Here you will find the contacts for data protection matters at FriendzLab and other general information.
The party responsible for data protection is
Magnus Schmitz
Bruno-Schönewald-Straße 6
47877 Willich, Germany
Email address: datenschutz@magnusschmitz.eu
We take all legally required measures to protect your personal data.
If you have any questions about data protection or would like to exercise your rights, you can reach us at datenschutz@magnusschmitz.eu.
This privacy policy applies to our websites
and all associated subdomains.
This privacy policy applies to all products and services that we offer under the names
.
Depending on the nature of your relationship and interaction with us, we use different data. In this section, you will learn about the type, purpose and duration of use, broken down by topic.
We only store your personal data for as long as we need it for the respective purpose or as required by law. We state fixed periods in the individual sections.
Please bear in mind that we are subject to various retention and documentation obligations, which can amount to up to ten years. The storage period also depends on the statutory limitation provisions. Under Sections 195 et seq. of the German Civil Code (Bürgerliches Gesetzbuch, BGB), the limitation period is generally three years, but in certain cases it can be up to 30 years.
Deleted data remains in our backups for up to 30 days. After these 30 days have expired, the backups are irrevocably deleted. We only access backups to restore data after an outage.
Type of data collected:
Purpose of use:
We need this data to find errors, to fend off attacks on our servers and to investigate misuse if there is any suspicion of it. Without such a reason, we do not analyse it.
Retention
After 15 days, this data is anonymised so that it can no longer be traced back to individuals.
Type of data collected:
Purpose of use:
If you contact us, we use your data exclusively to respond to your enquiry.
Retention
As a rule, we retain your messages for three months, but for no longer than three years (the standard civil law limitation period, in case you wish to assert legal claims).
Type of data collected:
Purpose of use:
We need this data to be able to send you our newsletter. For security reasons (e.g. to fend off or trace hacker attacks, or to prevent spam), we store further technical data, as stated above, for a certain period.
Retention
Your address remains stored in our mailing list until you unsubscribe. We retain the record of your consent to subscribe for three years (the standard civil law limitation period).
Type of data collected:
Purpose of use:
We need this data to manage your account and to provide you with the web App. Without the mandatory information, we cannot create an account.
If you register yourself, you confirm your email address via a link, after which we activate your account. We delete accounts with unconfirmed email addresses after seven days, and accounts that have not been activated after 30 days. If we invite you to our web App, we store your email address, your name and the selected language. The invitation link is valid for 90 days and can only be used once.
Your session ends after 60 minutes of inactivity, or after 30 days with “Stay logged in for 30 days”. Under “Active sessions” you can see all your sessions and end them.
To prevent misuse, your browser solves a small computational task during registration and login, without any external service. We also count failed attempts per IP address and delete the counter as soon as its time window has expired. If failed attempts accumulate, we temporarily block the IP address or your account. The block ends automatically.
All logged-in users can see your profile picture. Other users can find you by your name or your email address in order to share something with you; they do not see your email address in the process. If you switch off visibility in your settings, nobody can find you any more, nobody can newly share anything with you, and you appear as “Anonymous user”. What you share is visible to the users and teams you share it with.
In the audit log, we record changes to your data, security events, actions by administrators, shares and the emails we send you from the web App. You can view it under “My logbook”.
If you use DynDNS, we publish your router’s IP address as a DNS record. Without this publication, DynDNS would be useless.
Information about your data in our web App
As a user of our web App, you can request a package containing your data there: profile, settings, audit log, profile picture and your content. Emails are not included; you can back these up with your email program. Depending on the amount of data, this may take a while. We will notify you by email as soon as your package is ready for download. It remains available for 60 days, and for a further three days after it has been downloaded in full.
Retention
We delete the data of a session as soon as it ends.
Failed attempts and blocks are recorded with IP address and username in log files, which we anonymise after 15 days at the latest.
With DynDNS, your router’s IP address is only stored for the period for which you have booked the feature.
You can delete your account in our web App yourself under “My account”, if you wish after downloading your data. You can also delete only your data and keep the account. If your account is deleted, whether by you or by an administrator, we delete all your data, including emails, calendars and contacts. Back up anything you want to keep beforehand.
Content that you have published for the community (e.g. recipes) is retained in anonymised form. Further details can be found in the Terms of Use.
After deletion, the audit log for your account is also retained for two years, and data subject to statutory retention obligations as well as our backups are retained until the end of their respective periods.
Type of data collected:
Purpose of use:
We store this data to fulfil your order and to meet legal and tax requirements. We store further technical data in order to largely rule out misuse of our services.
Retention
The retention period depends on the applicable laws; it is normally eight years and may be up to ten years in individual cases.
Type of data collected:
Purpose of use:
We collect and process this data in anonymised form, unless you voluntarily disclose personal data in the survey. We evaluate the survey for our marketing and to improve our products. The data also serves technical security purposes, in particular defending against attacks on our web server, checking for misuse where there is suspicion, and investigating use that is relevant under criminal law. We only analyse the IP address in the event of attacks on our network infrastructure; it is stored in the server logs separately from the survey data.
Type of data collected:
Purpose of use:
We store this data in order to process and respond to your application, for documentation purposes and to meet legal requirements. We store additional technical data so that we can largely rule out misuse of our services.
Retention
We retain your data for up to six months after an offer or rejection.
You can support us via Patreon, Buy Me A Coffee or GitHub Sponsors. Payment is handled by the respective provider; we do not see your payment details.
Type of data collected:
Purpose of use:
We use this data to record your support, to send you any rewards we have promised and to be able to reply to you if you have any questions.
How the providers handle your data is set out in their privacy policies:
Patreon
Patreon, Inc. (USA)
Privacy policy: https://privacy.patreon.com/
Buy Me A Coffee
Publisherr, Inc., 2193 Fillmore Street, San Francisco, CA 94115 (USA)
Privacy policy: https://www.buymeacoffee.com/privacy-policy
GitHub Sponsors
GitHub B.V., Prins Bernhardplein 200, 1097 JB Amsterdam (Netherlands)
Privacy policy: https://docs.github.com/de/site-policy/privacy-policies/github-general-privacy-statement
Retention
The retention period is determined by the applicable laws; it is normally eight years and may be up to ten years in individual cases.
In some cases, it may be necessary to pass on your data to third parties. In this section, you will find out for what reasons and to which recipients we may pass on your data.
In order to offer our services and to fulfil the resulting (pre-)contractual obligations, we work with other companies and service providers.
Where necessary, they may therefore also receive and process your personal data. They may do so only in accordance with our instructions and have contractually undertaken to us to maintain confidentiality. For this purpose, we conclude a data processing agreement with them in accordance with Art. 28 GDPR. All service providers named here are based in Germany.
Accounting
sevDesk
sevDesk GmbH, Hauptstraße 115, 77652 Offenburg (Germany)
Privacy policy: https://sevdesk.de/sicherheit-datenschutz/
Hosting services
ImpossibleCloud
ImpossibleCloud GmbH, Friesenweg 12, 22763 Hamburg (Germany)
Privacy policy: https://www.impossiblecloud.com/de-de/legals-privacy
netcup
netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe (Germany)
Privacy policy: https://www.netcup.de/kontakt/datenschutzerklaerung.php
STRATO
STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin (Germany)
Privacy policy: https://www.strato.de/datenschutz/
Shipping service providers
If you order products from us, we pass on your name and delivery address to the shipping service provider. We only pass on your email address or telephone number, so that the provider can inform you about the delivery, if you consent. We currently work with DHL.
Payment service providers
When you purchase goods and services in our online shops or through direct sales, we offer you other payment methods in addition to bank transfer.
If you use one of these payment service providers, you normally enter your payment details directly with that provider. The provider processes them as an independent controller within the meaning of Art. 4(7) GDPR in accordance with its privacy policy. We receive from the provider only the information we need to match the payment to your order.
Check24
CHECK24 Zahlungssysteme GmbH, Erika-Mann-Str. 62-66, 80636 München (Germany)
Privacy policy: https://www.check24.de/files/p/2018/7/5/3/12858-20180528_informationspflichten-gemaess-art-13_zahlungssysteme.pdf
GLS Bank
GLS Gemeinschaftsbank eG, 44774 Bochum (Germany)
Privacy policy: https://www.gls.de/privatkunden/datenschutz
PayPal
PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (Luxembourg)
Privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
Stripe
Stripe Technology Europe, Ltd., 1 Wilton Park, Wilton Place, Grand Canal Street Lower, Dublin 2, D02 FX04 (Ireland)
Privacy policy: https://stripe.com/de/privacy
Push notifications
If you turn on notifications, they are delivered by your browser's push service: Google (Chrome), Apple (Safari), Mozilla (Firefox) or Microsoft (Edge). We encrypt the content so that only your device can read it. The service only sees when we send your device a message. For this purpose, we store for each device the address at the push service, the keys, the type and version of your browser and the domain. If you turn off notifications or log out, we delete this information.
Gravatar
Gravatar lets you manage a profile picture centrally and use it across several online services, including our web app. The service is turned off by default. If you turn it on, our server asks Gravatar for your picture once a day. In doing so, it transmits a hash of your email address and the IP address of our server, not your own. This only works with a confirmed email address.
Gravatar is operated by the US company Automattic Inc.; its establishment in the European Union is
Aut O'Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86 (Ireland).
Privacy policy: https://automattic.com/privacy/
Telegram
For certain events, our administrators receive a message via Telegram, for example when an account has been deleted, someone requests a reset of their second factor or a registration is awaiting approval. The message may contain your username.
Privacy policy: https://telegram.org/privacy
keys.openpgp.org
If you publish your public PGP key, it is sent together with your email address to the key server keys.openpgp.org.
Privacy policy: https://keys.openpgp.org/about/privacy
Third-party images
Images and icons from third-party servers, for example in notes or with links, are loaded by your browser directly from those servers. The third-party server can see your IP address in the process.
We are subject to legal obligations to pass on personal data to public bodies, for example to:
We only pass on data to authorities if we are legally obliged to do so.
As a rule, we do not ourselves transfer any personal data to a third country and/or international organisations that are not members of the European Union (EU) or the European Economic Area (EEA). Exceptions are push notifications and Telegram (see “Services our web app uses”).
Our own servers are located in the EU.
Should a transfer to a third country be necessary beyond this, we make sure that a comparable level of data protection exists there. This means: either the European Commission has confirmed an adequate level of data protection, or other appropriate safeguards are in place (e.g. EU standard contractual clauses or binding corporate rules), or you have given us your explicit consent. You will receive separate information about the details of any such data transfer where we are legally obliged to provide it.
If you contact us via social media or click on an external link on our pages to a provider based outside the EU, we cannot rule out that this provider transfers your data to third countries.
For further information, please refer to the privacy policy of the respective provider.
Our internet cookie policy. We use cookies, if at all, only with the greatest care.
Cookies are small text files that your browser stores on your device.
Cookies can contain various data, for example:
This makes using our pages more convenient for you, for example because you stay signed in.
Your browser settings give you full control over the use of cookies on your device.
If you disable cookies for our websites, some features may no longer be available to you.
We stand for a free and open internet.
We want to live up to this commitment by using only cookies that are technically necessary. We do not use cookies for analytics or advertising.
We use functional cookies that give you a smooth and convenient experience on our websites. This applies above all to our online shops and online customer centres, so that we can save your login and offer you a single login for all our services.
Specifically, these are:
FriendzHive_Session: keeps you signed in to our web app. It contains an identifier for your account and your session and expires after 60 minutes of inactivity, or after 30 days with “Stay signed in for 30 days”.FriendzHive_Diary_View and FriendzHive_Diary_Language: remember the view and language on public calendar pages for one year.Our web app also stores some settings, such as theme and language, in your browser’s storage. They remain on your device.
When you take part in online surveys, we use cookies to temporarily save your answers.
When you click on links to external pages, the site operator may in turn use further cookies. In this respect, please refer to the privacy policy of the linked page in question.
Here you can find out everything about the legal bases for data storage and processing.
In the course of business relationships, if you subscribe to our newsletter or would like to receive advertising from us, you can in individual cases give us your explicit consent to the processing of your personal data. This also applies if you enable push notifications or Gravatar in our web app.
In order to assess creditworthiness and default risks, we exchange data with credit reference agencies in individual cases. We only do this with your explicit consent.
We only process health data with your explicit consent.
You can withdraw this consent at any time with effect for the future. For example, you will find a special unsubscribe link in every newsletter. Or you can simply contact us by e-mail using the contact details given below.
(Legal basis: Art. 6(1)(a) GDPR; for health data Art. 9(2)(a) GDPR)
We use personal data, such as your telephone number or e-mail address, to get in touch with you and to provide our service properly and conscientiously.
(Legal basis: Art. 6(1)(b) GDPR)
As a company, we are subject to various legal obligations and statutory requirements. Some of these requirements call for personal data to be stored for a certain period.
For example, we are legally obliged to keep invoices and other accounting records for eight years, and books and annual financial statements for ten years. So if we send you an invoice, this invoice data will be stored for that period.
(Legal basis: Art. 6(1)(c) GDPR)
This term covers several aspects. It means that, during a business relationship with you, we process data beyond what is strictly needed to perform the contract, in order to safeguard the legitimate interests of ourselves or third parties.
What does that mean? Here are some examples:
We can only maintain a worthwhile long-term business relationship together if we know in sufficient detail what wishes and opinions you have about it. That is why we are pleased when you occasionally take part in surveys that help us to tailor our services and offers to your needs.
For marketing analyses, we evaluate data that comes, for example, from our business relationship with you. We anonymise it beforehand. In this way, we aim to make our services, products and campaigns better, more efficient and more relevant to you.
If you are already a customer of ours, we will contact you by e-mail or post to let you know about offers that we think could be genuinely relevant to you personally. Anyone who is not yet a customer will only receive advertising by e-mail with their consent.
You can be sure that we take great care in doing so and never want to bother you with irrelevant offers. Regardless of this, you can object to receiving such offers at any time. In that case, please let us know by phone or e-mail. You will find our contact details below, at the end of this privacy policy.
The security of our websites and services is also based on our legitimate interest, for example server log files, protection against misuse, audit logs, blocklists, alerts to our administrators and video recordings, as well as the statistics of our social media presences.
Where necessary, in the context of legal disputes, we also disclose personal data when obtaining legal advice or in court, in order to safeguard our interests in establishing, exercising or defending our rights.
(Legal basis: Art. 6(1)(f) GDPR; for advertising by e-mail to customers, Section 7(3) UWG)
We set technically necessary cookies without consent.
(Legal basis: Section 25(2) No. 2 TDDDG)
Here we inform you about the rights you have with regard to the storage and processing of your personal data, and where you can exercise them. We do not make automated decisions within the meaning of Art. 22 GDPR.
You can request information about your personal data processed by us.
If this data is incorrect or incomplete, you can request that it be rectified. In this case, we will also inform any third parties to whom we have passed on your personal data and ask them to rectify your data.
You can withdraw any consent you have given at any time with effect for the future and, under the following conditions, object to the processing of your personal data.
Right to object in individual cases
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(f) GDPR (data processing on the basis of a balancing of interests). This also applies to profiling within the meaning of Art. 4 No. 4 GDPR based on this provision. If you object, we will restrict your personal data and no longer process it, unless we can demonstrate compelling legitimate grounds for processing this data which override your interests, rights and freedoms, or the processing of your personal data serves the establishment, exercise or defence of legal claims.
Objection to the processing of your data for direct marketing
As part of our business relationship, we would like to make you offers that are few in number but always good and relevant, so that you may make use of further services of ours. We may therefore also use your personal data for our direct marketing. You have the right to object to this at any time. If you object, we will no longer process your personal data for these purposes.
Form of objection and costs
The objection can be made in any form and should, if possible, be sent to datenschutz@magnusschmitz.eu. You will incur no transmission costs other than those of your communication provider's basic tariff.
You can request that we erase your personal data, for example if we no longer need it or you withdraw your consent. If we are required to retain data for legal reasons, we will restrict it instead and use it only for that purpose.
Instead of erasure, you can request that we only store your data and no longer use it in any other way, for example while you are contesting its accuracy or while we are reviewing your objection.
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format.
Depending on the legal basis on which and the purposes for which your data is processed, and how it was collected, you also have the right to request that it be transmitted to another controller.
In addition to the data protection rights listed above, you also have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR in conjunction with Section 19 BDSG.
The authority responsible for us is the
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2-4
40213 Düsseldorf
Germany
This privacy policy was last updated on 21 October 2026.
The German-language version is legally binding.
As the addresses of our service providers and other companies mentioned may change at any time, we recommend that you check them before getting in touch. If you need help with this, you can contact us.
We recommend that you read our privacy policy regularly, as changes may occur at any time, including without notice. If the changes are significant and mean a considerable restriction of your rights, we will inform you accordingly, provided we have your contact details.
FriendzLab
FriendzLab - Online Services for Friendz
Inh. Magnus Schmitz
Bruno-Schönewald-Straße 6
47877 Willich
Germany
hey@friendzlab.de
+49 2154 9548494