Crela privacy & data

The controller within the meaning of Art. 4 (7) GDPR is: Crela UG (haftungsbeschränkt)

email address password (hashed, never stored in plaintext)

name and billing address (for invoicing, VAT calculation and sanctions screening, section 5.9)

payment status (no direct storage of credit card data - exclusively processed by Stripe)

the country of your IP address, as evidence of where you live

device fingerprint (a hash of hardware characteristics; no directly identifying data)

we store how long it ran, how it ended (exit code) and its version, linked to your account

Authentication, provision of platform features (purchases, reviews, etc.)

Delivery of the website, security analyses (defense against attacks)

Contract performance, invoicing, fulfillment of commercial and tax obligations.

reach and performance analysis (aggregated statistics)

Retention period : until your account is deleted.

Records of purchases, refunds, chargebacks and payouts are part of our books and tax records and are kept for 10 years

access logs are kept for less than one day at current traffic

Retention period : 30 days, then automatic deletion.

Data stored in the EU (Ireland); access from outside the EU (Singapore, USA) possible

stored within the server environment of our hosting provider (netcup, Germany)

to recipients in the USA who are certified under the EU-US Data Privacy Framework (EU-US DPF; adequacy decision (EU) 2023/1795)

on the basis of the EU Standard Contractual Clauses (SCC, Art. 46 (2) (c) GDPR, decision (EU) 2021/914) in the data processing agreement of the provider

to recipients in countries with an adequacy decision (Art. 45 GDPR)

We use the following processors. Unless noted otherwise, they process personal data on our behalf under a data processing agreement pursuant to Art. 28 GDPR

Unless noted otherwise, they process personal data on our behalf under a data processing agreement pursuant to Art. 28 GDPR

You can delete your account at any time under Settings (Delete account), or ask us to delete it by writing to privacy@crela.io

Right of access (Art. 15 GDPR)

Right to rectification (Art. 16 GDPR)

Right to erasure (Art. 17 GDPR)

Right to restriction of processing (Art. 18 GDPR)

Right to data portability (Art. 20 GDPR)

Right to object (Art. 21 GDPR)

Right to withdraw consent (Art. 7 (3) GDPR)