Privacy policy

Controller within the meaning of the GDPR:

Niels Hofmann
Bullersbarg 2
21279 Appel
Email: kontakt@notdienstfair.de

Taking into account Article 37 GDPR and section 38 BDSG, the current circumstances of our data processing do not require us to designate a data protection officer.

You may contact us at any time with questions about data protection: kontakt@notdienstfair.de

The following information explains how we process your personal data when you use NotdienstFair.

Whenever our website is accessed, our server automatically records the following data in server log files:

• IP address of the requesting device
• Date and time of access
• Name and URL of the page retrieved
• Volume of data transferred
• Browser and operating system used
• Referrer URL (the page previously visited)

Legal basis: Article 6(1)(f) GDPR (legitimate interest in providing the website securely).

Retention period: 14 days, after which the data is deleted automatically.

When you book a tradesperson through NotdienstFair, we process the following data in order to provide the mediation service:

• Name and contact details (telephone number and, where applicable, email address)
• Service address
• Answers entered in the configurator (type of problem and details)
• Selected provider and agreed price
• Order number and order status

Legal basis: Article 6(1)(b) GDPR (performance of a contract – the mediation service is the service we contractually provide to you).

Retention period: After the order has been completed, we retain data for the applicable statutory retention periods. Depending on the type of record, these periods are, in particular, six, eight or ten years under section 257 HGB and section 147 AO; the data is then deleted. At your request, customer data (name, telephone number and email address) will be anonymised earlier where this is not precluded by statutory obligations or overriding grounds. The order record then remains without any personal reference in accordance with our GDPR deletion policy.

We may process your location in order to show you tradespeople nearby. The location is provided in one of the following ways:

• GPS location: if you enable location access in your browser or device
• Manual entry: postcode or address

Legal basis: Article 6(1)(a) GDPR (consent – you are actively asked before GPS location is used). For manual entry: Article 6(1)(b) GDPR (performance of a contract).

Retention period: Customer location data is stored solely for the duration of the mediation process and is deleted once the job has been completed.

Geocoding: We use the OpenStreetMap Foundation’s Nominatim service (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom) to convert addresses into coordinates. The address entered and your IP address are transmitted to the OpenStreetMap Foundation in the process.

Legal basis: Article 6(1)(f) GDPR (legitimate interest in determining the location correctly so that nearby providers can be matched).

During an active job, the technician’s location may be recorded in order to show the customer the estimated time of arrival.

Legal basis: Article 6(1)(a) GDPR (the technician’s consent – location sharing is voluntary and may be disabled at any time).

Retention period: The technician’s GPS data is deleted in full no later than 24 hours after the job has been completed.

We use Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin 2, Ireland) to process online payments. Stripe processes your payment data, such as credit card and bank details, directly; we do not have access to complete payment details.

Legal basis: Article 6(1)(b) GDPR (performance of a contract – payment processing is necessary for the booking).

Processing on behalf of the controller: We have entered into a data processing agreement with Stripe in accordance with Article 28 GDPR.

Further information: Stripe privacy policy

We use the communications provider seven.io (seven communications GmbH & Co. KG, Willestraße 4–6, 24103 Kiel, Germany) for order notifications, for example, “Technician on the way”. For this purpose, your telephone number is transmitted to seven.io.

Legal basis: Article 6(1)(b) GDPR (performance of a contract – status notifications form part of the mediation service).

Processing on behalf of the controller: We have entered into a data processing agreement with seven.io in accordance with Article 28 GDPR. The data is processed exclusively in Germany.

After an order has been completed, you can review the tradesperson by awarding one to five stars and, optionally, adding a comment. Reviews are displayed publicly. The provider may respond to reviews.

Legal basis: Article 6(1)(f) GDPR (legitimate interest – transparency and confidence-building for future customers).

Retention period: Reviews are retained for as long as the associated provider remains active on the platform. You may ask us to delete your review at any time.

NotdienstFair uses strictly necessary cookies and localStorage entries that are required for the website to function and to store your privacy choices. These include:

• Session cookies used when providers sign in
• Your privacy choice in localStorage

If Matomo is configured for this website, we use it to measure reach only after you have given your explicit consent. Matomo is operated without tracking cookies. We do not transmit URL parameters; identifiers in tracking, booking and review URLs are removed before transmission. The data processed may include, in particular, the page accessed, the time of access, browser and device information, and the IP address.

Legal basis: For necessary storage, section 25(2) TDDDG and Article 6(1)(f) GDPR; for Matomo, your consent under section 25(1) TDDDG and Article 6(1)(a) GDPR. You may change or withdraw your consent at any time with effect for the future.

Our website is hosted by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. When you visit our website, netcup automatically records information transmitted by your browser in server log files (see section 3.1).

Processing on behalf of the controller: We have entered into a data processing agreement with netcup in accordance with Article 28 GDPR. The data is processed exclusively in Germany.

You can register on our website for a launch notification so that we can tell you when NotdienstFair officially launches. We process the following data for this purpose:

• Email address
• IP address (to prevent misuse)
• Time of registration and confirmation

Registration uses a double opt-in process. After you enter your email address, we send you a confirmation email. Your email address is added to our launch notification list only after you click the confirmation link.

Legal basis: Article 6(1)(a) GDPR (consent given by double opt-in).

Withdrawal: You may withdraw your consent at any time by contacting us by email: kontakt@notdienstfair.de. Your data will then be deleted without undue delay.

Retention period: Your data is retained until you withdraw your consent or until NotdienstFair launches and is then deleted.

If a particular emergency service is not yet generally offered in your region, you can register to receive a one-off availability notification. We process the following data:

• Email address
• Location coordinates rounded to approximately 100 metres, as well as postcode and town
• Requested trade and requested service
• Reason why the search returned no result
• Times of registration, confirmation, deregistration and notification
• Pseudonymised evidence of consent, such as a hash of the IP address and the consent version used

Registration uses a double opt-in process. No availability message is sent unless the confirmation link is clicked. The registration applies solely to the region and service displayed and results in no more than one availability message.

Legal basis: Article 6(1)(a) GDPR. Consent is voluntary and may be withdrawn at any time using the unsubscribe link in the emails or by contacting us: kontakt@notdienstfair.de

Retention period: Unconfirmed registrations expire after seven days. Confirmed registrations expire after no more than twelve months. If you deregister or the registration expires, the email address and precise regional assignment are deleted. Following a successful notification, personal content is redacted within 30 days at the latest; a pseudonymised technical delivery audit may be retained to investigate misuse and errors.

The regional match is performed automatically using the service areas of verified providers, approved trades and active prices. A notification means that the service is generally available; it does not guarantee that a technician is immediately available.

You have the following rights under the GDPR:

• Right of access (Article 15 GDPR): You have the right to obtain information about the personal data we process.
• Right to rectification (Article 16 GDPR): You may ask for inaccurate or incomplete data to be corrected.
• Right to erasure (Article 17 GDPR): You may ask for your personal data to be erased unless statutory retention duties or other legal grounds prevent this.
• Right to restriction of processing (Article 18 GDPR): You may ask for the processing of your data to be restricted.
• Right to data portability (Article 20 GDPR): You have the right to receive your data in a structured, commonly used and machine-readable format.
• Right to object (Article 21 GDPR): You may object at any time to the processing of your data where the processing is based on a legitimate interest under Article 6(1)(f) GDPR.
• Withdrawal of consent (Article 7(3) GDPR): Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

To exercise your rights, please contact: kontakt@notdienstfair.de

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority under Article 77 GDPR. The supervisory authority responsible for us is:

Der Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Telephone: 0511 / 120-4500
Email: poststelle@lfd.niedersachsen.de

We reserve the right to amend this privacy policy to reflect changes in the law or in our data processing activities. The current version is always available on this page.