Privacy policy

1. Controller

Plexify GmbH, Lenbachallee 12, 85521 Ottobrunn, Germany. Represented by Philipp Kang, Jonas Leeb and Maik Tran.

Email: business@goodburn.app. Further details are in the imprint.

2. Principle

This website uses no advertising services and embeds no third-party content. For audience and performance measurement we use only the services of our hosting provider described in section 4. Fonts are served from our own server; there is no connection to Google Fonts.

3. Hosting and server logs

The website runs on Vercel Inc., USA. When you visit, Vercel processes technically necessary access data: IP address, time, requested address, referrer and user agent. Without this data the site cannot be delivered or protected against attacks.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is secure and reliable operation. Vercel is our processor under Art. 28 GDPR. The website is served from a data centre in Frankfurt am Main. Where data is transferred to the USA, this relies on the adequacy decision for the EU-US Data Privacy Framework, under which Vercel is certified, and additionally on standard contractual clauses.

Log data is stored only briefly and then deleted automatically.

4. Audience and performance measurement

To understand how our website is used and how fast it loads, we use Vercel Web Analytics and Vercel Speed Insights. The provider is Vercel Inc., our processor named in section 3. We set no cookies for this and build no profiles across websites.

The following data is collected:

• page visited, time and referring website
• UTM campaign parameters from the address; we remove all other parameters before transmission
• approximate location (country, region, city)
• browser, operating system and device type
• for Speed Insights also load times, network speed and the page elements concerned

So that the page views of one visit can be counted together, Vercel derives a hash value from the request, which is discarded after 24 hours. We see only aggregated statistics and cannot attribute them to a person.

We also count individual actions: clicks on request and app store buttons, use of the price calculator (only as a rough budget range), the start and outcome of a form request, copying an invitation code and switching language. Form contents and invitation codes are not transmitted.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is improving the website and measuring how well our communication works. You can object to this measurement: if your browser sends the Global Privacy Control signal, it does not take place. Content blockers also prevent it.

The statistics remain available to us for up to 24 months. Section 3 applies to transfers to the USA.

5. Language cookie

We store your language choice (German or English) in a cookie named NEXT_LOCALE so the website stays in the language you chose. The cookie contains only the language code and is deleted when you close your browser.

The cookie is strictly necessary for the service you requested; the legal basis is Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. We set no other cookies.

6. Contact form

When you request a campaign or ask us a question, we process your name, email address, company, request type, optional message and the page you sent the form from. We use this only to answer your request and, where relevant, to prepare a campaign with you.

The legal basis is your consent under Art. 6(1)(a) GDPR, given with the checkbox in the form, which you can withdraw at any time with effect for the future, for example by email to business@goodburn.app. Where your request aims at a contract, Art. 6(1)(b) GDPR also applies.

To protect against automated submissions we limit the number of requests per IP address. The IP address is held in memory for at most one hour for this purpose and is not stored permanently. The legal basis is Art. 6(1)(f) GDPR.

To deliver your request to our inbox we use Resend, Inc., USA, as a processor under Art. 28 GDPR. Emails are sent from servers in the European Union. Where Resend processes data in the USA, the transfer relies on the adequacy decision for the EU-US Data Privacy Framework and additionally on standard contractual clauses.

We delete your request once it has been dealt with. If a contract is concluded, we keep the related correspondence for the statutory retention periods under German commercial and tax law (six or eight years).

7. Invitation pages

At goodburn.app/j/… we show a campaign's invitation code. The code belongs to the campaign, not to a person. Besides the server logs, we measure these pages as described in section 4 and remove the code from the address first. The "Copy code" function runs in your browser; we count only that a code was copied, not which one.

8. Links to app stores and the portal

The website links to the Apple App Store, Google Play and the GoodBurn portal. Data is only sent to these providers when you click a link. Their privacy notices apply there.

9. Recipients

Your data is received only by the processors named above and by the people at our company who handle your request. We do not sell data or pass it on for advertising.

10. No automated decision-making

No automated decision-making, including profiling under Art. 22 GDPR, takes place.

11. Your rights

You have the right at any time to:

• access the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)
• withdraw consent with effect for the future (Art. 7(3) GDPR)

Contact business@goodburn.app for this. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.

12. Changes

We update this policy when our processing changes. The version published on this page applies.