Controller
Alex Fitterling
Wöhrder Kreuzgasse 8
90489 Nürnberg
Germany
Email: info@sp33c.tech
Hosting and server logs
This website is hosted on Amazon Web Services (AWS) on servers in the EU (Frankfurt, eu-central-1). When you visit, your browser transmits technical data — including your IP address, date and time, the page requested, and your browser and operating system — which is processed in server logs to deliver the site securely and reliably. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functional website). AWS acts as our processor under a data processing agreement.
Language cookie
We store a single strictly necessary cookie named “locale” to remember your language choice. It contains only a language code (e.g. “de”), is not used for tracking, and is therefore exempt from consent. Legal basis: § 25(2) TDDDG and Art. 6(1)(f) GDPR.
Contact form
If you use the contact form, we process the name, email address, subject, and message you provide. To prevent spam we use a double opt-in: your submission is stored temporarily and we email you a confirmation link; only after you click it is your message forwarded to our support inbox. Unconfirmed submissions are automatically deleted after 24 hours. Legal basis: Art. 6(1)(b) and (f) GDPR (handling your request).
Recipients and processors
Contact submissions are stored in Amazon DynamoDB and emails are sent via Amazon SES, both operated by AWS as our processor within the EU. We do not sell your data or share it with third parties for their own purposes.
No tracking
We use no analytics, advertising, tracking pixels, social-media plugins, or third-party fonts, and we never show the App Tracking Transparency prompt. The Don’t Forget Me app processes everything on your device: your lists, trips, people and pinned places are stored only on your iPhone, and geofencing runs entirely on-device — the app is told you crossed an edge, never where that edge is. It has no account, sends nothing to a server, and collects no data about you.
Retention
Unconfirmed contact submissions are deleted after 24 hours. Confirmed messages are kept only as long as needed to handle your request and to meet legal obligations. Server logs are retained briefly for security and operations.
Your rights
Under the GDPR you have the right to:
- access your personal data (Art. 15)
- rectification of inaccurate data (Art. 16)
- erasure (Art. 17)
- restriction of processing (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interests (Art. 21)
To exercise any of these rights, email info@sp33c.tech.
Right to complain
You also have the right to lodge a complaint with a data protection supervisory authority — for example the Bavarian State Office for Data Protection Supervision (BayLDA).