Privacy policy

This policy explains what personal data is processed when you visit answertogo.com, contact us, join our waitlist or order a subscription. In short: this website uses no analytics, no tracking pixels, no advertising cookies and loads no external fonts or scripts.

1. Controller

Yasmin Schwarze
Answer To Go
Albert-Einstein-Str. 47
c/o Autorenglück
02977 Hoyerswerda
Germany

E-mail: [email protected]

We are not required to appoint a data protection officer.

2. Hosting and content delivery (Cloudflare)

This website is hosted and delivered via Cloudflare Pages and the Cloudflare network (content delivery network). Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, your browser necessarily transmits technical data to Cloudflare's servers: IP address, date and time of the request, requested URL, referrer URL, browser type and version, operating system. This data is used to deliver the website, to protect it against attacks (e.g. DDoS) and to ensure stability. It is not combined with other data and not used to create profiles.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, fast and reliable website). We have concluded a data processing agreement with Cloudflare. Cloudflare is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR); in addition, Standard Contractual Clauses apply. Cloudflare may, in individual cases, set strictly necessary security cookies (e.g. for bot protection); these are exempt from consent under § 25(2) TDDDG. More information: cloudflare.com/privacypolicy.

3. Contact by e-mail

If you write to us by e-mail, we process your e-mail address, your name (if given) and the content of your message to answer your enquiry. Legal basis: Art. 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual steps, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). We delete the data once the enquiry has been dealt with, unless statutory retention obligations apply (e.g. for business correspondence, up to 6 years under German commercial law).

4. Waitlist / newsletter (MailerLite)

You can join our waitlist through a form hosted by MailerLite (the link opens MailerLite's form page). Provider: MailerLite Limited, 88 Harcourt Street, Dublin 2, D02 DK18, Ireland. We process your e-mail address and any other details you enter in order to inform you about availability, launch news and our services.

Double opt-in: After you sign up you receive an e-mail asking you to confirm. Only after confirmation are you added to the list. To prove consent, we store the time of sign-up and confirmation and the IP address used. MailerLite may measure whether an e-mail was opened and which links were clicked, to improve our e-mails.

Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw consent at any time with effect for the future – via the unsubscribe link in every e-mail or by writing to [email protected]. After you unsubscribe we delete your data, except that we may keep your e-mail address on a block list to make sure we don't contact you again (Art. 6(1)(f) GDPR).

MailerLite stores data in data centres in the EU. Its parent company MailerLite, Inc. is based in the USA; where data is transferred to the USA, this is based on the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses. We have concluded a data processing agreement with MailerLite. More information: mailerlite.com/legal/privacy-policy.

5. Orders and payment (Lemon Squeezy as merchant of record)

Subscriptions are sold through Lemon Squeezy, which acts as our authorised reseller and merchant of record. Provider: Sold through Link, LLC (formerly Lemon Squeezy, LLC), 222 South Main Street, Suite 500, Salt Lake City, UT 84101, USA – a Stripe company. When you click "Get started", you are taken to Lemon Squeezy's checkout. Lemon Squeezy processes your payment details, billing address, tax information and order data as an independent controller, under its own privacy policy: lemonsqueezy.com/privacy.

We receive from Lemon Squeezy the information needed to provide our service: name, company, e-mail address, country, VAT ID (if provided), chosen plan and subscription status. We do not receive full card details. Legal basis: Art. 6(1)(b) GDPR (performance of contract) and Art. 6(1)(c) GDPR (statutory retention obligations, e.g. up to 10 years for accounting records under German tax and commercial law). Data may be processed in the USA; Lemon Squeezy uses appropriate safeguards (e.g. Standard Contractual Clauses).

6. Data we process for our clients (data processing on behalf)

When we answer messages for a client business, we process the personal data of that business's customers (e.g. names, contact details, message contents) on behalf of and under the instructions of the client (Art. 28 GDPR). The client is the controller for this data; details are set out in the data processing agreement (DPA), available on request. Health data is not processed.

7. Business contact for prospecting

We may contact businesses whose business contact details are publicly available to introduce our service, in compliance with the applicable rules of the recipient's country. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in direct marketing, Recital 47 GDPR). You can object at any time (Art. 21 GDPR) by writing to [email protected]; we will then stop contacting you and only keep your address on a block list.

8. No analytics, no cookies, no tracking

We do not use web analytics, tracking or marketing cookies, social media plug-ins, embedded videos or externally loaded fonts. The site does not store or read any information on your device that is not strictly necessary.

9. Recipients

Personal data is only shared with the service providers named above, to the extent necessary, and with authorities where we are legally obliged to do so. Your data is not sold.

10. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent at any time (Art. 7(3)). You have the right to object at any time to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation, and to object to direct marketing at any time (Art. 21 GDPR). To exercise your rights, write to [email protected].

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the EU member state of your residence or place of work. The authority responsible for us is the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte), Dresden, Germany – datenschutz.sachsen.de.

11. Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

12. Changes

We may update this policy when our services or legal requirements change. The current version is always available on this page.

Deutsche Fassung: Datenschutzerklärung