Data privacy

I take the protection of your personal data very seriously and strictly adhere to the rules of the data protection laws. Personal data are collected on this website only to the technically necessary extent. Under no circumstances are the collected data sold or passed on to third parties for other reasons.

The following statement provides you with an overview of how I ensure this protection and what kind of data is collected for which purpose.

#Data processing on this website

I automatically collect and store information in the server logs that your browser transmits. These are:

• Browser type/version
• Operating system used
• Referrer URL (the previously visited page)
• Hostname of the accessing computer (IP address)
• Time of the server request

These data cannot be attributed to specific individuals. A combination of these data with other data sources is not conducted.

#Google conversion tracking

This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Conversion Tracking, Google and we can recognize if the user has performed specific actions. For instance, we can evaluate which buttons on our website are clicked how often and which products are viewed or purchased frequently. This information is used to create conversion statistics. We get to know the total number of users who clicked on our ads and what actions they have taken. We do not receive any information that allows us to personally identify the user. Google itself uses cookies or similar recognition technologies for identification.

The use of this service is based on your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent is revocable at any time.

More information about Google Conversion Tracking can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de.

#Enhanced conversions

If you've allowed cookies and buy Cakedesk, we use Google's enhanced conversions. Your browser turns the email address you enter at checkout into a hash, an irreversible code, and sends only that code to Google along with the purchase. Google compares it with the hashed email addresses of its own users, so it can tell whether the purchase came after a click on one of our ads. We only receive aggregated statistics from this, not data about individual people. If you decline cookies, the code isn't used.

#Facebook Pixel

This website uses the Facebook Pixel by Meta Platforms Ireland Limited ("Meta"), Merrion Road, Dublin 4, D04 X2K5, Ireland.

The Facebook Pixel allows us to measure the effectiveness of our Facebook ads and to optimize ads for statistical and market research purposes. The data collected in this way is anonymous to us, meaning we do not see the personal data of individual users. However, this data is stored and processed by Meta. Meta can connect this data with your Facebook account and use it for its own advertising purposes.

The Facebook Pixel is only activated once you have given your consent via the cookie banner. The use of this service is based on your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent is revocable at any time.

More information about the protection of your privacy can be found in Meta's privacy policy: https://www.facebook.com/privacy/policy/.

#Error reports from the AI proposal generator

By default, Cakedesk does not store your chat history or the current state of your proposal on its servers. A crash report is automatically sent to Rollbar, Inc. in the United States only if a technical error occurs while you use the AI proposal generator. This crash report includes your chat history and the current state of your proposal. We use these reports to identify, analyze, and resolve errors and to improve the security and reliability of the proposal generator.

An error report may include the following data in particular:

• The error message and technical information about the error, such as a stack trace
• The time, requested endpoint, and type of request
• Technical details such as your browser, operating system, and IP address
• Your chat history with the AI proposal generator and the current state of your proposal

This processing is based on our legitimate interest in operating a secure, stable, and reliable AI proposal generator in accordance with Art. 6(1)(f) GDPR. Rollbar processes the error reports on our behalf. Data may be processed in the United States. Rollbar is certified under the EU-U.S. Data Privacy Framework.

For more information, see Rollbar's privacy policy: https://docs.rollbar.com/docs/privacy-policy.

#Emails

In Cakedesk, you have the option to send invoices and offers directly via email. If you wish to use this function, your consent to this privacy policy is required.

The emails are sent via the service Amazon SES (Simple Email Service) by Amazon Web Services (AWS). The emails are processed and delivered through AWS servers in the EU (Ireland).

Apart from error reports (see below), Cakedesk does not store the contents of the emails you send or the email addresses of your recipients. However, the following data are stored on the server to enable sending, to trace delivery problems, and to prevent misuse:

• Your email address, to verify the sender address
• A random ID of your Cakedesk installation
• The Message-ID, time, and language of each sent email, and whether it was delivered, could not be delivered (so-called "bounce"), or was reported as spam by a recipient
• Hash values (SHA-256) of the recipient addresses, of the email's subject and text, and of your IP address
• The domains of links and images in the email (e.g. "example.com", without the rest of the address)
• The file type and size of attachments, but not their names or contents
• Technical information about the app and operating system used to send the email (user agent)

A hash value is a kind of fingerprint of the data: it does not contain the content or the addresses themselves, but identical data always result in the same hash value. We use the hash values only to recognize, for example, whether the same email is sent to a large number of different recipients or whether several installations send emails from the same IP address.

We use these data to detect misuse of the email function, such as sending spam, and thereby protect recipients and the deliverability of all emails sent with Cakedesk. If we detect misuse, we may block your email address or your Cakedesk installation from sending emails. This processing is based on our legitimate interest in a secure email function that is free from misuse in accordance with Art. 6(1)(f) GDPR.

If a technical error occurs while sending an email, an error report is automatically sent to Rollbar, Inc. in the United States. This error report may include the content and recipients of the email, your email address, and technical details such as your IP address. We use these reports to identify and resolve errors and to detect misuse. This processing is based on our legitimate interest in accordance with Art. 6(1)(f) GDPR. Rollbar processes the error reports on our behalf and is certified under the EU-U.S. Data Privacy Framework.

If there are problems with sending, e.g., if an email could not be delivered, you may receive a notification from Cakedesk.

#Feedback email after downloading

If you enter your email address when downloading Cakedesk, I store it together with your language and the time. A few days later, I use it to send you a single email asking whether you're still using Cakedesk.

If you click one of the links in that email or write a comment, I store your answer and your comment together with your email address. This helps me understand what works well in Cakedesk and what I should improve.

The email is sent via the service Mailgun (Mailgun Technologies, Inc.) through servers in the EU.

This processing is based on your consent in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent and ask me to delete your data at any time by sending a short message to max@maxschmitt.me. If you do so before the email is sent, you won't receive it.

#Right to information

You have the right at any time to obtain information about the data stored concerning your person, their origin and recipients, as well as the purpose of storage. You can obtain information about the stored data via email. (max@maxschmitt.me).