Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

2. Purposes of processing

We process personal data for the following purposes:

• Provision and operation of the hainsoft.io platform
• Contract initiation and conclusion (registration, trial, subscription)
• Customer support
• Invoicing and payment processing
• Security and fraud prevention
• Compliance with statutory retention obligations

3. Legal bases

• Art. 6(1)(b) GDPR — Performance of a contract or pre-contractual measures
• Art. 6(1)(c) GDPR — Compliance with a legal obligation
• Art. 6(1)(f) GDPR — Legitimate interests (security, fraud prevention)
• Art. 6(1)(a) GDPR — Consent (where separately obtained)

4. Recipients

• Vercel Inc. — Hosting (EU server locations; DPA in place)
• Supabase Inc. — Database hosting (EU/Frankfurt; DPA in place)
• Stripe Inc. — Payment processing (DPA in place)
• Resend Inc. — Transactional email (DPA in place)

5. Retention periods

We store personal data only as long as necessary for the purposes of processing or as required by statutory retention obligations. After subscription cancellation, data is permanently pseudonymised in accordance with our deletion policy (90 days after soft-delete). Tax-relevant data (invoices, bookings) is retained for 10 years.

6. Data subject rights

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR) — JSON export available
• Right to object (Art. 21 GDPR)

Please address requests to: info@luneeo.de

7. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the GDPR.

8. Cookies and tracking

This website uses only technically necessary cookies (session cookie for authentication). No advertising cookies, Google Analytics, Facebook Pixel or comparable tracking tools are used.

9. Hosting

hainsoft.io infrastructure is operated by Vercel Inc. (EU server locations) and Supabase Inc. (database server Frankfurt/EU). Both providers have signed Data Processing Agreements (DPAs) pursuant to Art. 28 GDPR and meet GDPR requirements. File uploads are stored on Hetzner Object Storage (Germany).