Privacy Policy
This privacy policy informs about the processing of personal data when using the website and the Cashews app. Responsible under the GDPR: 8reasons Connect UG (haftungsbeschränkt), Marktplatz 20, 83607 Holzkirchen, Germany.
1. Responsible party
8reasons Connect UG (haftungsbeschränkt), Marktplatz 20, 83607 Holzkirchen, Germany.
2. Hosting and processing
The website and app are processed on servers of our platform provider. Personal data is only processed to the extent necessary to provide the service (Art. 6(1)(b) and (f) GDPR).
3. Server log files
When accessing the website, technical data (IP address, browser, time) is processed in log files to deliver and protect the page. This data is not combined with other data sources.
4. Geo-detection
To show you country-specific content and prices, your country is determined via an external, keyless service based on your IP address. No personal data is permanently stored.
5. Cookies
We use technically necessary cookies and a consent cookie. With your consent via the cookie banner we additionally set Google Analytics analysis cookies (e.g. _ga, _ga_*). Without consent, no analysis cookies are set. There is no profiling for advertising purposes.
6. Web analytics (Google Analytics 4)
With your consent we load Google Analytics 4 (Art. 6(1)(a) GDPR). The following data is processed: page views, clicks, scroll depth, language selection, approximate location (from IP address, at country/city level), browser and device data. Google truncates (anonymises) the IP address. The data is processed by Google and stored on servers in third countries (primarily USA). Google acts as a data processor under the GDPR. You can refuse or withdraw consent at any time via the cookie banner or your browser settings.
7. Account data
If you create an account, we process your email address and the data you enter for contract fulfillment (Art. 6(1)(b) GDPR).
8. Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection, as well as the right to complain to a supervisory authority (GDPR Art. 15–21).
9. Retention period
Data is deleted as soon as the purpose of processing no longer applies or you request deletion, unless legal retention obligations exist. Google Analytics data is retained by Google according to its own privacy policy (typically 14 months).