Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

A Data Protection Officer is not required to be appointed pursuant to § 38 BDSG in conjunction with Art. 37 GDPR, as the statutory prerequisites (in particular regarding the number of persons engaged in data processing) are not met. For data protection enquiries, please use the email address provided above.

2. Collection and processing of personal data

a) Benchmark form

When you complete the benchmark form, we collect: name (required), email address (required), website URL (required), city, salon type, salon size, booking method, and information about appointment reminders and review management. This data is used solely to calculate and provide your individual benchmark report. The email address is used to deliver the report and for a possible one-time follow-up — not to create a newsletter subscription. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures). For any further contact: Art. 6(1)(a) GDPR (consent).

b) Session storage

To transfer your benchmark result between subpages during a session, we use your browser's session storage. The result is stored exclusively in the volatile memory of your device and deleted automatically when you close the browser tab or once the result has been successfully loaded. No personal data is stored in persistent cookies or similar tracking mechanisms. Legal basis: § 25 para. 2 no. 2 TDDDG (technically strictly necessary access to provide the service you explicitly requested).

c) Server log files

When you visit this website, our hosting provider (Hetzner Online GmbH, Germany) automatically stores technical access data in server log files: IP address (anonymised after 7 days), browser type, operating system, referrer URL, pages accessed, and date and time of access. Without further measures, this data cannot be attributed to a specific person and is not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technical security and operational stability).

3. Purposes of data processing

• Calculation and provision of the individual benchmark report (Art. 6(1)(b) GDPR)
• Technical operation, security, and error analysis of the website (Art. 6(1)(f) GDPR)
• One-time follow-up regarding your benchmark results — only with your explicit consent (Art. 6(1)(a) GDPR)
• Improvement of the service based on aggregated, anonymised statistics (no personal reference)

4. Data sharing and data processing agreements

Your data will not be passed on to third parties for advertising purposes without your explicit consent. Data processing agreements pursuant to Art. 28 GDPR have been concluded with the service providers listed below. These providers process personal data exclusively on our behalf and according to our instructions.

5. Retention period

6. Automated decision-making and scoring

This service calculates a benchmark score based on your inputs. The scoring serves purely informational purposes (comparison with industry average values) and has no legal or similarly significant effects within the meaning of Art. 22 GDPR. No automated decisions are made that affect your legal position. The results constitute a non-binding guide and do not replace professional business consulting.

7. Cookies and terminal storage

This website does not use tracking cookies, marketing cookies, or analytics cookies. No Google Analytics, Meta Pixel, or comparable services are used. The only terminal storage access is technically strictly necessary (§ 25 para. 2 no. 2 TDDDG):

8. Your rights as a data subject

You are entitled to the following rights under the GDPR, which you may exercise at any time against the controller named above:

• Access (Art. 15 GDPR) — Right to information about the personal data stored about you
• Rectification (Art. 16 GDPR) — Right to immediate correction of inaccurate data concerning you
• Erasure (Art. 17 GDPR) — "Right to be forgotten" subject to statutory conditions
• Restriction of processing (Art. 18 GDPR) — Right to restrict processing subject to statutory conditions
• Data portability (Art. 20 GDPR) — Right to receive your data in a commonly used, machine-readable format
• Objection (Art. 21 GDPR) — Right to object to processing based on legitimate interests (Art. 6(1)(f) GDPR)
• Withdrawal of consent (Art. 7(3) GDPR) — Consent given may be withdrawn at any time with effect for the future, without affecting the lawfulness of processing carried out prior to withdrawal

To exercise your rights, please contact us by email at: info@term-in.app

9. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the competent data protection supervisory authority (Art. 77 GDPR). As the controller is located in Bavaria, Germany, the competent supervisory authority is:

10. Changes to this privacy policy

We reserve the right to update this privacy policy at any time, particularly in the event of changes in the legal situation, the services used, or the scope of functions of this website. The date of the last update is always shown at the top of this page. We recommend visiting this page regularly.