Legal information
Privacy notice
This is a translation for your convenience; the German version is the legally binding one.
Controller
Alexander Baruschke, Bramfelder Dorfplatz 4a, 22179 Hamburg, kontakt@rualba.group
What this site processes
The test runs in your browser. As long as you do not buy, your answers never leave the page and disappear once you close it. If you buy the test, your answers are transmitted to our server together with your order and stored there - otherwise we could neither deliver nor restore your result. The legal basis is Article 6(1)(b) GDPR, performance of the contract.
When you open the page, the hosting provider processes technically necessary access data. The legal basis is Article 6(1)(f) GDPR, legitimate interest in secure operation.
Hosting provider: STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The data processing agreement under Article 28 GDPR forms part of STRATO’s terms and conditions, version 3.5 of 18 March 2024. Processing takes place in the Berlin and Karlsruhe data centres and therefore exclusively in Germany.
Fonts
The fonts Bodoni Moda and Archivo are embedded in this page itself. There is no connection to Google and no transfer to a third country. Reason: on 20 January 2022 the Munich Regional Court I held, case no. 3 O 17493/20, that loading Google fonts without consent breaches the GDPR.
What this site does not do
No cookies, no audience measurement, no scripts from advertising networks, no embedded third-party content. That is why there is no consent banner. The click identifier from ads is the one exception and is described separately below; it is not stored on your device.
Click identifier from ads
If you reach us through an ad on Microsoft Advertising, the address carries a click identifier, the parameter msclkid. During your visit this string stays in your browser’s memory only. Nothing is stored on your device; there is neither a cookie nor any other storage for it - which is why we do not ask for your permission under section 25 of the German Telecommunications Digital Services Data Protection Act.
Only if you buy does the identifier travel to our server together with your order and get stored there. We later use it to report to Microsoft that an ad led to a purchase. What is transmitted is the identifier, the time and the amount - no name, no email address, no postal address. There is no Microsoft tracking pixel on this site; your browser builds no connection to Microsoft. After 90 days the report is no longer possible and the identifier is no longer used. The legal basis is Article 6(1)(f) GDPR, legitimate interest in measuring our own advertising. If you open the site without coming from an ad, no identifier arises.
If you reach us through a Google Ads ad, the address likewise carries a click identifier, the parameter gclid, plus the search term we booked, in the parameters kw and mt. That term is our own booking, not your search query. Here too everything stays in memory during your visit, and only if you buy does it travel to our server with your order. Unlike with Microsoft, we report nothing back to Google: there is no Google tracking pixel on this site, your browser builds no connection to Google, and we upload no file of purchases to Google. We only see for ourselves which ad led to a purchase. The legal basis is Article 6(1)(f) GDPR, legitimate interest in measuring our own advertising. Should this change, it will say so here beforehand.
With the paid version
Payment through Stripe. Payment runs through Stripe Payments Europe, Limited, Ireland. Your name, billing address, email address, the amount and the payment details you enter on the payment page go there. The legal basis is Article 6(1)(b) GDPR, performance of the contract. For processing the payment Stripe is its own controller under Article 4(7) GDPR, not our processor. We never see card details.
Payment by bank transfer. If you choose a bank transfer instead, the payment goes to the business account at Qonto (Olinda SAS, German branch). Your name, the payment reference and the amount are processed. The legal basis is Article 6(1)(b) GDPR. Under Article 4(7) GDPR the bank is its own controller, not our processor.
Invoice data. Name, address, invoice number, amount and date are kept for ten years under section 147(3) of the German Fiscal Code and section 257 of the German Commercial Code. The legal basis is Article 6(1)(c) GDPR.
Your answers and your result are stored only with an account, legal basis Article 6(1)(b) GDPR. They are deleted when you delete your account. The anonymous comparative evaluation runs solely on your own tick, Article 6(1)(a) GDPR, revocable at any time.
Your rights
Access, rectification, erasure, restriction, data portability, objection and the right to lodge a complaint with a supervisory authority. The competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.
meandmyscent · Alexander Baruschke · Bramfelder Dorfplatz 4a · 22179 Hamburg · +49 175 4582003
Made by RUALBA Group