Controller Sascha Jongebloed Private website operator. Email: privacy@notestra.example
Contact If you have questions or requests, contact privacy@notestra.example.
Legal basis (Art. 6 GDPR) • Consent (Art. 6(1)(a)) • Legitimate interests in secure, stable operation (Art. 6(1)(f))
Categories of personal data • Account and profile data (name, email, user ID) • Notes and content you create • Usage data (logins, device, IP address, timestamps) • Support communications
Purposes of processing • Provide and secure the Notestra service • Authenticate users and manage accounts • Customer support and incident response • Compliance with legal obligations
Recipients • Service providers acting as processors (hosting, email delivery, backups) • Authorized administrators when necessary
Retention periods • Account data and content are stored for the duration of the account • Logs are retained for up to 30 days • Backups are kept for up to 30 days before deletion
Data subject rights You have the right to access, rectification, erasure, restriction, portability, and to object to processing. You can withdraw consent at any time where processing is based on consent.
International transfers We do not transfer personal data outside the EEA. If this changes, we will use appropriate safeguards such as Standard Contractual Clauses.
Supervisory authority You may lodge a complaint with your local supervisory authority. For Germany: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, https://www.datenschutz-berlin.de/.