Privacy Policy

The controller under the General Data Protection Regulation (GDPR) is:

David Wischniewski
Großer Burstah 50–52
20457 Hamburg
Germany
Email: info@freifahrt.app

Protecting your personal data is important to us. We process your data exclusively on the basis of statutory provisions (GDPR, BDSG, TDDDG). In this privacy policy we inform you about the most important aspects of data processing on our website freifahrt.app.

We take data minimisation seriously: we collect only the data we really need, and we do not store it longer than necessary.

This website is provided via the Lovable service. When the website is accessed, technical data (e.g. IP address, browser type, operating system) required to deliver the page may be processed.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in providing our website securely and efficiently).

When our site is accessed, information is automatically processed temporarily in so-called server log files. This includes in particular:

• IP address of the requesting device
• Browser type and version
• Date and time of access
• Page / URL accessed
• Referrer URL

Purpose: technical operation, stability and security of the website. Legal basis: Art. 6 (1) lit. f GDPR. This data is not merged with other data sources and is deleted after a short time.

For security and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" in the address bar of your browser and the padlock symbol.

When you sign up to the waitlist we collect only your email address and the time of your consent.

Purpose: we use your email address exclusively to inform you when the Freifahrt app is available.

Legal basis: Art. 6 (1) lit. a GDPR (consent).

Withdrawal: you may withdraw your consent at any time with effect for the future, informally by email to info@freifahrt.app. The lawfulness of processing carried out until withdrawal remains unaffected.

Deletion: after withdrawal or, at the latest, after the app launch and the corresponding notification, your email address will be deleted.

There is no tracking, no disclosure to third parties for advertising purposes and no profiling.

Waitlist email addresses are stored in a database of the Supabase service. The server location is Frankfurt am Main, Germany (EU).

A data processing agreement (DPA) under Art. 28 GDPR is in place with the provider. Data processing takes place exclusively within the European Union.

We use only technically necessary cookies that are required for the operation of the website. In the current version we do not use any marketing or tracking cookies.

Legal basis: § 25 (2) TDDDG (technically necessary storage) or Art. 6 (1) lit. f GDPR.

You have the following rights against us at any time:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent given (Art. 7 (3) GDPR)

For any request regarding your rights you can contact us informally at info@freifahrt.app.

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us. Responsible for us is:

The Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI)
Ludwig-Erhard-Straße 22
20459 Hamburg, Germany

We store personal data only as long as necessary for the respective purpose. Email addresses from the waitlist are stored until you withdraw or until you are informed about the app launch, then deleted.

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Status of this privacy policy: 01 June 2026.

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services. The current version applies on your next visit.