Privacy Policy

Last updated: August 2026

1. Data Controller

Responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:

A data protection officer has not currently been appointed pursuant to § 38 BDSG (German Federal Data Protection Act). For all data protection matters, you can reach us at the email address given above.

2. Legal Bases for Processing

We process personal data based on the following legal bases under the GDPR:

• Art. 6(1)(a) – Consent (e.g. newsletter, voluntary information)
• Art. 6(1)(b) – Performance of a contract and pre-contractual measures
• Art. 6(1)(c) – Compliance with legal obligations
• Art. 6(1)(f) – Legitimate interests (e.g. secure provision of the website)
• Art. 9(2)(a) – Explicit consent to the processing of health data (allergy profiles in the CheckWise App)

3. Use of This Website

When you access our website, the server automatically stores information in server log files that your browser transmits:

• anonymized IP address
• date and time of access
• page/URL accessed
• browser type and version, operating system
• referrer URL (the previously visited page)

This data is processed to ensure trouble-free operation and to improve our offering (legal basis: Art. 6(1)(f) GDPR). It is not combined with other data sources. Log files are deleted after 30 days at the latest.

Cookies

This website uses only technically necessary cookies required for the operation of the website (legal basis: § 25(2) no. 2 TDDDG). No tracking, marketing, or analytics cookies requiring consent are used.

4. Contact & Forms

If you contact us via the contact form or by email, your information (name, email address, subject, message) is stored to process your inquiry and for follow-up questions. The legal basis is Art. 6(1)(b) GDPR (initiation/performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to your inquiry).

We delete your inquiry once its purpose has been fulfilled and no statutory retention obligations apply.

5. Newsletter

To receive our newsletter, we need your email address. Registration takes place via double opt-in: after signing up, you receive a confirmation email in which you confirm your registration once more. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can revoke at any time via the unsubscribe link in every email.

6. CheckWise App & Health Data

The CheckWise App processes the allergy profiles you voluntarily provide solely on the basis of your explicit consent (Art. 9(2)(a) GDPR) and for the purpose of showing whether a scanned product is suitable for you.

• Your profile data is stored encrypted.
• Scan results are processed locally on your device wherever technically possible.
• We do not share your personal allergy data with third parties.
• For statistical and research purposes, we use only anonymized data that cannot be traced back to you.
• You can revoke your consent at any time in the app and delete your profile data.

For detailed information on data processing within the app, please see the app's own privacy notices.

7. Third-Party Services

Google Fonts

This website uses fonts ("Outfit", "Inter") from Google Fonts. When you access the page, your browser loads the fonts directly from Google's servers (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). In doing so, your IP address is transmitted to Google. The legal basis is Art. 6(1)(f) GDPR (consistent, appealing presentation of our offering).

Further information: policies.google.com/privacy

App Store Badges

To link to the app stores, we load graphics from Apple and Google. When these graphics are displayed, your IP address may be transmitted to the respective providers.

External Links

Our website contains links to external sites (including ECARF, the Health-i Initiative, and academic publications). By clicking these links, you leave our website; the operators of the target sites are responsible for data processing there.

8. Hosting

This website is hosted by:

We have entered into a data processing agreement with Hetzner pursuant to Art. 28 GDPR. Data processing takes place exclusively on our behalf and exclusively on servers in Germany. All data is therefore subject to strict German data protection law and the GDPR — no transfer to insecure third countries takes place.

Further information on data protection at Hetzner can be found at hetzner.com/de/rechtliches/datenschutz.

9. Retention Period

We store personal data only as long as necessary for the purposes stated, or as required by statutory retention obligations (e.g. up to 10 years under tax law). Data is then deleted or anonymized.

10. Your Rights

Under the GDPR, you have the following rights:

• Access to the data we process about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

An informal message to hello@checkwise.com is sufficient to exercise your rights.

11. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

This privacy policy will be updated in the event of changes to our processing activities or the legal situation. The current version is always available on this page.