Privacy policy

No data protection officer has been appointed, as the legal requirements for doing so are not met.

This website is delivered via Cloudflare Workers, provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

When you visit the website, technically necessary connection data is processed. This may include in particular the IP address, date and time of access, requested URL, referrer, browser and operating system details and the HTTP status. The processing is required to deliver the website, keep it stable and fend off abusive requests.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and efficient operation of this website.

Cloudflare processes data on our behalf. For transfers to third countries Cloudflare relies, among other things, on the EU standard contractual clauses and further safeguards described in the data processing agreement.

More information: Cloudflare privacy policy and Cloudflare Data Processing Addendum.

The Sevmo app described on this website reads selected accounts and transactions locally from MoneyMoney. The app never needs or processes online banking credentials. It does not send any financial data to us or to a Sevmo cloud service.

There are two ways to transfer data to sevDesk:

CSV export: The app creates files in a folder chosen by the user. The transactions do not leave the Mac; the user imports them into sevDesk themselves.

Direct booking via the sevDesk API: Once explicitly set up by the user, the app transfers the selected transactions directly to the user's sevDesk account. The only recipient is sevDesk (sevDesk GmbH), the provider engaged by the user; we do not receive this data. Processing there is governed by sevDesk's privacy policy and the user's contract with sevDesk. The API token required for this is stored only in the user's macOS keychain, is not sent to us and is never written to any log. This route is optional and must be actively set up by the user.

So that later runs only include new transactions, the app stores the MoneyMoney transaction IDs already transferred and their status locally on the user's Mac.

If you contact us via the contact form, by email or by phone, we process your name, your email address, the content you send and the communication data needed to handle it.

The processing serves to handle your request. The legal basis is Art. 6(1)(b) GDPR where the request relates to entering into or performing a contract, otherwise Art. 6(1)(f) GDPR. Our legitimate interest is answering your request properly.

Form submissions are processed by a Cloudflare Worker and delivered to our mailbox via the Cloudflare Email Service. They are not stored in any form database beyond that.

We delete this data once the request has been dealt with and no statutory retention obligations or legitimate reasons for further storage apply.

When you buy a Sevmo licence, payment is handled by the payment service provider Stripe, Inc., 354 Oyster Point Blvd, South San Francisco, CA 94080, USA. The payment details you enter during checkout (such as card or account details) are processed only by Stripe; we neither receive nor store them. Stripe only sends us a confirmation of payment and your email address.

After successful payment we generate a licence key, store it as a non-reversible hash together with your email address and the time of purchase in a database at Cloudflare, and send you the key via the Cloudflare Email Service to the email address provided.

When the app is activated, it sends the licence key, a pseudonymous device identifier and the app version to our server. We store this information to limit the licence to up to three of your own Macs and to re-check its validity regularly. Accounts, transactions and other financial data are not transferred during the licence check.

The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Payment processing is additionally governed by Stripe's privacy policy. For transfers to third countries Stripe relies on the EU standard contractual clauses and further safeguards.

To protect the contact form against automated submissions we use Cloudflare Turnstile. Cloudflare processes technically necessary data, in particular the IP address and information about the browser, device and interaction, to determine whether the request comes from a human.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting the form and our systems against spam and abuse. Turnstile is not used for advertising or analytics.

Only one cookie is necessary: cc_consent stores your choice in the cookie banner for twelve months (Section 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR). All statistics services in this policy are only loaded after you have agreed in the banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). No analytics script is requested before you agree.

You can withdraw or change your consent at any time with effect for the future: open cookie settings. When you withdraw consent we delete the cookies of the affected services in your browser and reload the page.

Technically necessary storage by the spam protection described above cannot be ruled out.

With your consent we use Matomo, open-source software running on our own server in Germany, to measure how the site is used (pages viewed, time on site, source, shortened IP address). Matomo sets cookies (_pk_id, _pk_ses) for up to 13 months. The data does not leave our server and is not passed on to third parties. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Raw data is deleted after 13 months at the latest.

With your consent we use Microsoft Clarity by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity records how visitors interact with the site (mouse movements, clicks, scrolling) and creates heatmaps and session analyses; input in form fields is masked. Clarity sets cookies (_clck, _clsk, CLID) for up to one year. Data may be transferred to Microsoft in the USA; Microsoft is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). More: privacy.microsoft.com.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Simply write to the email address above.

You can also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de.

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Legal notice