1. Controller
Advertiso GmbH
Mielerstede 6, 22927 Großhansdorf, Germany
Email: kontakt@advertiso.de · Phone: +49 40 25309121
Data Protection Officer: No Data Protection Officer has been appointed. Contact for all data protection enquiries: kontakt@advertiso.de
2. Purposes and legal bases
- Operating the website and admin app; contract performance (Art. 6(1)(b) GDPR).
- Security, abuse prevention, server logs (Art. 6(1)(f) GDPR).
- Billing and accounting (Art. 6(1)(c)/(b) GDPR).
- Consent where applicable (Art. 6(1)(a) GDPR).
3. Hosting / processors
Hosting on a dedicated server at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (servers in Germany / EU) as processor. No content delivery network (CDN) is currently used.
Payment provider: Stripe Payments Europe, Limited, One Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland
4. Data processed
- Server logs: IP, timestamp, URL, user agent, referrer — short-term for security.
- Account data: name, email, organization name, auth data, accepted contract versions.
- Admin usage: configurations, properties, scan results.
- Consent-log data on behalf of customers: pseudonymous consent ID, IP-derived country, user-agent hash, TC string, timestamps — Advertiso acts as processor; details are governed by a separate Data Processing Agreement (DPA/AVV), where concluded.
5. Cookies on our own site/app
- Session cookie for login (necessary).
- Our own CMP consent cookie for this site (where a banner is used).
- Optional cookies only after consent.
6. Retention
- Account data: contract term plus statutory retention (often up to 10 years for accounting).
- Server logs: typically days to weeks unless needed for security incidents.
- Backups: daily with 14-day retention.
- Customer consent logs: per DPA / customer instructions.
7. Recipients / transfers
Primarily EU/EEA (hosting by Hetzner Online GmbH, Germany). Payments via Stripe Payments Europe, Limited (Ireland, EU). Where Stripe transfers data outside the EU/EEA, transfers use appropriate safeguards (e.g. SCCs).
8. Data subject rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent (where processing is based on consent). Contact: kontakt@advertiso.de.
9. Supervisory authority
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98, 24103 Kiel
www.datenschutzzentrum.de
10. Requirement to provide data
Account data are required to conclude and perform the contract; without them the Service cannot be provided.