Privacy policy

Controller

Alexander Baruschke, Bramfelder Dorfplatz 4a, 22179 Hamburg, kontakt@rualba.group

Anonymous counting

Per day and language we count how often the start page is opened, the test is begun, the checkout is reached and a result is shown. Only a total is stored, no cookie and no identifier. Against mass requests we keep an hourly changing checksum of the IP address for at most two hours, after which it is deleted. The legal basis is our legitimate interest in a working order path, Article 6(1)(f) GDPR.

What this site processes

While you answer the questions, your answers stay in your browser, in local storage. Your access key after the purchase and your choice between light and dark are stored there as well. This is technically necessary for the service you call up (section 25(2)(2) TDDDG). You can clear the storage in your browser at any time.

With the order your answers, the order number, the access key and later your card are stored on our server at STRATO, and after payment your email address as well. Purpose: your card appears on any device through the link in the order email, and the confirmation under section 312f BGB reaches you. The legal basis is Article 6(1)(b) GDPR. Answers and card are deleted two years after the order.

Follow-up after fourteen days. Only if you tick the box do we send you exactly one email asking whether one of the names was a match. The legal basis is your consent under Article 6(1)(a) GDPR, revocable by email to kontakt@rualba.group.

Suggestions and feedback. Whatever you write in the field asking for a further test, or in the follow-up, is stored without a name in order to improve the offer. The legal basis is Article 6(1)(f) GDPR.

When the site is opened, the host processes technically necessary access data. The legal basis is Article 6(1)(f) GDPR, legitimate interest in secure operation.

Host: STRATO GmbH, Otto-Ostrowski-Strasse 7, 10249 Berlin. The data processing agreement under Article 28 GDPR is part of STRATO’s terms and conditions. Processing takes place in data centres in Germany.

Fonts

The Libre Caslon Text typeface is stored on our own web space. There is no connection to Google and no transfer to a third country.

What this site does not do

No cookies, no reach measurement, no advertising networks, no embedded third-party content. That is why there is no consent banner either.

In the paid version

Payment through Stripe. Payment runs through Stripe Payments Europe, Limited, Ireland. Your name, billing address, email address, the amount and the payment details you enter on the payment page go there. The legal basis is Article 6(1)(b) GDPR, performance of the contract. For the payment process Stripe is a controller in its own right under Article 4(7) GDPR. We never see card details.

Invoice data. Name, address, invoice number, amount and date are kept for ten years under section 147(3) of the German Fiscal Code and section 257 of the German Commercial Code. The legal basis is Article 6(1)(c) GDPR.

Your rights

Access, rectification, erasure, restriction, data portability, objection and complaint to a supervisory authority. The competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Strasse 22, 20459 Hamburg.