Here is the translation of the privacy policy into English:

Privacy Policy

Last updated: 21.08.2024

The original version of these Terms of Use is from the German language. Translations may distort the meaning and may differ from the actual statements of the original version. The terms of the original version (German) apply.

General

We hereby inform you, in accordance with the legal requirements of data protection law (particularly under the new BDSG and the European General Data Protection Regulation “GDPR”), about the type, scope, and purpose of the processing of personal data through our services. This privacy policy applies to our websites, services (the Discord bots “Task Manager#4550,” “Knowledge Manager#8167,” or “Calendar Manager#5911”), and social media profiles. For the definitions of terms such as “personal data” or “processing,” we refer to Art. 4 GDPR.

Name and Contact Information of the Controller

Our controller (hereinafter referred to as “Controller”) as defined in Art. 4 No. 7 GDPR is:

Bnder UG (limited liability)
Im Flath 12
38542 Leiferde
Germany
Phone: +49 511 45032009
Email: contact@bnder.net
Website: https://www.bnder.net
Register Court: Amtsgericht Hildesheim
Registration Number: HRB 209373
Authorized Managing Director: Jan Brinkmann

Changes to This Privacy Policy

We reserve the right to modify this privacy policy to adapt it to changes in legal requirements or in our services. We will inform you about significant changes on our website. The current version is always available on our website.

Types of Data, Purposes of Processing, and Categories of Data Subjects

Below, we inform you about the type, scope, and purpose of the collection, processing, and use of personal data.

Types of Data We Process

IT usage data (IP address, device information, access times, visited websites, etc.)
Your Discord ID (an identification number unique across the entire Discord platform but not traceable to your person by us)
Data provided by you through our services (individual task texts, project names, server settings & other data you transmit to us through interaction with our services)
Payment data (e.g., credit card numbers, bank details, transaction data)

To technically and economically optimize our offered services, provide easy access to our services, optimize and statistically evaluate our services, support the commercial use of services, improve user experience, and create statistics.
Your Discord ID is needed to link your data to your Discord account. We do not collect any personal data. All data is only associated with the ID of your account.
To provide you with the optimal use of our services, adapting the services to your preferences.
To process payments and fulfill contracts (e.g., via Stripe).

Visitors/users of the website
Discord users who share a Discord server with one of our services
Customers who use payment services through Stripe

The data subjects are collectively referred to as “users.”

Use of Cookies and Tracking Tools

We do not use cookies, social media plugins, Google Analytics, or other tracking tools on our website. No personal data is collected or processed using such technologies.

Data Processing by Our Discord Bots

Our Discord bots process data to provide you with the full functionality of our services. All transmitted data is stored on secure servers in the EU. The processing is automated and serves only to provide bot functions. You can request the deletion of your data at any time by removing the bot from your server and sending us a corresponding request to our contact address.

Additionally, we use external service providers such as Cloudflare (to provide secure access to our services) and Google Cloud (for hosting and data processing).

Payment Processing via Stripe

We use Stripe as a payment service provider to process payments for our paid services. When using Stripe, the payment information you provide (e.g., credit card numbers, bank details) is directly forwarded to Stripe and processed by Stripe. We do not store any payment data.

The data processing by Stripe is carried out in accordance with applicable data protection regulations and solely for the purpose of payment processing. Stripe may transfer your data to the USA. To ensure an adequate level of data protection, Stripe uses standard contractual clauses and other measures recognized by data protection authorities.

For more information on data protection at Stripe, please visit https://stripe.com/de/privacy.

Legal Bases for the Processing of Personal Data

Below we inform you about the legal bases for processing personal data:

If we have obtained your consent for the processing of personal data, Art. 6(1) sentence 1 lit. a) GDPR serves as the legal basis. If the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures taken at your request, Art. 6(1) sentence 1 lit. b) GDPR serves as the legal basis. If the processing is necessary for compliance with a legal obligation to which we are subject (e.g., statutory retention obligations), Art. 6(1) sentence 1 lit. c) GDPR serves as the legal basis. If the processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6(1) sentence 1 lit. d) GDPR serves as the legal basis. If the processing is necessary for the purposes of the legitimate interests pursued by us or a third party and your interests or fundamental rights and freedoms do not override these interests, Art. 6(1) sentence 1 lit. f) GDPR serves as the legal basis.

Transfer of Personal Data to Third Parties and Processors

We only transfer personal data to third parties if this is necessary to fulfill our contractual obligations, if we are legally obliged to do so, or if there is a legitimate interest in the transfer.

We use the following processors for processing your data:

Google Cloud Platform: For hosting our website and services, as well as for storing and processing data. The data is processed on servers within the EU. We have entered into agreements with Google to ensure compliance with the GDPR.
Cloudflare: To protect our website and services by providing secure access and defending against threats (e.g., DDoS attacks). We have also entered into a data processing agreement with Cloudflare to ensure compliance with the GDPR.
Stripe: For payment processing. Stripe processes your payment data and may transfer it to countries outside the EU, particularly the USA. We have entered into a data processing agreement with Stripe to ensure compliance with the GDPR.

Data Transfer to Third Countries

In principle, your personal data is processed within the European Union (EU). However, it may happen that data is transferred to third countries (outside the EU) through the use of Google Cloud, Cloudflare, and Stripe.

In such cases, we ensure that your data is processed only in compliance with the specific requirements set forth in Art. 44 et seq. GDPR. This includes, in particular, the use of standard contractual clauses or other appropriate safeguards to ensure an adequate level of data protection.

Deletion of Data and Retention Period

Unless explicitly stated in this privacy policy, your personal data will be deleted or blocked as soon as the purpose for storage no longer applies, unless further retention is required for evidentiary purposes or legal retention obligations prevent deletion. These obligations include, for example, the commercial retention obligations for business letters according to § 257(1) HGB (6 years) and tax retention obligations according to § 147(1) AO for documents (10 years). When the prescribed retention period expires, your data will be blocked or deleted unless it is still required for contract conclusion or fulfillment.

Specifically, your data will be deleted when you no longer use our services. For our Discord bots, this means that the bot is no longer on your server. Once this is detected, and the last interaction with the Discord bot or related services was 30 days ago, a request for deletion of your data is automatically initiated. If you wish for immediate deletion of your data, please contact us via the contact details provided above. All data provided by you will then be irrevocably deleted. This particularly affects your individual task texts, project data, and server settings.

Data Subject Rights

You have the following rights:

Right to Information: You have the right to request confirmation as to whether data concerning you is being processed and to obtain information about this data, as well as further information and copies of the data in accordance with Art. 15 GDPR.
Right to Rectification: You have the right, according to Art. 16 GDPR, to request the correction of incorrect data concerning you or the completion of incomplete data.
Right to Erasure: You have the right, in accordance with Art. 17 GDPR, to request that relevant data be deleted without delay, or alternatively, in accordance with Art. 18 GDPR, to request a restriction on the processing of the data.
Right to Data Portability: You have the right to request that the data you have provided to us be received in accordance with Art. 20 GDPR and to request its transmission to other controllers.
Right to Complain: You also have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR.

Right to Object

Users may object to the processing of their personal data at any time in accordance with legal requirements. This includes, in particular, the objection to processing for the purposes of direct advertising.

Contact for Data Protection Inquiries

For data protection inquiries, you can reach us at:

Email: contact@bnder.net Address: Im Flath 12, 38542 Leiferde, Germany