Privacy notice

How we handle personal data on this website and when you sign up.

Draft – these details have not yet been legally reviewed.

The provider’s details have not been fully entered yet.

Controller

Germany

Visiting this website

When you visit, our server stores technically necessary details (IP address, time, page requested, browser identifier) to run the website securely and reliably (Art. 6(1)(f) GDPR). The logs are deleted or shortened after a short time.

Cookies and similar technologies

We use no analytics or advertising services and load no fonts, scripts or images from other servers. The list below names every cookie and every browser storage entry of our services: what for, by whom, for how long and on which legal basis. It comes from the same source as the cookie notice, which you can open again at any time through "Cookie settings".

Website

Necessary 1 entry : Always active

Booking, forms and security do not work without these, so they cannot be switched off; no consent is needed.

Name: bookingsystem.cookies.marketing
Purpose: Remembers that this notice has been read, and which version.
Content: Version of the list and day of the confirmation, no identifier.
Type: Local storage
Duration: Until this list changes, at most 12 months
When set: When “Got it” is clicked
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Preferences 2 entries : Only after your choice

Only stores what you set yourself, and only on your device.

Name: bookingsystem.theme
Purpose: The chosen appearance (light or dark).
Content: “light” or “dark”.
Type: Local storage
Duration: Until deleted
When set: When light or dark is chosen (“System” removes it)
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: bookingsystem.site.langHint
Purpose: The language hint stays closed after closing it.
Content: The value “1”.
Type: Session storage (tab)
Duration: Until the tab is closed
When set: When the language hint is closed
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

App for businesses

Necessary 16 entries : Always active

Name: bookingsystem.cookies.app
Purpose: Remembers that this notice has been read, and which version.
Content: Version of the list and day of the confirmation, no identifier.
Type: Local storage
Duration: Until this list changes, at most 12 months
When set: When “Got it” is clicked
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: __Host-bs_app
Purpose: Keeps the sign-in alive and protects the requests against forgery.
Content: A random session identifier; the session itself is kept encrypted on the server.
Type: Cookie (HttpOnly, Secure, SameSite=Lax, host-only)
Duration: 120 minutes after the last activity
When set: When the sign-in page opens
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); Contract (Art. 6 (1) (b) GDPR); Legitimate interest in secure operation (Art. 6 (1) (f) GDPR)

Name: remember_web_59ba36addc2b2f9401580f014c7f58ea4e30989d
Purpose: Signs in again on this device without entering the password again.
Content: An encrypted identifier of the account and a check value.
Type: Cookie (HttpOnly, Secure, SameSite=Lax, host-only)
Duration: 30 days
When set: Only with “Stay signed in” when signing in
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); Contract (Art. 6 (1) (b) GDPR)

Name: Passkey of the account
Purpose: Sign-in without a password.
Content: A key in the password manager or security key of the device; the server only knows its public part.
Type: Passkey
Duration: Until deleted
When set: Only when a passkey is set up
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); Contract (Art. 6 (1) (b) GDPR)

Name: bookingsystem.brand.<business>
Purpose: The business’s colours, so the application looks right at once.
Content: Colour values like #1A73E8.
Type: Local storage
Duration: Until deleted
When set: After signing in, when the business has its own colours
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: bookingsystem.desk.last_input
Purpose: Time of the last input, for the automatic lock across all tabs.
Content: A timestamp.
Type: Local storage
Duration: Until deleted
When set: After signing in
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: bookingsystem.device bookingsystem.device.seq
Purpose: Random device number so inputs made without network arrive exactly once.
Content: A random identifier and a counter.
Type: Local storage
Duration: Until deleted
When set: When the cleaning board is used
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: bookingsystem.user.<user>.lastPlace bookingsystem.user.<user>.housekeeping.queue.<property> bookingsystem.user.<user>.housekeeping.queue.<property>.rejected bookingsystem.user.<user>.redemptions.queue.<property> bookingsystem.user.<user>.housekeeping.view.<property> bookingsystem.user.<user>.invoicing.view bookingsystem.user.<user>.timeline.firstUseHint
Purpose: Where work was done last, queues for inputs made without network and own views.
Content: The property opened last (name and page), inputs not yet sent and chosen views.
Type: Local storage
Duration: Until sign-out
When set: When the function is used
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: bookingsystem.user.<user>.vault.emergency.<property> bookingsystem.user.<user>.vault.wrapped bookingsystem.user.<user>.vault.label bookingsystem.user.<user>.vault.kind bookingsystem.user.<user>.vault.tries
Purpose: Encrypted copy of the evacuation list for an emergency without network.
Content: Encrypted: the people present per property and the key protected by a PIN or password; plus the name on the unlock screen, the kind of lock and the number of failed attempts.
Type: Local storage
Duration: Until sign-out
When set: After signing in, when the business allows the copy on the device
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: bookingsystem.user.<user>.vault.key
Purpose: This tab’s key to open the emergency copy.
Content: A key, only in this tab.
Type: Session storage (tab)
Duration: Until the tab is closed
When set: After signing in, when the business allows the copy on the device
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: bookingsystem-commands
Purpose: Payments and other money commands are kept before sending so nothing is lost when the connection drops.
Content: Commands not yet confirmed, with amount and purpose.
Type: Browser database
Duration: Until sign-out
When set: When a money command waits to be sent
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: /sw.js
Purpose: Loads the application’s files without guest data, for the emergency list without network and for notifications.
Content: The program that keeps the application’s files ready.
Type: Service worker
Duration: Until the next version of the application or sign-out
When set: When an offline PIN is set or notifications are turned on
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: shell-<check value>
Purpose: The application’s files for the emergency list without network.
Content: Program files of the application, no guest data.
Type: Offline storage
Duration: Until the next version of the application or sign-out
When set: When an offline PIN is set or notifications are turned on
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: Push subscription of this device
Purpose: Notifications on this device.
Content: The address of the browser’s notification service.
Type: Push subscription
Duration: Until sign-out
When set: When notifications are turned on and the browser asks
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); Contract (Art. 6 (1) (b) GDPR)

Name: bookingsystem.user.<user>.city-tax-amendment:* bookingsystem.emergency-ticks.<property>.<date> draft-carry:<random value> bookingsystem.token.<purpose> bookingsystem.stale-build-reload sso-return sso-confirm-popup
Purpose: Unsent drafts, attendance ticks and one-time hand-overs in this tab.
Content: Inputs not yet saved and one-time values.
Type: Session storage (tab)
Duration: Until the tab is closed
When set: When the function is used
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: tsr-scroll-restoration-v1_*
Purpose: The scroll position when going back.
Content: Scroll positions per page.
Type: Session storage (tab)
Duration: Until the tab is closed
When set: When the page changes
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Preferences 3 entries : Only after your choice

Name: bookingsystem.theme bookingsystem.density bookingsystem.contrast bookingsystem.locale bookingsystem.workStyle bookingsystem.startPage bookingsystem.sidebarRail bookingsystem.navCollapsed bookingsystem.timeline.collapsed today.week drawer-section:<identifier>
Purpose: Appearance, language, work style and layout that were chosen.
Content: The chosen values, such as “compact”, collapsed areas or the start page.
Type: Local storage
Duration: Until deleted
When set: When the setting is changed
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: frontdesk.released.dismissed bookingsystem.bankChangesSeen bookingsystem.playground.dismissed
Purpose: A closed notice stays closed.
Content: The identifier of the notice.
Type: Local storage
Duration: Until deleted
When set: When the notice is closed
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: payments.reader.<property>
Purpose: The card terminal this device used last.
Content: The identifier of the terminal.
Type: Local storage
Duration: Until deleted
When set: When a terminal is chosen
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Platform console

Necessary 3 entries : Always active

Name: bookingsystem.cookies.platform
Purpose: Remembers that this notice has been read, and which version.
Content: Version of the list and day of the confirmation, no identifier.
Type: Local storage
Duration: Until this list changes, at most 12 months
When set: When “Got it” is clicked
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Name: __Host-bs_platform
Purpose: Keeps the sign-in alive and protects the requests against forgery.
Content: A random session identifier; the session itself is kept encrypted on the server.
Type: Cookie (HttpOnly, Secure, SameSite=Strict, host-only)
Duration: Until the browser is closed, at most 8 hours; signed out after 30 minutes without activity
When set: When the sign-in page opens
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); Contract (Art. 6 (1) (b) GDPR); Legitimate interest in secure operation (Art. 6 (1) (f) GDPR)

Name: Passkey of the account
Purpose: Sign-in without a password.
Content: A key in the password manager or security key of the device; the server only knows its public part.
Type: Passkey
Duration: Until deleted
When set: Only when a passkey is set up
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); Contract (Art. 6 (1) (b) GDPR)

Preferences 1 entry : Only after your choice

Name: bookingsystem.theme bookingsystem.contrast bookingsystem.locale
Purpose: Appearance, high contrast and language on this device.
Content: The chosen values, such as “dark” or “en”.
Type: Local storage
Duration: Until deleted
When set: When chosen in the settings
Legal basis: Strictly necessary for the service asked for (Sec. 25 (2) No. 2 TDDDG, Sec. 165 (3) TKG 2021); No processing: stays on the device

Contact form

When you write to us through the contact form, we process your name, your email address, your business if you give it, the topic and your message to answer your request (Art. 6(1)(b) GDPR for questions about a contract, otherwise (f)). You receive a confirmation at your address. We keep the request for one year at most and then delete it; at once if you ask us to. The protection against automated messages runs on our own server, without third parties.

Sign-up and trial

When you sign up, we process your name, your email address and the details of your business to set up your account and perform the contract (Art. 6(1)(b) GDPR). You confirm your email address with a code we send you. That you accepted our terms is recorded with the version, the time and the kind of your device (computer, phone, tablet), without your IP address. If you do not confirm your email address within 14 days, we delete the account with all its details. The protection against automated sign-ups runs on our own server, without third parties. While new sign-ups are paused, we keep your access request (name, email address and, if given, your business) for at most one year to offer you access (Art. 6(1)(b) GDPR); on request we delete it at once.

Data in your business

Booking and guest data that businesses process with our software is processed by us on behalf of that business (Art. 28 GDPR). The business is the controller; guests find its own privacy notice on its pages.

Hosting and recipients

The website and the software run on servers in Germany. We pass data on only to service providers bound by contract as processors, or where a law requires it.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). You may also lodge a complaint with a data protection supervisory authority.

Legal notice

Cookies and storage on this website