Privacy Policy

1. Controller

The controller responsible for data processing on this website and within the Taktplan application is:
Plattensoft [legal form]
[Street, postal code, city]
Email: contact@plattensoft.com

2. What data we process

• Account data at registration: username, email address, hashed password.
• Content you enter yourself: tasks, notes, calendar entries, messages.
• Connection/log data (IP address, timestamp, page accessed) when visiting the website and using the application.
• Payment data, if a paid plan is booked [payment provider to be added].

3. Purpose and legal basis

Processing takes place to provide the Taktplan application (Art. 6(1)(b) GDPR — performance of a contract), to safeguard legitimate interests (Art. 6(1)(f) GDPR — e.g. security, abuse prevention), and, where required, on the basis of your consent (Art. 6(1)(a) GDPR).

4. Encryption & security

Passwords are stored exclusively as hashes, never in plain text. Vault entries (password manager) are encrypted client-side, zero-knowledge — we ourselves cannot access them. [Details on server infrastructure/hosting location to be added.]

5. Disclosure to third parties

Your data is only disclosed to third parties where legally required or necessary to perform the contract (e.g. hosting provider, email delivery, payment provider). [List of processors to be added.]

6. Retention period

Your data is stored for as long as your account exists. After your account is deleted, personal data is removed in accordance with our data retention policy. [Specific retention periods to be added.]

7. Your rights

You have the right to access, rectify, erase, restrict the processing of, and object to the processing of your personal data, and to port your data, as well as the right to lodge a complaint with a supervisory authority.

8. Cookies & tracking

[To be filled in once determined: which cookies/analytics tools are actually in use — see docs/todo.md's open "Cookie consent" / "Analytics integrated" items.]