Data Protection

This document details how, why, and to what extent Maildroppa processes personal data ("data") related to our online activities, including our website, online tools, associated content, profiles on social media platforms ("online activities"), and external third-party sites. Terms like "processing" or "controller" are defined in line with Art. 4 of the General Data Protection Regulation (GDPR).

Name and details of the controller / company data protection officer

This data protection information applies to data processing by the controller:

Marcus Biel
Dr.-Peter-Hecker-Str. 4b
82031 Grünwald
0171/1151013

General Information on Data Processing

Scope of processing of personal data

We only process personal data if it is necessary to enable us to provide our website, services or content. Personal data will only be processed with the user’s consent. An exception applies in cases where prior consent is not possible for legitimate reasons and processing is permitted by legal regulations.

Data erasure and storage time

Personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. Data may still be stored if this has been provided for by law.

Provision of the Website

Description and scope of data processing

When you visit the Maildroppa website, log files may be generated containing your IP address, as well as which files were called. We do not store log files in combination with other personal user data. As a general rule, all log files are regularly deleted. The data will not be passed on to third parties.

Maildroppa collects and temporarily stores the date and time of access, the name and URL of the accessed file, the website from which the file was accessed, and what internet browser was used. Your computer operating system and your access provider’s name may also be collected.

The legal basis for the temporary storage of data and log files can be found in GDPR Art. 6, para. 1, p.1, lit. f. Our legitimate interest comes from the reasons stated above for the collection of your data and in no way relates to collecting your data to find out more about you personally.

We make use of cookies and analysis services to track visits to our website.

Purpose of data processing

We utilize the user’s IP address and temporarily store it for administrative purposes and to deliver our pages to the user with an uninterrupted connection. This data facilitates effective use of our website, and evaluates and maintains a stable and secure system by preventing and counteracting possible abuse by others.

Possibility of objection and elimination

The collection of data is required for the smooth operation of the website. There is therefore no possibility of objection. If, contrary to expectations, there remains an urgent reason to delete the data separate from our own automatic deletion procedures, please send us a message.

Newsletter Delivery Service

Legal basis

The legal basis for the processing of the data after registration for the newsletter by the user is GDPR Art. 6, para. 1, p. 1, lit. a.

Purpose of data processing

We collect your email address information to enable us to manage your account effectively and facilitate the delivery of your newsletters to your customers. For compliance with data privacy regulations, our double opt-in signup requires that you confirm your email address by clicking on a confirmation link we email to you. This also verifies that you have authorized us to add you to our subscription and that you accept our collection of your email information.

For the legal protection of the controller, your IP address used to register with us and the date and time of registration will also be stored when you sign up for our services or newsletter. This data collection enables us to trace any potential misuse or inappropriate activity from user emails, in order to protect the legal standing and image of our company and its service.

We do not pass on personal data to any third parties.

Maildroppa Newsletter Subscription

Separate from your Maildroppa account, you can also sign up for our newsletter. This only requires an email address, which will be stored until you unsubscribe from this list. The double opt-in newsletter signup process again signals that you accept the storing of your email address by us until such time as you unsubscribe.

Duration of storage

The data will be deleted when the purpose of data collection is no longer necessary. Email addresses will be stored as long as your subscription to our service is active.

Possibility of objection and elimination

You can withdraw your consent to our accessing your information at any time, as per GDPR Art. 7 (3). This is done automatically by unsubscribing from our services. A link is provided in the footer of all emails we send that enables you to unsubscribe from our newsletter list.

To cancel your Maildroppa account, please go to your account settings on your profile and follow the instructions. For further details on this process can be found on our tutorial page. You can also contact the controller directly to request account cancellation.

Right to information

In accordance with GDPR Art. 20, you have the right to receive any personal data provided to us in a standardized format or to request that it be transferred to another controller. You may also request confirmation of whether or not we are processing your personal data. If we process your data, you can request the following information:

  • Purpose of processing
  • Categories of personal data processed
  • Recipients of the data that receive or will receive this data
  • All available information on the origin of the data

You have the right to obtain information about the organizations or third countries to which your data is transferred.

Right to correction and restriction of data

You have the right to have incomplete, incorrect or outdated personal data corrected, as per GDPR Art. 16. The adjustment shall be made as soon as possible.

In accordance with GDPR Art. 18, you can request that the processing of your personal data be restricted in the following cases: a) if you contest the accuracy of the data, b) data that has been unlawfully processed, but that you do not want to be deleted, c) we no longer require the data, but you need it for legal purposes, or d) you have objected to the data being processed in terms of GDPR Art. 21.

Right to removal of data

You may request that your personal data be deleted at any time, as per GDPR Art. 17. However, we may reject this request if continued data processing is needed a) to comply with legal requirements or to establish, exercise or defend legal claims, b) for the right to freedom of expression and information, or c) for reasons of public interest.

Right of appeal to a supervisory authority

You have the right to lodge a complaint with a supervisory authority as per GDPR Art. 77 if you believe that the processing of your data concerning you is contrary to the GDPR.

The supervisory authority with which the complaint has been lodged will keep you informed of the status and results of your complaint.

Services we use

You have the right to know what services we use to process your data.

We use the following services in these capacities:

Logo of the company Spotlighr
to host our videos
Logo of the company YouTube
for additional video hosting
Logo of the company Hetzner
to operate our websites and services
Logo of the company AWS
for hosting static images and files
Logo of the company Stripe
for payment processing
Logo of the company Auth0
to provide highly secure authentication and authorization for our services
Logo of the company Cloudflare
to increase the security and performance of our website and our services