Privacy Policy

General information

Privacy matters to me. The public Surf Buddy website does not use analytics tools, tracking or contact forms. It includes a voluntary newsletter form for beta and development updates. Business partners can additionally use a separate, access-controlled Partner Portal at partners.surfbuddyapp.com. That portal processes the information needed for registration, collaboration, agreements and accounting.

Newsletter and beta updates

You can voluntarily subscribe to the Surf Buddy newsletter on the homepage to receive development news, release information and invitations to beta testing. The only required field is your email address. Processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR.

The subscription form is provided through Direct Mail by e3 Software, LLC, 1166 East Warner Road, Suite 101, Gilbert, AZ 85296, USA. When you submit the form, your email address and subscription evidence such as the date, time and IP address are transmitted to and stored by Direct Mail so the subscription can be managed and the newsletter delivered. e3 Software states that it participates in the EU-U.S. Data Privacy Framework. Further information is available in the Direct Mail Privacy Policy.

To process the signup without leaving this website, the necessary scripts from Direct Mail and Google Hosted Libraries are loaded only when you submit the form. This may transmit technical connection data such as your IP address, browser information and referrer to e3 Software and Google. The scripts are not loaded merely by visiting the website.

You may withdraw your consent at any time by using the unsubscribe link in an email or by contacting contact@surfbuddyapp.com. Withdrawal does not affect processing carried out before it. Your email address will be used for the newsletter until you unsubscribe; legally necessary evidence of consent or objection may be retained for the applicable limitation periods.

Surf Buddy Partner Portal

The Partner Portal processes account and sign-in details, organization and team permissions, agreement evidence, public coach and coaching information, product assignments, Apple financial data, tax classifications, invoices, payout details and security records. Processing supports entering into and performing agreements, publishing approved offers, meeting accounting and tax duties, and protecting the service against abuse.

Tax, invoice, payout and contract data is not public. Only deliberately published profiles and coaching offers are provided through the public API. Further details, retention information and data-subject information are provided in the English Partner Portal Privacy Notice.

Controller

Daniel Witt
Hochhorst 2
D-24229 Schwedeneck
Germany
Phone: +49 4308 1834753
Email: contact@surfbuddyapp.com

Hosting and server log files

When this website is accessed, the web server or hosting provider processes technically necessary access data. This may include the IP address, date and time of access, requested file, amount of data transferred, referrer URL, browser type, operating system and requesting provider.

Processing is carried out to deliver the website, ensure stability and security, and detect misuse. The legal basis is Art. 6 para. 1 lit. f GDPR. The exact retention period depends on the hosting provider used and should be aligned with the host’s information after final publication.

MapKit JS / Apple Maps

Apple MapKit JS is used on the homepage to display an example map with a session route. For this purpose, JavaScript is loaded from Apple and the map view is provided by Apple. Technical data such as your IP address, browser information, device information, referrer URL and map usage data may be transmitted to Apple.

The integration is based on my legitimate interest in presenting app functionality clearly pursuant to Art. 6 para. 1 lit. f GDPR. Further information about Apple’s data processing is available in Apple’s privacy information: https://www.apple.com/legal/privacy/.

Instagram link

This website links to my Instagram profile. If you follow the link, you leave this website. Meta Platforms is responsible for data processing on Instagram. When Instagram is accessed, personal data may be processed by Meta.

Contact by email or phone

If you contact me by email or phone, I process the information you provide in order to handle your request and any follow-up questions. Depending on the content of the request, processing is based on Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR. I do not pass this data on to third parties without your consent.

Cookies and analytics

The public website currently does not set its own cookies. The Partner Portal uses only the session and security cookies necessary for sign-in and CSRF protection. It does not use web analytics or advertising tracking tools.

SSL/TLS encryption

This website should be provided exclusively via HTTPS. This encrypts data transmitted between your browser and the server.

Your rights

Within the scope of the legal requirements, you have the right to access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests. You also have the right to lodge a complaint with a data protection supervisory authority.

For privacy questions, you can contact me at any time: contact@surfbuddyapp.com.