🇩🇪 🇫🇷 🇮🇹 🇪🇸
Note: This translation is provided for informational purposes only. The German version is legally binding.

Important: Scope of this privacy policy

This privacy policy applies exclusively to the website wp-dienstplan.de – that is, to visiting the site, purchasing a licence and managing your account.

If you install the WP Dienstplan plugin on your own WordPress installation, you are the controller under Article 4(7) GDPR for every piece of personal data about your employees, volunteers or members processed inside the plugin. Nusselt Management GmbH has no access to this data and does not act as a processor unless a separate data processing agreement is concluded (e.g. during a support case).

Your duties as controller include, among other things, maintaining a record of processing activities, meeting information obligations towards your users, ensuring appropriate technical and organisational measures (Art. 32 GDPR) and verifying a lawful basis for the processing. Church-affiliated bodies additionally observe DSG-EKD or KDG.

1. Controller

Nusselt Management GmbH
Drachenseestr. 4a, 81373 Munich
Email: Cookie settings info@wp-dienstplan.de
Phone: +49 (0)89 215 26 841

If you have any questions about data protection, please contact the email address listed above.

2. General Notes

We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with applicable data protection laws (particularly the GDPR) and this privacy policy.

The legal bases for processing personal data are in particular Article 6(1)(a) GDPR (consent), Article 6(1)(b) GDPR (contract performance), and Article 6(1)(f) GDPR (legitimate interests).

3. Hosting

This website is hosted on a dedicated server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzendorf, Germany. The server is located in Germany. When you access the website, the following data is automatically stored by the host in server log files:

Processing is based on Article 6(1)(f) GDPR (legitimate interest in secure and stable website provision). Log files are automatically deleted after a maximum of 7 days.

A data processing agreement pursuant to Article 28 GDPR has been concluded with Hetzner Online GmbH.

4. Cookies

4.1 Consent management with vanilla-cookieconsent

This website uses a self-hosted consent management tool (vanilla-cookieconsent) to obtain and document consent for data processing that requires it — in particular the storage of certain cookies or access to information on your end device. The tool is served directly from our own server; no data is transferred to any third party.

vanilla-cookieconsent stores your consent decision exclusively in your browser’s local storage (localStorage). No server-side storage and no transmission to third-party servers takes place. You can change or revoke your consent at any time with effect for the future via the “Cookie settings” link or the consent banner. Legal basis: Article 6(1)(f) GDPR (legitimate interest in GDPR-compliant consent management) and Article 6(1)(a) GDPR for optional categories.

4.2 Analytics Cookies (Google Analytics 4) – Only with Consent

This website uses Google Analytics 4, a web analytics service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The Google tag is embedded via Google Consent Mode v2 and is only loaded after you actively consent to the “Statistics” category. Without consent, Google Analytics is not loaded.

After consent, Google Analytics sets the following cookies, among others:

Google Analytics 4 truncates IP addresses as part of its standard processing; a full IP address is not stored permanently. Google processes data in the USA. Google LLC is certified under the EU-US Data Privacy Framework; EU Standard Contractual Clauses apply to data transfers. Further information: policies.google.com/privacy.

Legal basis: Article 6(1)(a) GDPR (consent). You can withdraw or change your consent at any time via the “Cookie settings” link on this website. After withdrawal, Google Analytics will no longer be loaded; the cookies _ga, _ga_* and _gid are removed.

Alternatively, you can install the Google Analytics opt-out browser add-on: tools.google.com/dlpage/gaoptout.

5. Payment Processing

When purchasing a license, payment data (name, email address, billing address, payment data) is processed. Subscription management (invoicing, customer account) is handled via Fakturia (a product of Luminea IT Services GmbH). The actual payment processing is carried out by Stripe or PayPal depending on the selected payment method.

Legal basis for processing: Article 6(1)(b) GDPR (contract performance).

5.1 Fakturia (Subscription Management)

Subscription management, invoicing, and customer account management is handled via Fakturia, a product of Luminea IT Services GmbH, Mühlweg 1, 82054 Sauerlach. A data processing agreement pursuant to Article 28 GDPR has been concluded with Luminea IT Services GmbH. The customer portal is accessible at nusselt.vertragscenter.com. Fakturia's privacy policy can be found at fakturia.de/datenschutzerklaerung.

5.2 Stripe (Credit Card, SEPA Direct Debit, and Other Methods)

For payments via credit card, SEPA direct debit, Apple Pay, Google Pay, Amazon Pay, and other payment methods (LINK, MB WAY, MobilePay, Revolut Pay, Satispay, Bancontact, BLIK, EPS, TWINT, Klarna), the provider uses the payment processor Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin D02 H210, Ireland.

When processing payments via Stripe, the following data is transmitted to Stripe: name, email address, billing address, and payment data required for payment processing (e.g., IBAN, card number – encrypted). Stripe stores and processes this data on behalf of the provider.

For SEPA direct debits, a standing order mandate is issued. The mandate reference is automatically assigned by Stripe and communicated to the customer. The creditor identification number is: DE73ZZZ00002903417.

Stripe may transfer data to the USA. Stripe is certified under the EU-US Data Privacy Framework; EU Standard Contractual Clauses apply. A data processing agreement has been concluded with Stripe. Further information: stripe.com/de/privacy.

5.3 PayPal

If the customer chooses PayPal as the payment method, the transaction is processed directly via PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg. The provider only receives confirmation of payment receipt from PayPal. Payment data processing is handled exclusively by PayPal and is subject to its privacy policy: paypal.com/de/privacy.

PayPal is EU-based; data transfer to third countries generally does not occur. In individual cases, PayPal may transfer data to group companies in third countries; PayPal relies on EU Standard Contractual Clauses for this.

6. Contact via Email

When you contact us via email, the data you provide (name, email address, message content) is processed to handle your inquiry. Legal basis: Article 6(1)(f) GDPR (legitimate interest in answering inquiries) or Article 6(1)(b) GDPR for contract-related inquiries. Data is not shared with third parties and is deleted after communication is completed, unless legal retention obligations apply.

7. Withdrawal Form

If you use our online withdrawal form (button „Withdraw from contract here" in the footer of this website), we process the following personal data: name, contract/invoice/license reference, email address (for receipt confirmation), an optional reason for withdrawal, and technically your IP address and user agent (abuse prevention; the IP address is anonymised and the user agent is removed after 90 days).

Legal basis: Article 6(1)(c) GDPR in conjunction with Section 356a of the German Civil Code (BGB). Processing takes place on our license server (lizenz.wp-dienstplan.de). Data is stored for up to three years after completion of the reversal process and then deleted, unless statutory retention obligations apply.

8. Your Rights as a Data Subject

You have the following rights regarding personal data concerning you:

To exercise your rights, please contact: info@wp-dienstplan.de

9. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The competent authority for Nusselt Management GmbH is:

Bavarian Data Protection Authority (BayLDA)
Promenade 18, 91522 Ansbach
www.lda.bayern.de

10. Changes to This Privacy Policy

We reserve the right to update this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services. The new privacy policy will apply to your next visit. The date of the current version can be found at the beginning of this page.