With the following privacy policy, we would like to inform you about which types of your personal data (hereinafter also referred to as "data") we process, for what purposes and to what extent in the context of providing our application.
The terms used are not gender-specific.
As of April 1, 2026
Preamble
Person responsible
Overview of processing
Relevant legal bases
Security measures
General information on data storage and deletion
Amendments and updates
Definitions
LiGO United App
Yusuf Isbeceren
Denkmalstrasse 3
25436 Uetersen
Email address: yusuf.isbeceren@me.com
The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.
Inventory data.
Contact data.
Content data.
Metadata, communication data, and process data.
Communication partners.
Users
Communication.
Organizational and administrative procedures.
Feedback.
Provision of our online offering and user-friendliness.
Relevant legal bases under the GDPR: Below you will find an overview of the legal bases under the GDPR on which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or domicile. Should more specific legal bases apply in individual cases, we will inform you of these in the data protection declaration.
Legitimate interests (Article 6 (1) (f) GDPR) - processing is necessary to protect the legitimate interests of the controller or a third party, provided that the interests, fundamental rights and freedoms of the data subject which require protection of personal data do not override them.
National data protection regulations in Germany: In addition to the data protection regulations of the GDPR, national data protection regulations apply in Germany. These include, in particular, the Federal Data Protection Act (BDSG) for the Protection against Misuse of Personal Data in Data Processing. The Federal Data Protection Act (BDSG) contains, in particular, special provisions on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes, and the transfer of data, as well as automated decision-making in individual cases, including profiling. Furthermore, state data protection laws of the individual federal states may apply.
In accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons, we take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk.
These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data, as well as the access, input, and transfer of data, ensuring its availability, and segregation. Furthermore, we have established procedures that ensure the exercise of data subjects' rights, the deletion of data, and responses to data threats. Furthermore, we consider the protection of personal data right from the development and selection of hardware, software, and processes in accordance with the principle of data protection, through technology design, and through data protection-friendly default settings.
Securing online connections with TLS/SSL encryption technology (HTTPS): To protect user data transmitted via our online services from unauthorized access, we use TLS/SSL encryption technology. Secure Sockets Layer (SSL) and Transport Layer Security (TLS) are the cornerstones of secure data transmission on the internet. These technologies encrypt the information transmitted between the website or app and the user's browser (or between two servers), thereby protecting the data from unauthorized access. TLS, as the more advanced and secure version of SSL, ensures that all data transmissions meet the highest security standards.
If a website is secured by an SSL/TLS certificate, this is signaled by the display of HTTPS in the URL. This serves as an indicator to users that their data is being transmitted securely and encrypted.
We delete personal data that we process in accordance with legal requirements as soon as the underlying consent is revoked or no further legal grounds for processing exist. This applies to cases where the original processing purpose no longer applies or the data is no longer required.
Exceptions to this rule exist if legal obligations or special interests require longer storage or archiving of the data.
In particular, data that is retained for commercial or tax law reasons must must be processed or whose storage is necessary for legal proceedings or to protect the rights of other natural or legal persons, shall be archived accordingly.
Our privacy policy contains additional information on data retention and deletion that applies specifically to certain processing operations.
If multiple retention periods or deletion periods are specified for a given date, the longest period always applies. Data that is no longer retained for its original purpose but is retained due to legal requirements or other reasons will only be processed for the reasons that justify its retention.
Retention and deletion of data: The following general deadlines apply to the storage and archiving under German law:
• 10 years - retention period for books and records, annual financial statements, inventories, management reports, opening balance sheets as well as the work instructions and other organizational documents necessary for their understanding (Section 147 (1) No. 1 in conjunction with Section 3 AO, Section 14b (1) UStG, Section 257 (1) No. 1 in conjunction with Section 4 HGB).
• 8 years - accounting documents, such as invoices and cost receipts (Section 147 (1) Nos. 4 and 4a in conjunction with Section 3 Sentence 1 AO and Section 257 (1) No. 4 in conjunction with Section 4 HGB).
• 6 years - Other business documents: received commercial or business letters, reproductions of sent commercial or business letters, other documents, in so far as they are relevant for taxation, e.g., hourly wage slips, operating statements, calculation documents, price labels, but also payroll documents, in so far as they are not already accounting documents and Cash register strips (§ 147 para. 1 no. 2, 3, 5 in conjunction with para. 3 AO, § 257 para. 1 no. 2 and 3 in conjunction with para. 4 HGB).
• 3 years - Data required to process potential warranty and to consider claims for damages or similar contractual claims and rights as well as to process related inquiries, based on previous business experience and common industry practices, are stored for the duration of the regular statutory limitation period of three years (§§ 195, 199 BGB).
Time limit begins at the end of the year: If a time limit does not explicitly begin on a specific date and is at least one year, it automatically begins at the end of the calendar year in which the event triggering the time limit occurred. In the case of ongoing contractual relationships in which data is stored, the event triggering the time limit is the date on which the termination or other termination of the legal relationship takes effect.
We ask you to inform yourself regularly about the content of our privacy policy.
We will update this privacy policy as soon as changes to the data processing we carry out make this necessary.
We will inform you as soon as the changes require your cooperation (e.g., consent) or other individual
notification.
If we provide addresses and contact information of companies and organizations in this privacy policy, we ask you to note that the addresses may change over time and ask you to check the information before contacting us.
This section provides an overview of the terms used in this privacy policy. To the extent that the terms are defined by law, the legal definitions apply. The following explanations, however, are intended primarily to facilitate understanding.
• Inventory data: Inventory data includes essential information that is necessary for identification and management of contractual partners, user accounts, profiles, and similar assignments are necessary. This data may include, among other things, personal and demographic information such as names, contact information (addresses, telephone numbers, email addresses), dates of birth, and unique identifiers (user IDs). Inventory data forms the basis for any formal interaction between individuals and services, institutions, or systems by enabling unambiguous assignment and communication.
• Content data: Content data includes information generated during the creation, processing, and publication of all types of content. This category of data can include text, images, videos, audio files, and other multimedia content published on various platforms and media. Content data is not limited to the actual content itself, but also includes metadata, which contains information about the content. provide, such as tags, descriptions, author information, and publication dates.
• Contact information: Contact information is essential information that enables communication with individuals or organizations. It includes, among other things, telephone numbers, postal addresses, and email addresses, as well as communication tools such as social media handles and instant messaging identifiers.
• Meta-, communication- and process data: Meta-, communication- and Procedural data are categories that contain information about how data is processed, transmitted, and managed. Metadata, also known as data about data, includes information that describes the context, origin, and structure of other data. It can include details about file size, creation date, document author, and change histories. Communication data captures the exchange of information between users across different channels, such as email traffic, call logs, social media messages, and chat histories, including the individuals involved, timestamps, and transmission paths. Procedural data describes the processes and procedures within systems or organizations, including workflow documentation, logs of transactions and activities, and audit logs used to track and review events.
• Personal data: "Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. a cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
• Controller: The "controller" is the natural or legal person, public authority, agency or other body which alone or jointly with others decides on the purposes and means of processing personal data.
• Processing: "Processing" is any operation or set of operations performed on personal data, whether or not by automated means. The term is broad and encompasses virtually every handling of data, whether it involves collecting, analyzing, storing, transmitting, or deleting.