Privacy policy
Last updated:
This is a translation for convenience. The German Datenschutzerklärung is legally binding.
This privacy policy informs you, in accordance with Art. 13 GDPR, which personal data we process when you visit wohnsignal.de and app.wohnsignal.de, for what purposes and on what legal basis.
1. Controller
Blabigo UG (haftungsbeschränkt)
Wilhelm-Riehl-Straße 26
80687 München (Munich), Germany
Managing director: Nabil Chouaib
Email: info@wohnsignal.de
No data protection officer has been appointed, as the legal requirements for doing so (Art. 37 GDPR, § 38 BDSG) are not met.
2. Overview
- We set cookies for web analytics (Google Analytics) only with your consent (§ 25(1) TDDDG). Without consent, only one strictly necessary cookie is stored, which records your choice in the cookie banner.
- We embed no third-party content such as YouTube, Google Maps or social media plugins.
- Fonts are loaded from our own server; no connection is made to Google Fonts or other CDNs.
- We only process personal data that you send us via the contact form or by email, and data technically necessary to deliver the website.
3. Hosting and server logs
This website is delivered via Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you access the website, Cloudflare processes technically necessary data, in particular:
- IP address
- date and time of access
- page or file requested
- amount of data transferred and HTTP status code
- browser type and operating system (user agent)
- referrer URL
Purpose: delivering the website, ensuring stability and security, defending against attacks (e.g. DDoS).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and functional website).
Retention: Cloudflare stores this connection data only as long as necessary for operation and security. Logs of requests to our contact form (Worker logs) are deleted automatically after 3 days.
A data processing agreement under Art. 28 GDPR (Cloudflare Customer Data Processing Addendum) is in place with Cloudflare.
Hosting of app.wohnsignal.de
The application at app.wohnsignal.de runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in data centres in Germany. Requests are first routed through Cloudflare (see above). When the application is accessed, the server processes technically necessary data such as IP address, time, page requested, status code and user agent.
Purpose and legal basis: providing the application and ensuring stability and security (Art. 6(1)(f) GDPR).
Retention: server logs are deleted after 14 days at the latest.
A data processing agreement under Art. 28 GDPR is in place with Hetzner.
4. Contact and waitlist form
When you use our form, we process:
- name, company, email address (required)
- number of units managed and message (optional)
- your interest (waitlist or demo), the page language and the time of your consent
- a salted, irreversible hash of your IP address (to prevent abuse and spam)
Purpose: handling your request, adding you to the waitlist and informing you about the launch of Wohnsignal.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps at your request) and Art. 6(1)(f) GDPR (legitimate interest in preventing abuse).
Storage: Cloudflare D1 (Cloudflare’s database service), primarily operated in data centres in Western Europe.
Notification: your details (without the IP hash) are also sent by email via the delivery service Resend to our inbox info@wohnsignal.de (see section 6).
Retention: the IP hash is removed after 7 days. Your request is deleted after 12 months at the latest unless a contract is concluded or you request deletion earlier. Statutory retention obligations remain unaffected.
5. Spam protection with Cloudflare Turnstile
To protect the form from automated submissions we use Cloudflare Turnstile. Turnstile uses technical characteristics of your browser (e.g. IP address, browser properties) to check whether a request comes from a human. According to Cloudflare, Turnstile does not set cookies for tracking or advertising. The Turnstile script is only loaded on the contact page.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protection against spam and abuse).
More information: Cloudflare’s privacy policy at https://www.cloudflare.com/privacypolicy/.
6. Email delivery and contact by email
Delivery via Resend: to notify us of new form submissions we use the email delivery service Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Resend processes the form details solely to deliver the email. A data processing agreement under Art. 28 GDPR is in place with Resend.
Legal basis: Art. 6(1)(b) GDPR.
Contact by email: if you email us at info@wohnsignal.de, we process your email address and the content of your message to answer your request.
Legal basis: Art. 6(1)(b) or (f) GDPR.
Mailbox provider: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. A data processing agreement under Art. 28 GDPR is in place with IONOS.
7. Web analytics with Google Analytics
With your consent we use Google Analytics 4 on wohnsignal.de and app.wohnsignal.de, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics only loads after you click “Accept” in the cookie banner.
Data processed: pages viewed, time on page, referrer, approximate location (country/region), device and browser information, and a pseudonymous identifier stored in cookies. According to Google, Google Analytics 4 does not store IP addresses. Google Signals and ad personalisation are disabled.
Cookies: _ga and _ga_<ID> (stored for up to 2 years) to distinguish visitors, and ws_consent (1 year), which stores your choice in the cookie banner. ws_consent is strictly necessary and is also set when you decline.
Purpose: understanding how our website is used in order to improve content and offering.
Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).
Retention: analytics data is deleted in Google Analytics after 2 months.
Withdrawal: you can withdraw your consent at any time with effect for the future by opening “Cookie settings” at the bottom of the page and choosing “Decline”. This deletes the Google Analytics cookies.
Google also processes data in the USA. A data processing agreement (Google Ads Data Processing Terms) is in place with Google. More information: https://policies.google.com/privacy
8. Newsletter
We do not currently send a newsletter. If we do so in future, sign-up will be double opt-in only, and this policy will be updated.
9. Recipients and processors
We do not pass your data on to third parties for marketing. Recipients are only service providers we use to run the website, bound by our instructions as processors under Art. 28 GDPR:
- Cloudflare, Inc. (hosting, security, database, spam protection)
- Resend (delivery of notification emails)
- IONOS SE (email mailbox info@wohnsignal.de)
- Hetzner Online GmbH (server for app.wohnsignal.de, Germany)
- Google Ireland Limited (Google Analytics, only with consent)
10. Transfers to third countries
Cloudflare, Inc. is based in the USA. According to Cloudflare, it is certified under the EU-US Data Privacy Framework; transfers are based on the European Commission’s adequacy decision (Art. 45 GDPR). Should the certification lapse, Cloudflare’s Data Processing Addendum provides for standard contractual clauses (Art. 46(2)(c) GDPR).
Resend (Plus Five Five, Inc.) is also based in the USA. Transfers are based on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR), which form part of Resend’s data processing agreement. In addition, according to Resend, it is certified under the EU-US Data Privacy Framework.
When Google Analytics is used, data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; transfers are based on the European Commission’s adequacy decision (Art. 45 GDPR) and additionally on standard contractual clauses.
11. Your rights
You have the right at any time to:
- access the data stored about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- withdraw consent with effect for the future (Art. 7(3) GDPR)
Right to object (Art. 21 GDPR)
Where we process data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.
To exercise your rights, simply email info@wohnsignal.de.
12. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
https://www.lda.bayern.de
13. No automated decision-making
We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
14. Changes
We update this privacy policy when our website or the legal situation changes. The version published here applies.