Privacy policy

This is a translation of the German privacy policy (Datenschutzerklärung) for your convenience. In case of any differences, the German version applies.

1. General information

Protecting your personal data is important to me. I process your data in accordance with the law, in particular the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications and Digital Services Data Protection Act (TDDDG). This privacy policy explains which data I process, for what purpose, and what rights you have.

2. Controller

Save Your Handy
Owner: Manuel David Gonzalez Burgos
Wiesengrund 22, 81243 Munich, Germany
Email: info@saveyourhandy.de
Phone: +49 163 1506291

3. Hosting

This website is hosted on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you visit the website, the host automatically processes technical access data (e.g. IP address, date and time, page visited, browser and operating system) in server log files to keep the website secure and stable.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and working website). I have a data processing agreement with Hetzner under Art. 28 GDPR.

4. Cookies, fonts and external content

This website does not use tracking or marketing cookies. Fonts, icons, images and videos are loaded from my own server; no connection is made to servers of Google or other providers. The one exception is the Cloudflare Turnstile spam protection (see section 13).

Links to WhatsApp, Google Maps, Google reviews and Instagram are simple links. Data is only transferred to these providers when you click such a link and open the page or app. The privacy policy of the respective provider then applies.

5. Contact form

If you send me a request via the contact form, I process your details (name, phone number, postcode, device/model, description of the problem and, if provided, your email address) to handle your request and tell you the price and an appointment. I need the required fields to reach you and assess your repair. Your details are not stored in the website’s database but sent to me by email (see sections 6 and 7). If you provide an email address, you automatically receive a confirmation that your request has arrived.

Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract and performance of the contract). In all other cases, the processing is based on my legitimate interest in handling requests (Art. 6(1)(f) GDPR).

6. Sending emails via Brevo

To send the emails for contact form requests (a notification to me and, if you provide an email address, a confirmation to you), I use the Brevo service of Brevo SAS, 17 rue de Salneuve, 75017 Paris, France. The data entered in the form is transferred to Brevo and processed on servers in the European Union.

Legal basis: Art. 6(1)(b) GDPR (handling your request) and Art. 6(1)(f) GDPR (legitimate interest in reliable email delivery). I have a data processing agreement with Brevo under Art. 28 GDPR.

7. Email communication (Microsoft 365)

I run my mailbox info@saveyourhandy.de with Microsoft 365 from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, purchased through the provider GoDaddy. If you send me an email or a request via the form, your message and contact details are stored in this mailbox.

Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR (legitimate interest in working email communication). A data processing agreement is in place. Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework, under which Microsoft is certified.

8. Communication via WhatsApp

For quick communication, I offer contact via WhatsApp (WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). I use the WhatsApp Business app. There I process your phone number, your name and the content of our messages (e.g. photos of the damage, appointment, price) to handle your request and your repair. I do not sync my phone’s address book with WhatsApp.

Messages are end-to-end encrypted. However, WhatsApp processes metadata (e.g. phone number, time of messages) and may transfer it to Meta Platforms, Inc. in the USA; Meta is certified under the EU-US Data Privacy Framework. I have no influence on this processing. If you do not want to use WhatsApp, you can also reach me by phone, email or the contact form.

Legal basis: Art. 6(1)(b) GDPR (handling your request and your repair) and Art. 6(1)(f) GDPR (legitimate interest in quick communication via the channel you chose).

9. Payment and invoices

If you pay by card, Apple Pay or Google Pay, the payment is processed by SumUp (companies of the SumUp group, including SumUp Limited, Block 8, Harcourt Centre, Charlotte Way, Dublin 2, Ireland). SumUp processes the payment data as an independent controller; more information at sumup.com.

If you pay with PayPal, the payment is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. PayPal is also an independent controller for the payment data.

For bank transfers, I process the details of your payment (name, amount, reference).

I create my invoices with SumUp’s invoicing software. For this, SumUp processes the invoice data on my behalf (name, address and email address if applicable, service, amount); I have a data processing agreement with SumUp under Art. 28 GDPR.

Legal basis: Art. 6(1)(b) GDPR (performance of the contract) and Art. 6(1)(c) GDPR (legal obligations, e.g. invoicing and bookkeeping).

10. Customer reviews on this website

On this website, I show selected reviews from my Google Business Profile. The text of the review and the first name and initial of the last name are shown as they are publicly visible on Google.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in showing real customer experiences). If you do not want your review to appear here, write to me and I will remove it.

11. Storage period

I store your personal data only as long as necessary for the purposes stated. Requests that do not lead to a repair are deleted once they are settled and no further questions are expected.

Under German tax law (§ 147 AO), I keep invoices and other accounting records for eight years, and other tax-relevant documents for up to ten years. After that, the data is deleted.

12. Domain management (Cloudflare)

The name resolution (DNS) of my domains is provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare only translates the domain name into the server’s address. Your page visits and the content of this website do not pass through Cloudflare but go directly to the server at Hetzner. For DNS requests, Cloudflare processes technical data, usually the IP address of the requesting DNS server.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable access to the website). I have a data processing agreement with Cloudflare. Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework, under which Cloudflare is certified.

13. Spam protection (Cloudflare Turnstile)

To protect the forms on this website (contact form as well as login and password reset) against spam and automated access, I use Cloudflare Turnstile from Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. The Turnstile script is loaded from Cloudflare servers when you open the pages of this website. Cloudflare processes technical data from your device and browser (e.g. IP address, browser information) to check whether the request comes from a human. Cloudflare processes this data on my behalf; to improve its bot detection, Cloudflare also processes it as an independent controller.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting the forms against misuse) and § 25(2) no. 2 TDDDG. I have a data processing agreement with Cloudflare. Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework, under which Cloudflare is certified.

14. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the lock icon in your browser’s address bar.

15. Your rights

You have the right at any time to access your stored data (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR). Just write to me at info@saveyourhandy.de.

16. Right to object (Art. 21 GDPR)

If I process your data on the basis of my legitimate interest (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation. I will then no longer process your data unless I can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Write to me at info@saveyourhandy.de.

17. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

Last updated: November 2026