Privacy Policy

The controller within the meaning of Art. 4 no. 7 GDPR is: Dominic Marx Ulmergasse 16 89073 Ulm, Germany E-mail: hey@telefonansagen-sofort.de Phone: +49 731 79088887

We are not required to appoint a data protection officer. Please direct any questions about data protection to the e-mail address above.

Types of data

Usage data (access times, pages visited), contact data (name, e-mail address), payment data (invoice and transaction data) and content data (the announcement texts you enter).

Purposes of processing

Providing the website, generating the announcements you order, handling orders and payments, customer service, and complying with statutory obligations. We do not use your data for advertising or profiling, nor do we pass it on for advertising purposes.

Data subjects

Visitors to this website and customers — collectively referred to as “users”.

Depending on the purpose, we base the processing on one of the following:

• Consent: Art. 6(1)(a) GDPR, where you have given us your consent.
• Contract: Art. 6(1)(b) GDPR, where the processing is necessary to perform a contract or to take pre-contractual steps.
• Legal obligation: Art. 6(1)(c) GDPR, for example for commercial and tax retention obligations.
• Legitimate interest: Art. 6(1)(f) GDPR, where the processing is necessary to protect our legitimate interests and your interests do not override them.

We do not pass data on to third parties without your consent, unless the disclosure is necessary to perform the contract — for example to the payment provider — or we are obliged to do so by law or by an official or court order.

We use processors for hosting, payment handling and speech synthesis. Agreements pursuant to Art. 28 GDPR are in place with them; they process your data exclusively on our instructions and are obliged to take appropriate technical and organisational measures.

Transfers to third countries only take place through the services named in this policy: Stripe and ElevenLabs process data in the USA. The basis is the European Commission’s standard contractual clauses pursuant to Art. 46(2)(c) GDPR. A level of data protection equivalent in every respect to European standards cannot be guaranteed in third countries.

We delete or block your data as soon as the purpose of storage no longer applies or you withdraw your consent — unless statutory retention obligations prevent this. These mainly concern business letters (six years) and accounting records (ten years). The specific periods for accounts, announcements and log files are stated in the respective sections.

We do not use automated decision-making or profiling.

If you merely visit the website, we process the data your browser automatically transmits to our server:

• IP address
• date and time of the request
• the page requested and the amount of data transferred
• HTTP status code
• the page the request came from
• browser type, browser version and language setting
• operating system

This data serves to deliver the website in a functional and secure manner. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR.

This data is not combined with other sources or with your account.

For security reasons we keep the log files for seven days and delete them automatically afterwards.

Cookies are small text files that your browser stores on your device and returns to our website on your next visit.

The cookies we set

This website works with a single, strictly necessary cookie. We set no analytics, advertising or third-party cookies. For audience measurement we load a script from our own analytics server, which works without cookies — which is why there is no cookie banner.

auth_session: Keeps you signed in, or keeps your guest session, so that the announcements you generate and your credit balance stay associated with you. For its lifetime see the section on anonymous accounts. The service cannot be used without it.

The legal basis is Art. 6(1)(b) GDPR, as the cookie is strictly necessary for the service you requested. No consent is required for it under Section 25(2) no. 2 TDDDG.

You can refuse cookies in your browser settings or delete stored cookies at any time. Without the cookie named above, however, this website cannot be used.

To see which pages get used and where visitors get stuck, we use Umami — analytics software we run ourselves, on our own server in Germany. The data goes to no analytics provider and never leaves our infrastructure.

What is measured

The page requested and its title, the referring page, browser, operating system, device type, screen resolution, language setting, and country, region and city.

Umami sets no cookies for this, and your IP address is not stored. From your IP address, browser identification and a secret key our server derives an identifier that ties the requests of one session together; the IP address cannot be recovered from it. Recognition across other websites is therefore impossible, and we cannot attribute the figures to any person.

Session recordings

For roughly 15 per cent of sessions we additionally record what happens: mouse movement, clicks, scrolling and page changes. Whatever you type into form fields is masked and cannot be read in the recording. A recording ends after five minutes at the latest; we keep it for no more than 30 days and delete it afterwards.

The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR in improving this website on the basis of sound usage figures.

If your browser sends “Do Not Track”, we measure nothing — neither page views nor sessions. You will find the setting under your browser’s privacy settings. Because we identify nobody, this is the only way to effectively object to the measurement.

We handle payments via Stripe (Stripe, ℅ Legal Process, 510 Townsend St., San Francisco, CA 94103). The legal basis is Art. 6(1)(b) GDPR insofar as the processing is necessary to handle the payment, and otherwise our legitimate interest in a secure and efficient payment method pursuant to Art. 6(1)(f) GDPR.

What is transmitted: name, e-mail address, customer and order number, bank details or credit card data including expiry date and verification number, transaction amount, and the date and time of the transaction.

Without this data we cannot process a payment via Stripe.

Stripe acts partly as a processor on our instructions (Art. 28 GDPR) and partly as a controller in its own right in order to meet regulatory obligations; we have no influence over the latter.

For transfers to the USA, Stripe relies on the EU standard contractual clauses.

We store the payment data until the payment has been completed, including the period required for refunds, receivables management and fraud prevention. Tax retention obligations remain unaffected.

Further information about the options for objection and removal with regard to Stripe can be found in the Stripe Privacy Center.

We generate the announcements using ElevenLabs Inc., 169 Madison Ave #2484, New York, NY 10016, USA.

What is transmitted is the announcement text you enter and the identifier of the voice you chose — not your name, e-mail address or payment details.

Please do not enter personal data of third parties into the announcement text that does not belong there: the text leaves our system in order to be synthesised.

The sole purpose is generating the audio file you ordered; the legal basis is Art. 6(1)(b) GDPR.

Processing takes place in the USA on the basis of the European Commission’s standard contractual clauses pursuant to Art. 46(2)(c) GDPR.

We keep the generated audio file in your account until you delete it or your account ends. For retention at ElevenLabs please refer to their privacy policy: https://elevenlabs.io/privacy

As a data subject you have the following rights towards us:

• Access (Art. 15 GDPR): You can find out whether and which data we process about you, for what purpose, for how long and to whom we disclose it.
• Rectification (Art. 16 GDPR): You can have inaccurate data corrected and incomplete data completed.
• Erasure (Art. 17 GDPR): You can request the erasure of your data unless a statutory or contractual retention obligation prevents it.
• Restriction (Art. 18 GDPR): You can have the processing restricted, for example while the accuracy of your data is being verified.
• Data portability (Art. 20 GDPR): You can receive your data in a structured, commonly used and machine-readable format, or request its transmission to another controller.
• Objection (Art. 21 GDPR): You can object to processing that we base on a legitimate interest. We will review the objection and stop the processing unless we can demonstrate compelling legitimate grounds.
• Complaint (Art. 77 GDPR): You can lodge a complaint with a supervisory authority, usually at your place of residence, your place of work or the place of the alleged infringement.

You can withdraw consent you have given at any time with effect for the future. Processing carried out before the withdrawal remains lawful.

An informal e-mail to hey@telefonansagen-sofort.de is enough for any of these requests.

We take appropriate technical and organisational measures to protect your data and hold our service providers to the same standards. Transmission between your browser and our server is encrypted throughout via TLS (https).

So that you can create and listen to an announcement without registering, we create an anonymous account on your first visit. It stores no profile, only a session with your IP address and browser identifier, plus whatever you create yourself. We delete this data automatically:

• Anonymous accounts without any content are deleted in full no later than 48 hours after they were created.
• Anonymous accounts with content (announcements, credits, cart) are deleted 30 days after their last activity, including the generated audio files.
• Expired sessions, together with the IP address and browser identifier stored in them, are removed daily.

Staff with administrative rights can view the announcements you created, including the text you entered, your invoices and your credit balance in the internal admin area. This is necessary to provide support, reconcile payments and detect abuse. Every manual change to your credit is recorded with a reason and a timestamp, and is visible to you in your own area.