Privacy Policy
Last updated: June 27, 2026
1. Introduction
Protecting your personal data is important to us. This Privacy Policy informs you about what personal data we collect, for what purposes we process it, and what rights you have. Processing is carried out in accordance with the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and the Digital Services Act Implementation Act (DDG).
2. Controller
The controller within the meaning of the GDPR is Ileies Blitz. Full contact details can be found in the Imprint. For data protection inquiries, please contact us at the email address provided in the Imprint.
3. Data We Collect
Account Data
When you register, we collect your email address, username, and a hashed password. This data is necessary for the performance of the contract (Art. 6 para. 1 lit. b GDPR). Email addresses are also used to verify your account and – if you have consented – to notify you of material changes.
Usage Data
When using the service, technical data is automatically collected, including IP address, browser type, operating system, time and duration of access, and pages visited. This data is processed to ensure operation and for troubleshooting on the basis of legitimate interests (Art. 6 para. 1 lit. f GDPR).
Session Data
For authentication, we use cookie-based session tokens. These cookies are technically necessary for the operation of the service and are set on the basis of contract performance and legitimate interests (Art. 6 para. 1 lit. b and f GDPR). Session tokens are deleted upon logout or after the session expires.
4. Google Analytics
We use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to analyze website usage. Google Analytics uses cookies and collects usage data processed on Google's servers, potentially including in the USA. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR). For data transfers to the USA, we rely on the EU Commission's Standard Contractual Clauses pursuant to Art. 46 para. 2 lit. c GDPR. You can object to processing by Google Analytics by installing the Google Analytics opt-out browser add-on.
5. Google Sign-In (optional)
You may optionally sign in using your Google account. In this case, we receive a unique user ID and your email address from Google; no further profile data is transmitted. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR).
6. Retention Periods
Account data is stored for the duration of the contractual relationship and deleted within 30 days of account deletion, unless statutory retention obligations apply. Technical log data is deleted after at most 90 days. Accounting records may be retained for up to 10 years in accordance with § 147 of the German Fiscal Code (AO).
7. Your Rights
You have the following rights regarding your personal data against the controller:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent with effect for the future (Art. 7 para. 3 GDPR)
8. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates the GDPR. The competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf.
9. Data Security
We implement technical and organizational measures to protect your data against unauthorized access, loss, or destruction. Data is transmitted encrypted via TLS. Passwords are stored exclusively in hashed form and cannot be read by us in plain text. Nevertheless, no transmission over the internet is completely secure; absolute protection cannot be guaranteed.
11. Contact for Data Protection Inquiries
For all data protection inquiries and to exercise your rights, please contact us at the email address provided in the Imprint.