only readable for this website and not for scripts of the page.
Operations and recipients
The website runs on a server at Hetzner in the European Union and is reachable via Cloudflare. The connection is encrypted. This creates technical connection data that these operators may keep in their own logs, including the IP address. We do not sell addresses and do not pass them on for advertising purposes. Recipients are the named technical services and, if you choose this payment method, Stripe and PayPal. A legal obligation, for example toward the tax authorities, remains unaffected.
Countries outside the European Economic Area
Stripe and PayPal usually process a payment from the European Economic Area there. Cloudflare may process data in the USA. For the USA, the adequacy decision of the European Commission applies if the recipient is certified under it. Otherwise the standard contractual clauses of the Commission are the basis.
Log
We write sign-ins and failed sign-ins into an operations log: time, process, the email concerned and the IP address. The purpose is the security of the shop. The legal basis is Article 6(1)(f). We delete the log line after one year.
Children
Contracting parties are adults. We do not create an account for a child and do not ask for the name of a child.
Which details are necessary
Without name, email and password there is no account. Without the details at checkout there is no order. A message via the contact form needs name, email and the text. The other details are voluntary.
No automated decision
There is no automated decision and no profiling that would have a legal effect on you or similarly affect you, Article 22 of the General Data Protection Regulation.
Your rights
You can request access, rectification, erasure, restriction of processing and the release of the data in a common format, Articles 15 to 20. Where we process on the basis of a legitimate interest, you can object, Article 21. You can withdraw consent, for example for the newsletter list, at any time. We may still keep some data as long as a legal retention duty or an open claim stands in the way. The request goes to [email protected].
You can complain to a data protection supervisory authority, Article 77. The Berlin Commissioner for Data Protection and Freedom of Information is responsible. The registered office is named in the imprint.