Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Silvio Lindstedt und Maik Gräfendorf GbR
Pappelweg 27, 39576 Stendal, Germany
Email: [email protected]

2. Principles

This website does not set cookies, does not use analytics or tracking services, and does not embed content from third-party servers. Fonts are served locally from our own server; no connection to third-party font services is made.

3. Hosting and server log files

When you visit this website, the hosting provider automatically processes information in server log files (e.g. IP address, date and time of access, page requested, browser type). This processing is based on Art. 6(1)(f) GDPR (legitimate interest in providing the website securely and reliably). Log data is deleted automatically after a short period.

Hosting provider: netcup GmbH, Karlsruhe (Germany). We also run the MySQL database for the waitlist on the same web hosting (see section 4). A data processing agreement under Art. 28 GDPR is in place with netcup.

4. Waitlist (launch notification)

When you sign up for the waitlist via the form, we process your email address and whether you would like to participate as a beta tester.

• Purpose: notifying you when the Bastheon app launches and, if selected, inviting you to the beta test.
• Process (double opt-in): after you submit the form, we first store your email address with the status "pending" and send you an email containing a confirmation link. Only once you click that link is your sign-up confirmed and made active. If you do not confirm, the pending entry is deleted automatically.
• Storage location: your data is stored in a MySQL database on the web hosting of netcup GmbH (Karlsruhe, Germany).
• Legal basis: consent (Art. 6(1)(a) GDPR), given via the mandatory checkbox and confirmed via the double opt-in confirmation link.
• Retention: until the launch communication is completed or until you withdraw your consent, whichever comes first.
• Withdrawal: you can withdraw your consent at any time with effect for the future by emailing [email protected]. Your data will then be deleted.
• No sharing: your data is not passed on to third parties and is not used for any other purpose.

5. Your rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for your place of residence or for our registered office.

6. Status of this policy

Last updated: July 7, 2026. We will update this policy whenever the data processing on this website changes.