Privacy Policy

1. General Information

The protection of your personal data is of particular concern to us. In this privacy policy, we inform you about the processing of your personal data when using our web application.

2. Controller

The controller responsible for data processing on this website is:
Björn Schreiner
Am Mooranger 9
38446 Wolfsburg
Germany

3. Collection and Storage of Personal Data

When you create a user account on our web application, we collect and store the following personal data:

  • First and last name
  • Email address
  • Password (encrypted)

This data is necessary to enable you to use the web application and its features.

We also store the agendas you create, including their contents (title, date, description, and agenda items with topic, speaker, and duration). This data is stored solely to provide the core functionality of the app.

Legal basis: Art. 6 (1) lit. b GDPR (performance of a contract).

4. Contact Form

If you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provided, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in responding to your inquiry). The data will be deleted as soon as it is no longer necessary for achieving the purpose for which it was collected, but no later than after 12 months.

5. Email Communication

TurboAgenda sends transactional emails as part of its features. These include in particular:

  • Confirmation and welcome emails upon account registration
  • Password reset emails
  • Invitation emails when you are invited as a speaker to an agenda item
  • Notification emails to inviters when an invitation has been accepted or declined

All emails are sent exclusively via our own mail server operated by Netcup GmbH (Emmy-Noether-Straße 10, D-76131 Karlsruhe, Germany). No third-party email services are used.

Legal basis: Art. 6 (1) lit. b GDPR (performance of a contract) for account-related emails; Art. 6 (1) lit. f GDPR (legitimate interest) for notifications related to the use of app features.

6. Contacts and Third-Party Data

TurboAgenda allows you to maintain a personal address book to quickly add speakers to your agendas. At your explicit request, we store data about third parties (e.g., first name, last name, and email address of your contacts).

Please ensure that you are authorized to enter the data of the persons concerned and that those persons are informed of the storage. Contact data is only visible to you and is not shared with other users.

If you send a contact a speaker invitation, their email address will be used to send the invitation email.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in using the app's features). You can delete stored contacts at any time in your account.

7. Hosting and Technical Infrastructure

This website is hosted by:

Netcup GmbH
Emmy-Noether-Straße 10
D-76131 Karlsruhe
Germany
https://www.netcup.com

The host automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are:

  • IP address
  • Browser type and version
  • Operating system used
  • Referrer URL (previously visited page)
  • Hostname of the accessing computer
  • Time of the server request

This data is collected on the basis of Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the technical provision and security of the website.

The servers are located in Nuremberg, Germany.

8. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

9. Cookies

Our website uses cookies. Cookies are small text files that are stored on your device. We only use technically necessary cookies:

  • Session cookie: Required for login and session management.
  • Live Agenda cookies: When you use the Live Agenda feature without an account, we store the content of your agenda (title, date, agenda items) temporarily in cookies in your browser. This data does not leave your browser and is not stored on our servers. You can delete these cookies at any time via your browser settings.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in the functionality of the website). You can set your browser to inform you about the setting of cookies and only allow cookies on a case-by-case basis.

10. Purpose of Data Processing

The processing of your personal data is carried out for the following purposes:

  • Provision and management of your user account
  • Creation, storage, and management of agendas
  • Sending speaker invitations to other users via email
  • Notifying you of acceptances and rejections of invitations
  • Management of your contacts for quick assignment of speakers

11. Legal Basis for Processing

The processing of your data is based on your consent according to Art. 6 (1) lit. a GDPR and for the performance of a contract according to Art. 6 (1) lit. b GDPR when you use the features of our web application.

12. Disclosure of Data

Your personal data will only be disclosed to third parties if this is necessary for the performance of the contract (e.g., email delivery via our hosting provider Netcup GmbH in the context of invitations). For usage analytics and error monitoring we also use the service provider PostHog (see section 15). Further transmission only takes place if you have expressly consented or if there is a legal obligation.

13. Storage Duration

We only store your personal data for as long as necessary to achieve the purposes mentioned above. As soon as your user account is deleted, all associated personal data (agendas, agenda items, invitations, contacts) will also be deleted, unless there are legal retention obligations.

14. Fonts and Icons

This website uses web fonts (Parkinsans, Azeret Mono, DM Sans) and the icon font Font Awesome for a uniform display. All fonts and icons are installed locally on our server. No connection to servers of Google, Font Awesome or other third parties takes place.

No personal data is transmitted to these providers.

15. Usage Analytics and Error Monitoring (PostHog)

To understand how the features of our web app are used and to detect and fix technical errors, we use the service PostHog. The provider is PostHog Inc., USA. The data is processed on servers in the European Union.

Data is collected exclusively on our server. PostHog does not set any cookies and no PostHog script is loaded in your browser. If you are signed in with a user account, the following data is transmitted to PostHog:

  • Internal user ID, name, email address, language and time of registration
  • Usage events, for example signing in, creating, editing or starting an agenda, sending invitations and adding contacts. The content of your agendas is not transmitted.
  • Error reports with technical details about the error and the affected request

Your IP address is not stored by PostHog. Without a user account, no usage events are recorded that can be attributed to you personally.

Legal basis: Art. 6 (1) lit. f GDPR. Our legitimate interest lies in improving the web app and keeping it stable. You can object to this processing at any time (see section 16).

16. Your Rights

You have the following rights:

  • To request information about your stored data (Art. 15 GDPR)
  • To request the correction of incorrect data (Art. 16 GDPR)
  • To request the deletion of your data (Art. 17 GDPR)
  • To request the restriction of processing (Art. 18 GDPR)
  • To request data portability (Art. 20 GDPR)
  • To object to the processing of your data (Art. 21 GDPR)
  • To withdraw consent at any time (Art. 7 (3) GDPR)

The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise these rights, please contact: info@turboagenda.de

17. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).