As of: September 2025
Privacy policies are often difficult to read. We understand that. And we want to do things differently. With our privacy policy, we want to provide you with an easy-to-understand explanation of how we process your personal data. To this end, we have structured our privacy policy clearly for you and show you for each topic area whether and how we process your personal data.
Our privacy policy is structured as follows
The protection of your personal data and your privacy is extremely important to us. That is why we want to offer you comprehensive transparency regarding the processing of your personal data (GDPR) and the storage of information on your device (TDDDG). Only when the processing of personal data and information is transparent to you as the data subject will you be sufficiently informed about the scope, purposes, and benefits of the processing.
This privacy policy applies to all processing of personal data carried out by us and to the storage of information on your end devices. It therefore applies both in the context of the provision of our services and within external online presences, such as our social media fan pages.
The controller within the meaning of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and other data protection regulations is
LIBERO football finance AG
Taunusanlage 9-10
60329 Frankfurt am Main
Germany
Email: info@libero-football-finance.com
Phone: +49 69 5050 604247
Hereinafter referred to as „controller“ or „we.“
First of all, we would like to provide you with introductory information on what the protection of your personal data means, what personal data is, how we process it, and what security measures we take in doing so.
2.1 Processing of personal data
Personal data (hereinafter also referred to as „data“) is individual information about the personal or factual circumstances of an identified or identifiable natural person.
Individual details about personal or factual circumstances include, for example:
The „processing“ of personal data includes, for example, the following measures
2.2 Legal basis for processing your personal data
We only process personal data within the legally permissible limits. We are obliged to do so by law. In particular, the GDPR. This means that we are obliged to always be able to base data processing operations on a legal basis. These legal bases are standardized in Art. 6 (1) GDPR. Here we list the most common legal bases on which we process your personal data.
We only process personal data for specific purposes (Art. 5 (1) (b) GDPR). As soon as the purpose of the processing ceases to apply, your personal data will be deleted or protected by technical and organizational measures (e.g., pseudonymization).
The same applies to the expiry of a prescribed storage period, except in cases where further storage is necessary for the conclusion or performance of a contract. In addition, there may be a legal obligation to store data for a longer period or to pass it on to third parties (in particular to law enforcement authorities). In other cases, the storage period and type of data collected, as well as the type of data processing, depend on which functions you use in each individual case. We will be happy to provide you with information on this in individual cases, in accordance with Art. 15 GDPR.
2.3 We process the following categories of data
Data categories include the following data in particular:
2.4 We take these security measures
In accordance with legal requirements and taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of threats to your rights and freedoms, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.
These measures include, in particular, ensuring that your data is stored and processed confidentially, with integrity, and is available at all times. Furthermore, controls on access to your data, as well as access, input, disclosure, securing availability, and separation from data of other natural persons are among the security measures we implement. In addition, we have established procedures to ensure that data subjects‘ rights (see section 5) are exercised, data is deleted, and responses are provided in the event of a threat to your data. Furthermore, we take the protection of personal data into account as early as the development stage of our software and through procedures that comply with the principle of data protection by design and data protection-friendly default settings.
2.5 How we transfer or disclose personal data to third parties
As part of our processing of your personal data, this data may be transferred or disclosed to other bodies, companies, legally independent organizational units, or persons. These third parties may include, for example, payment institutions in the context of payment transactions, service providers commissioned with IT tasks, or providers of services and content that we have integrated into our services. If we transfer or disclose your personal data to third parties, we comply with the legal requirements and, in particular, conclude appropriate contracts or agreements with the recipients of your data to protect your data.
2.6 This is how a transfer to a third country takes place
If this privacy policy states that we transfer your personal data to a third country, i.e. a country outside the EU or outside the EEA, the following applies. Transfers to third countries are only carried out in accordance with legal requirements. We assure you that we have contractual or legal authorization to transfer and process your data in the third country in question. In addition, we only allow your data to be processed by service providers in third countries that, in our opinion, have a recognized level of data protection. This means that there is, for example, an adequacy decision between the EU and the country to which we transfer your personal data. An „adequacy decision“ is a decision adopted by the European Commission pursuant to Art. 45 GDPR, which determines that a third country (i.e., a country not bound by the GDPR) or an international organization offers an adequate level of protection for personal data. Alternatively, for example if there is no adequacy decision, a transfer to a third country will only take place if, for example, contractual obligations between us and the service provider in the third country exist in the form of so-called standard contractual clauses of the EU Commission and further technical security measures have been taken which guarantee a level of protection equivalent to that in the EU, or if the service provider in the third country has data protectioncertifications and your data is only processed in accordance with internal data protection regulations (Articles 44 to 49 GDPR. Information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).
Within the framework of the so-called „Data Privacy Framework“ („DPF“), the EU Commission has recognized the level of data protection for certain companies from the USA as secure within the framework of the adequacy decision of July 10, 2023. A list of certified companies and further information on the DPF can be found on the website of the US Department of Commerce at https://www.dataprivacyframework.gov/ (in English). In this privacy policy, we inform you which services we use that are certified under the Data Privacy Framework.
2.7 Deletion of data
The data we process will be deleted in accordance with legal requirements as soon as the consents permitting its processing are revoked or other permissions cease to apply (e.g., if the purpose of processing this data no longer applies or it is not necessary for the purpose). If the data is not deleted because it is required for other, legally permissible purposes, its processing will be limited to these purposes. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons or whose storage is necessary for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person.
Within the scope of this privacy policy, we provide information on the deletion and storage of data that applies specifically to the respective processing process.
2.8 Storage of and access to data on your device
Unless we obtain your consent to do so, the storage of or access to information on your device is carried out in accordance with Section 25 (2) No. 2 of the German Act on Data Protection and Privacy in Telecommunications and Digital Services (TDDDG), as the storage of and access to this information is absolutely necessary in order to provide the desired functions of our services. If we obtain your consent, the legal basis is Section 25 (1) TDDDG. Our services use cookies, tokens, beacons, or other technologies that may be stored on your devices and without which the provision of our services would not be possible.
Cookies, tokens, beacons, or other technologies are usually text files that are stored on your device and can be read by us and third parties when you access our services. Many of the aforementioned technologies contain their own ID. Such an ID is a unique identifier for the technology used in each case. It consists of a string of characters that can be used to assign websites and servers to the specific Internet browser or the specific service or device used in which cookies, tokens, beacons, or other technologies have been stored. This enables website operators and analysis services to identify you as a user and distinguish you from others.
2.9 Order processing
If we use external service providers to process your data, we carefully select and commission them. If the services provided by these service providers constitute order processing within the meaning of Art. 28 GDPR, the service providers are bound by our instructions and are regularly monitored. Our order processing agreements comply with the strict requirements of Art. 28 GDPR and the specifications of the German data protection authorities.
If your personal data is processed, you are a „data subject“ within the meaning of the GDPR and, as a data subject, you have the following rights vis-à-vis us as the „controller“:
3.1 Right to information
You can request confirmation from the controller as to whether personal data concerning you is being processed by us.
If such processing takes place, you can request the following information from the controller:
3.2 Right to rectification
You have the right to rectification and/or completion by the controller if the personal data processed concerning you is inaccurate or incomplete. The controller must rectify the data without delay.
3.3 Right to restriction of processing
Under the following conditions, you may request the restriction of the processing of personal data concerning you:
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
3.4 Right to erasure
3.4.1. You may request the controller to erase personal data concerning you without undue delay, and the controller is obliged to erase such data without undue delay if one of the following reasons applies:
3.4.2. If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Art. 17 (1) GDPR, the controller shall take reasonable steps, including technical measures, taking into account the available technology and implementation costs, to inform controllers who process the personal data that you, as the data subject, have requested the deletion of all links to this personal data or of copies or replications of this personal data.
3.4.3. Exceptions to the right to erasure
The right to erasure does not apply if the processing of your data is necessary for the following measures:
3.5 Right to be informed
If you have asserted your right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed by the controller about these recipients.
3.6 Right to data portability
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and the processing is carried out using automated means.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another controller, where technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
3.7 Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
In connection with the use of information society services, you have the option of exercising your right to object by means of automated procedures using technical specifications, irrespective of Directive 2002/58/EC.
3.8 Right to revoke the data protection consent declaration
You have the right to revoke your declaration of consent under data protection law at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent until revocation.
The processing is lawful until your revocation – the revocation therefore only affects the processing after receipt of your revocation. You can declare your revocation informally by mail or email. The processing of your personal data will then no longer take place, subject to permission being granted on another legal basis. If this is not the case, your data must be deleted immediately after revocation in accordance with Art. 17 (2) GDPR. Your right to revoke your consent subject to the above conditions is guaranteed.
Your revocation should be addressed to:
LIBERO football finance AG
Taunusanlage 9-10
60329 Frankfurt am Main
Germany.
Email: info@libero-football-finance.com
Phone: +49 69 5050 604247
3.9 Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
3.10 Automated individual decision-making, including profiling
Automated individual decision-making, including profiling, does not take place unless specifically addressed in this privacy policy.
3.11 Notification obligations of the controller
If your personal data has been disclosed to other recipients (third parties) on legal grounds, we will notify them of any rectification, erasure, or restriction of the processing of your personal data (Article 16, Article 17(1), and Article 18 of the GDPR). The notification obligation does not apply if it involves disproportionate effort or is impossible. We will also inform you about the recipients upon request.
We use cookies, beacons, or other technologies to provide and evaluate our services and to conduct marketing using the evaluated data. Cookies are small text files that contain data from visited websites or domains and are stored on your device (computer, tablet, or smartphone) . When you access a website, the cookie stored on your device sends information to the party that placed the cookie.
4.1 How we use cookies and other technologies
We want you to be able to make an informed decision for or against the use of cookies and other technologies that are not strictly necessary for the technical characteristics of the services. Therefore, in the event that we use cookies and other technologies that require your consent, we allow you to choose which cookies and other technologies you allow when you first visit our services and then permanently in the corresponding settings. Please note that functional cookies and other technologies are mandatory for visiting our services and are therefore already permitted via our default settings. Statistics and marketing cookies and other technologies are optional. You can allow them by consenting to the use of these cookies and other technologies in the consent banner. Alternatively, you can reject statistics and marketing cookies and other technologies. Please note that even if you reject the use of statistics and marketing cookies and other technologies, you may still be shown advertising. However, this advertising will be less tailored to your interests. You can still use the full functionality of the services.
4.2 Storage period of cookies and other technologies
Unless we provide you with explicit information about the storage period of cookies and other technologies (e.g., in the consent banner), you can assume that the storage period can be up to two years. If cookies and other technologies have been set on the basis of your consent, you have the option at any time to revoke your consent or to object to the processing of your data by cookies/technologies (collectively referred to as „opt-out“).
The use of our services with all their functions involves the processing of personal data. We explain exactly how this happens here.
5.1 Informational use of our services
Purely informational access to our services requires the processing of the following personal data and information: browser type and browser version, operating system used, address of previously visited websites, IP address of the device you use to access our services, and the time you accessed our services. All this information is automatically transmitted by your browser unless you have configured it to suppress the transmission of information.
This personal data is processed for the purpose of ensuring the functionality and optimization of our services, as well as to guarantee the security of our information technology systems. These purposes are also legitimate interests pursuant to Art. 6 (1) (f) GDPR, meaning that the processing is carried out on legal grounds.
5.2 Use by or after registration
5.2.1 Registration
Beyond the purely informational use of our services, you have the option of registering for our services and using our entire range of offerings. In doing so, we process master data and contact details in particular, such as your name, email address, and password. In addition, we automatically process connection data such as date, device information, and IP address. After registering, you have the option of using our services in the free version and adding paid premium versions. Our services allow you to select various services and access the content they contain. This use of our services may require the processing of personal data and information in the manner described in this section 5.
Some processing steps may also be carried out by third-party providers. Data processing by third-party providers is carried out in accordance with the terms and conditions of the relevant privacy policies. In the case of data processing with third-party providers, this may constitute contract processing within the meaning of Art. 28 GDPR. This is subject to strict legal requirements, which we comply with in the course of our contractual agreements with our contract processors.
Use during or after registration and login and the associated data processing operations may differ from purely informational use. This data related to your profile is collected for the purpose of verifying your status and the associated fulfillment of our contractual obligations towards you. These are legitimate purposes in accordance with Art. 6 (1) lit. b GDPR. If your consent is required for the processing operation, we will obtain it at the appropriate point (e.g., via the opt-in option in a consent banner when you use our service for the first time). If you have any further questions, we will be happy to assist you in accordance with your right to information under Art. 15 (1) GDPR.
5.2.2 Creation and use of a user account
You can create a user account (hereinafter also referred to as „profile“) in our services in order to use our services and their functions. If you do so, the personal data you provide there will be transmitted to us by your device and stored in our information technology systems. Your IP address and the time of registration will also be stored. When you log into your profile, our service stores tokens on your device to enable you to remain logged in, even if you have to reload our services in the meantime. By creating a profile, you can use the functions of our services.
The processing operations associated with creating a profile serve the purpose of being able to assign future usage operations and access the entire range of our services. When ordering any additions and products, the processing of your data also serves the purpose of contract execution and is therefore purpose-related and necessary in accordance with Art. 6 (1) lit. b GDPR.
The storage of your IP address and the time of registration is necessary to ensure the security of our information technology systems. This is also our legitimate interest, which is why the processing is also lawful under Art. 6 (1) lit. f GDPR.
The personal data you enter will be stored until you delete this data from your profile or, at the latest, until your profile is completely deleted from our system. Contrary to this, we only process certain personal data about you if we have legal or contractual authorization to do so. This is the case, for example, if we are permitted to retain contract or payment data even after your profile has been deleted for billing or other reasons that are necessary for the proper execution of our contractual relationship.
5.3 Functions of our services
Our services provide you with the functions listed below, among others. We provide you with all of the functions listed below so that you can take full advantage of our services and we can achieve the best results for you in our collaboration. We do not pass on the data you enter to unauthorized third parties, but process it for the purpose of fulfilling the contractual relationships entered into with you, in particular for the fulfillment of the user agreement you have concluded by using our services. Therefore, the legal basis for the processing of your data results from Art. 6 (1) lit. b GDPR.
5.3.1 Matching
In order to find the right financing or marketing partner based on the data provided by a customer, we use the customer data to perform a „matching“ with the data provided by our partners. In doing so, we check the extent to which a collaboration between the customer and the partner could be considered based on the data provided in each case. Data is transferred between customers and partners anonymously until both sides agree to release their data to the other side.
5.3.2 Communication & contract negotiation
After successful matching and consent to the release of the respective data to the other party, customers and partners can communicate with each other in our services, exchange documents and information, and conduct contract negotiations based on the data they have provided. You decide for yourself which data you want to share with our services and with the other party.
5.4 Chat and messaging system
Our services give you the opportunity to contact other users via integrated chat and messaging functions, to exchange information and, if necessary, to initiate and conclude contracts. The categories of data processed in this context are master data, contact data, and, where applicable, content data, contract data, and payment data. We transmit this data to the person you have contacted to the extent that you yourself approve the data transmission or integrate this data into your messages yourself. In addition, we receive information about the time and the parties involved in a contact via our chat and message functions. Furthermore, the personal data you provide is transmitted to us by your browser and stored in our information technology systems. Your IP address and the time of registration are also stored.
The processing operations associated with the use of our chat and messaging systems serve the purpose of assigning usage processes and enable you to access the entire range of our services. The use of the chat and messaging functions is an essential part of our services, therefore the processing of your data serves the purpose of contract execution and is thus purpose-bound and necessary in accordance with Art. 6 (1) lit. b GDPR.
The storage of your IP address and the time of use of our chat and message functions is necessary to ensure the security of our information technology systems. This is also our legitimate interest, which is why the processing is also lawful under Art. 6 (1) lit. f GDPR.
The personal data you enter will be stored until your profile is deleted from our system, and beyond that only for as long as processing is necessary for the performance of any contract.
We don’t plan on sharing your data with other third parties.
6.1 Contact form / Contact by email
We process the personal data you provide us with when contacting us for the purpose of responding to your inquiry, email, or callback request. The categories of data processed in this context are master data, contact data, content data, usage data (if applicable), connection data, and contract data (if applicable). In individual cases, we forward this data to affiliated companies or third parties that we commission to process orders. The legal basis for processing depends on the purpose of the contact. By submitting your request in the contact form or by contacting us by email, you declare that you would like answers or information on specific topics. You also provide your data for this purpose. We will respond to your request as requested and process your data for this purpose. Therefore, the authorization to process your data is based on Art. 6 (1) lit. b GDPR, as we process it to respond to your request and thus to fulfill the contract in this regard.
6.2 Applicant management
We process the personal data that you provide to us during the application process (e.g., via the corresponding contact/application form in our services) for the purpose of processing your application and carrying out the application procedure. At your request, we will also consider your application for future application procedures. The categories of data processed in this context are master data, contact data, content data, usage data (not for postal applications), connection data (not for postal applications), and contract data. In the case of unsuccessful applications, we delete your data within 3 months of rejection ( ). In the case of successful applications, we transfer your data to our systems, e.g., to the personnel file. The legal basis for processing your data in the context of applicant management is based on Art. 88 (1) GDPR in conjunction with § 26 (1) sentence 1 BDSG. The legal basis for applying to subsidiaries and for storing data for future application procedures is Art. 6 (1) lit. a GDPR in conjunction with Art. 7 GDPR, Section 26 (2) BDSG; Art. 6 (1) lit. f GDPR.
6.3 ChatGPT
In our services, we use the AI services of OpenAI’s „ChatGPT“ service in the OpenAI API version. The recipient of the data is OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (as joint controller, Art. 26 GDPR). The categories of data processed are master data, contact data, content data, usage data (if applicable), connection data, and contract data (if applicable). If OpenAI transfers this data to a third country (e.g., the USA), this will be done on the basis of a data processing agreement concluded with OpenAI and in accordance with standard contractual clauses agreed with OpenAI and other security measures permitted by the GDPR, which ensure the security of the processing of your personal data with a level of protection identical to that in the EU, in particular on the basis of the EU-US Data Privacy Framework (DPF). ChatGPT is an artificial intelligence that is integrated into our services and can influence and control the matching and scoring of customer inquiries against suitable partner offers in our services. The purpose of data processing is to provide an intelligent system that checks whether partners in our services have an offer that suits customer needs. When providing our services or parts of our services, ChatGPT serves as an essential basis for the corresponding processing of data, without which we would not be able to offer our services. The processing of your data by ChatGPT therefore serves the purpose of contract execution and is thus purpose-bound and necessary in accordance with Art. 6 (1) lit. b GDPR.
7.1 Provision of our services
In order to provide you with our services, we use the services of a hosting provider. Our services are accessed from the servers of this hosting provider. For these purposes, we use the infrastructure and platform services, computing capacity, storage space, and database services, as well as security services and technical maintenance services of the web hosting provider.
The data processed includes all data that you enter in connection with your use and communication in connection with your visit to our services or that is collected from you in this context (e.g., your IP address). Our legal basis for using a hosting provider to provide our services is Art. 6 para. 1 lit. f GDPR (legitimate interest).
7.2 Receiving and sending emails
The services of the host we use may also include the sending, receiving, and storage of emails. For these purposes, the addresses of the recipients of your emails and the senders, as well as other information relating to the sending of emails (e.g., the providers involved) and the content of the respective emails, are processed. The aforementioned data is processed for purposes including the detection of spam. Emails are generally not sent in encrypted form on the internet. As a rule, emails are encrypted during transmission, but (unless end-to-end encryption is used) not on the servers from which they are sent and received. We therefore cannot accept any responsibility for the transmission of emails between the sender and the recipient on our server. Our legal basis for using a hosting provider to receive and send emails is Art. 6 (1) (f) GDPR (legitimate interest).
7.3 Collection of access data and log files
We ourselves (or our hosting provider) collect data on every access to the server (server log files). Server log files may include the address and name of the services and files accessed, the date and time of access, the amount of data transferred, notification of successful access, browser type and version, your operating system, referrer URL (the previously visited page), and, as a rule, IP addresses and the requesting provider.
The server log files can be used for security purposes, e.g., to prevent server overload (especially in the case of malicious attacks, known as DDoS attacks) and to ensure server utilization and stability. Our legal basis for using a hosting provider to collect access data and log files is Art. 6 (1) lit. f GDPR (legitimate interest).
We maintain fan pages on social networking websites and process personal data in this context in order to communicate with users active there or to provide information about us. Please note that when you visit our fan pages, your data may be processed outside the European Union. The operators of the respective social networks are responsible for this. A detailed description of the respective forms of processing and the options for objection (e.g., opt-out) can be found in the privacy policies of the operators of the respective social networks.
We operate a LinkedIn fan page for our company on LinkedIn. When you visit and use the LinkedIn fan page, LinkedIn can evaluate your usage behavior and share the information obtained from this with us. This information is used for the purposes of economic optimization and the needs-based design of our website/services. The categories of data processed here are master data, contact data, content data, usage data, and connection data. The recipient of the data is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, as joint controller in accordance with Art. 26 GDPR. The legal basis for processing the data in accordance with the provisions set out here results from our legitimate interest and thus from Art. 6 (1) lit. f GDPR.
LinkedIn is responsible for implementing your rights as a data subject. LinkedIn will inform you about your rights as a data subject at: https://de.linkedin.com/legal/privacy-policy. You can also assert your rights against us, and we will then forward your request to LinkedIn immediately.
X
We operate an X fan page for our company on X. When you visit and use our X fan page, X may evaluate your usage behavior and share the information obtained from this with us. This information is used for the purposes of economic optimization and the needs-based design of our website. The categories of data processed here are master data, contact data, content data, usage data, and connection data. The recipient of the data is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland, as joint controller in accordance with Art. 26 GDPR. The legal basis for processing the data in accordance with the provisions set out here results from our legitimate interest and thus from Art. 6 (1) lit. f GDPR.
X is responsible for implementing your rights as a data subject. X will inform you about your rights as a data subject at:www.twitter.com/de/privacy . You can also assert your rights against us, and we will then forward your request to X immediately.
In order to ensure smooth technical operation and optimal user-friendly use of our services, we use the following services:
We use various services for the functioning of our services, to measure their use, and for related marketing purposes. These services consist primarily of services provided by Google Firebase technology.
Below, we show you which services are functionally necessary and which services help us to analyze your usage behavior. The use of functionally necessary services is covered by the legal basis of Art. 6 (1) lit. b GDPR (for the performance of a contract) or by the legal basis of Art. 6 (1) lit. f GDPR (based on our legitimate interest).
Functionally necessary services
The following services are necessary for the functioning of our services.
Cloud Storage The recipient of the relevant data is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. If Google transfers this data to a third country (e.g., the US), this will only happen in individual cases, on the basis of a data processing agreement concluded with Google and in accordance with standard contractual clauses agreed with Google and other security measures permitted by the GDPR, which guarantee the security of the processing of your personal data with a level of protection identical to that in the EU, in particular on the basis of the EU-US Data Privacy Framework (DPF).
Statistics and marketing services
The following services are not necessary for the functioning of our services, but they help us to evaluate the usage behavior of our services and to derive corresponding improvement and/or marketing measures.
The recipient of the data is also Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. If Google transfers this data to a third country (e.g., the US), this will only happen in individual cases, on the basis of a data processing agreement concluded with Google and in accordance with standard contractual clauses agreed with Google and other security measures permitted by the GDPR, which guarantee the security of the processing of your personal data with a level of protection identical to that in the EU, in particular on the basis of the EU-US Data Privacy Framework (DPF). For the use of these statistics and marketing services, we obtain your active consent (opt-in) in accordance with Art. 6 (1) lit. a GDPR or § 25 (1) TDDDG so that we can use them. If this consent is not given or is revoked, we will not use these services.
