Privacy policy

OpenFiskal GmbH

Rosenthaler Straße 72A
10119 Berlin, Germany

Email: hello@openfiskal.com
Phone: +49 (0) 30 37009391

Commercial register: Amtsgericht Charlottenburg, HRB 272267 B.
VAT identification number: DE453492892.

Responsible for editorial content pursuant to § 18(2) MStV: Ferry Hötzel, address as above.

The Website is hosted on the Lovable platform (lovable.dev, lovable.app) including its associated content delivery network. When you access the Website, the following technical data is automatically processed by our hosting provider on our behalf:

• IP address of the requesting device
• Date and time of the request
• Requested URL and HTTP status code
• Referrer URL
• Browser identifier and operating system (user agent)

This data is processed in server log files to deliver the Website, ensure its stability, detect and prevent misuse, and investigate security incidents.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure operation of the Website.

Retention: Operational logs are kept for a short, rolling period and then deleted, unless a specific incident requires longer retention for security reasons or to comply with legal obligations.

Data stored in our backend in connection with the operation of the Website (in particular admin area authentication data) is provided via Lovable Cloud and runs on Supabase infrastructure within the European Union. Lovable acts as a processor under Art. 28 GDPR on the basis of a data processing agreement.

We share personal data with the following processors, each of which is bound by a data processing agreement:

• Lovable / Supabase (Lovable Cloud, EU region) for hosting, application database, authentication and storage.

We do not sell personal data and do not pass it on to third parties for their own marketing purposes.

We currently do not transfer personal data to third countries outside the EU/EEA. Should this change in the future, we will rely on an adequacy decision of the European Commission pursuant to Art. 45 GDPR or on the Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR, supplemented by appropriate technical and organisational measures.

We use only strictly necessary cookies and corresponding entries in local storage that are required to operate the Website and the admin area, in particular for session handling and security. We do not use advertising cookies, cross-site tracking, web analytics tools (such as Google Analytics), social media pixels (such as the Meta Pixel), or session replay tools (such as Hotjar).

If we introduce non-essential cookies or tracking tools in the future, we will update this policy and implement a compliant consent banner.

Beyond the technical server logs described in section 2, our public blog does not collect any personal data from readers.

The Website contains links to our profiles on X, Instagram, LinkedIn and YouTube as well as to external press articles. These are plain hyperlinks. Third-party content (such as social media widgets, video players or fonts) is not loaded automatically when you access a page. Personal data is transmitted to the respective third-party providers only when you actively click a link and access their service. Their privacy policies apply in such cases.

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR), including objection to direct marketing
• Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

To exercise these rights, please contact us at hello@openfiskal.com. We may verify your identity before responding.

The Website and our service are aimed at business users. They are not intended for children under the age of 16, and we do not knowingly collect personal data from children.

We do not use automated decision-making, including profiling within the meaning of Art. 22 GDPR, on this Website.

We reserve the right to adapt this privacy policy, for example if our processing activities, our processors or the applicable law change. The current version is available at this URL. Material changes will be indicated by an updated date at the top of this page and, where appropriate, by additional notices.