Legal information

Privacy Policy

This Privacy Policy applies to all websites and online presences operated by edenDevelopment UG (in particular edendevelopment.de and gemtrackr.de) as well as all associated subdomains.

We are very pleased about your interest in our company and our software GemTrackr. Data protection is of a particularly high priority for us. Below, we inform you in detail about how we handle your data when you visit our website or use our software.

1. Data Controller

The data controller responsible for processing data on this website and within the GemTrackr software, in accordance with the General Data Protection Regulation (GDPR), is:

edenDevelopment UG (haftungsbeschränkt)

Represented by the Managing Directors: Christoph Maaß and Dominik Khan

Mörikestr. 14

74177 Bad Friedrichshall

Germany

Email: [email protected]

2. Hosting and Technical Provisioning

To provide our website and licensing infrastructure securely and efficiently, we use the services of external hosting providers. We have concluded Data Processing Agreements (DPAs) in accordance with Art. 28 GDPR with all providers.

Website Hosting: Our website is hosted by One.com A/S (Sweden).
Domain Services: We use IONOS SE (Germany) for domain forwarding.
License and Fallback Servers: We use servers from Hetzner Online GmbH (Germany) for the smooth synchronization of software licenses (also as a fallback).

With every visit to our website, the hosts' servers automatically collect general data (so-called server log files, such as IP address, browser type, date, and time), which are strictly necessary for technical operation and security (Legal basis: Art. 6 (1) (f) GDPR).

3. Registration and Authentication (Auth0)

Using GemTrackr requires an account. We offer various login options: You can log in via a local Windows or Microsoft account or use alternative login methods (such as social logins). To securely process these authentication procedures, we integrate the service Auth0 (provided by Okta Inc., USA).

When you register or log in, necessary authentication data (such as your email address and password hash or the social login provider's token) are transmitted to and processed by Auth0. This is technically necessary to provide and secure your user account (Legal basis: Art. 6 (1) (b) GDPR for the performance of a contract). We have concluded EU Standard Contractual Clauses with the provider to ensure an adequate level of data protection.

4. Payment Processing (Paddle as Merchant of Record)

We have outsourced the sales process for GemTrackr to Paddle.com Market Limited (Judd House, 18-29 Mora Street, London, EC1V 8EZ, United Kingdom). Paddle acts as a so-called "Merchant of Record". This means that Paddle is your contractual partner for the purchase of the software and handles the entire invoicing and payment processing.

When you purchase or subscribe to GemTrackr, you enter your payment and billing data (e.g., name, address, credit card details, or PayPal information) directly on Paddle's servers. We have no access to your complete payment details (such as credit card numbers) at any time. We only receive information from Paddle regarding the transaction status and the master data necessary for license generation. Further information on data protection at Paddle can be found at: https://paddle.com/privacy/

5. Support and Error Analysis

a) Automatic Error Logs (Log Files):

If our software offers a function for the automated sending of error logs (crash reports), the transmission of these purely technical system logs only occurs with your explicit consent (opt-in within the software). This data is used exclusively to fix software errors (Legal basis: Art. 6 (1) (a) GDPR).

b) Extended Error Analysis (Voluntary Transmission of Input Data):

To process particularly complex support cases, we offer you the option to transmit content-related input and movement data (e.g., specific input values or detailed action logs within the app) to us, in addition to technical error logs. This extended data transmission is disabled by default. It occurs exclusively on a voluntary basis and only if you actively and explicitly authorize us to do so within the scope of a support request. We process this data strictly purpose-bound for error reproduction and delete it immediately after the support ticket is closed (Legal basis: Art. 6 (1) (a) GDPR).

6. Appointment Booking and Data Import Support

a) Use of Booking Systems:

If we offer a booking system (e.g., from One.com) on our website to schedule service appointments, the data you enter into the input mask (e.g., name, email address, time of the appointment) will be transmitted to the provider's servers to organize the appointment (Legal basis: Art. 6 (1) (b) GDPR).

b) Processing of Collection Data (Import Support):

If we offer to technically prepare your existing data records (e.g., in the form of Excel or CSV files) for import into GemTrackr, we treat the files transmitted to us strictly confidentially. We use your files exclusively for the purpose of adapting the technical structure for the local import (Legal basis: Art. 6 (1) (b) GDPR). Upon successful completion of the support process, the original files and edited versions will be deleted from our systems immediately.

7. Remote Support (Remote Maintenance and Video Conferences)

If we offer you remote support (remote maintenance or screen sharing) for complex problems or import processes and you choose to use it, we use external tools for this purpose (such as TeamViewer or Microsoft Teams).

If you agree to a remote session, technical connection data is transmitted to the respective providers. If you share your screen, our employees gain visual insight into your local environment. We do not record these sessions unless you give your explicit prior consent. You retain control at all times and can terminate the session independently. The processing for the provision of support takes place in accordance with Art. 6 (1) (b) GDPR; the viewing of your screen is based on your consent (Art. 6 (1) (a) GDPR), granted by active sharing.

8. Content Delivery Network and Audience Measurement (Cloudflare)

Our website gemtrackr.de is delivered via the content delivery network (CDN) of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). All requests to our website are routed through Cloudflare's servers, which process technically necessary connection data (such as IP address, date and time, requested URL, and browser type) in order to deliver the website quickly and protect it against attacks (Legal basis: Art. 6 (1) (f) GDPR).

In addition, we use Cloudflare Web Analytics to measure the reach of our website and to improve it. Cloudflare Web Analytics does not set cookies, does not store any information on your device, and does not create user profiles. Only aggregated information such as the page visited, the referring website (referrer), browser and device type, country of origin, and loading times is collected. Your IP address is not stored by Cloudflare Web Analytics and is not used for identification. The legal basis is our legitimate interest in a data-minimizing statistical analysis of our website (Art. 6 (1) (f) GDPR).

Cloudflare is certified under the EU-U.S. Data Privacy Framework. In addition, we have concluded a Data Processing Agreement with Cloudflare, including the EU Standard Contractual Clauses. Further information can be found in Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/.

9. Your Rights as a Data Subject

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing (Art. 15 GDPR), as well as a right to correction (Art. 16 GDPR), restriction of processing, or deletion (Art. 17 GDPR) of this data. Furthermore, you have the right to restrict processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR), and the right to revoke any consent you have granted at any time (Art. 7 (3) GDPR).