Privacy Policy

General Information

The following notes provide a simple overview of what happens to your personal data when you use this website. Personal data is any data that can be used to personally identify you. Detailed information can be found in the privacy policy below.

Join is a non-commercial educational project, developed as part of a web development training program at Developer Akademie GmbH. It is provided for demonstration and testing purposes only.

Data Collection on This Website

Data Protection

The operator of these pages takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

We point out that data transmission over the internet (e.g., communication by email) may have security gaps. Complete protection of data against access by third parties is not possible.

Notice Concerning the Responsible Party

The responsible party for data processing on this website is:

Mustafa Impis
Silcherstr. 4a
86368 Gersthofen
Germany

Email: mustafa@maveralabs.de

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration

Unless a more specific storage period has been specified within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies or until you request its deletion. As this is a demonstration project, stored data (accounts, contacts, tasks) may also be reset or deleted by the operator at any time without notice.

Legal Basis for Data Processing

We process your personal data on the basis of Art. 6 Para. 1 lit. b GDPR insofar as the processing is necessary to provide the functions of this application to you (e.g., account registration and login), and on the basis of our legitimate interest according to Art. 6 Para. 1 lit. f GDPR in the secure, stable, and error-free provision of this demonstration website. Where storage of or access to information on your device is strictly necessary to provide the service you request, this is based on Section 25 Para. 2 TDDDG. We do not process special categories of personal data (Art. 9 GDPR) and do not use your data for direct marketing.

Right to Object (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ART. 21 PARA. 1 GDPR).

Revocation of Your Consent to Data Processing

Insofar as any data processing operation is based on your consent, you can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work, or the place of the alleged violation. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of data to another controller, this will only be done to the extent that it is technically feasible.

Information, Correction, and Deletion

Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing, and, if applicable, a right to correction or deletion of this data. You can contact us at any time regarding this at mustafa@maveralabs.de.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
• If you have lodged an objection according to Art. 21 Para. 1 GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may – apart from its storage – only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.

Hosting

This website is hosted by ALL-INKL.COM – Neue Medien Münnich (Hauptstraße 68, 02742 Friedersdorf, Germany). When you visit this website, the hosting provider automatically processes technical access data (such as IP address, browser type, operating system, referrer URL, and time of access) in server log files to ensure the secure and stable provision of the website. The legal basis is our legitimate interest according to Art. 6 Para. 1 lit. f GDPR. We have concluded a data processing agreement (Art. 28 GDPR) with our hosting provider.

Google Firebase (Authentication and Realtime Database)

This application uses Google Firebase, a development platform provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). We use the following Firebase services:

• Firebase Authentication for user registration, login, and anonymous guest login. When you register, your email address, your password (stored by Google in encrypted form), and your display name are processed by Firebase Authentication.
• Firebase Realtime Database for storing application data (user profiles, contacts, and tasks). The database is located in the Google Cloud region europe-west1 (Belgium, EU).

The Firebase JavaScript libraries required for this are loaded from Google servers (www.gstatic.com) when you access any page of this application. In the process, your IP address is transmitted to Google, as this is technically necessary to deliver the files to your browser. The legal bases are Art. 6 Para. 1 lit. b GDPR (provision of the application functions you request) and Art. 6 Para. 1 lit. f GDPR (secure and efficient provision of the website).

Google acts as our processor within the meaning of Art. 28 GDPR on the basis of Google's data processing terms. Although the database is located in the EU, individual services (such as Firebase Authentication and the delivery of the JavaScript libraries) may involve the transfer of data to Google LLC in the USA. This transfer is safeguarded by Google's certification under the EU-US Data Privacy Framework and by EU standard contractual clauses. Further information can be found in Google's privacy policy at https://policies.google.com/privacy and in Google's information on privacy and security in Firebase at https://firebase.google.com/support/privacy.

Registration and Guest Login

When you register an account, we process your name, your email address, and your password. The password is managed exclusively by Firebase Authentication; we never store it in the database. In addition, your name, email address, an automatically assigned avatar color, and the time of registration are stored in your user profile in the Realtime Database. The legal basis is Art. 6 Para. 1 lit. b GDPR.

Alternatively, you can use the application via guest login. In this case, no name, email address, or password is collected; Firebase Authentication merely creates an anonymous user ID for the duration of your session.

Shared Demo Database — Important Notice

Join is a demonstration project with a shared database: all contacts and tasks are stored in a common data pool that is visible to and editable by all logged-in users, including guest users. Any data you enter (e.g., contact names, email addresses, phone numbers, task descriptions) can therefore be viewed, modified, or deleted by other users of this demo application.

For this reason, please do not enter any real personal data — neither your own beyond what is required for registration, nor data of third parties. Use fictitious data for testing purposes. If you enter personal data of third parties despite this notice, you are responsible for ensuring that you are permitted to do so.

Local Storage in Your Browser

This application stores technically necessary information in your browser's local storage and session storage (no cookies are set by us). This includes your login session (managed by the Firebase SDK), session markers for guest login and the current user, flags controlling the intro animation, and local caches of contact and task lists to speed up loading. This storage is strictly necessary to provide the service you request and is therefore permitted under Section 25 Para. 2 TDDDG; no consent is required. The entries are removed or become invalid when you log out or clear your browser data. No tracking or analytics tools are used on this website.

Deletion of Your Data

You can delete contacts and tasks yourself at any time within the application. To delete your user account and the associated profile data, please send an informal request to mustafa@maveralabs.de; your account and profile will then be deleted promptly. Independently of this, all demo data may be reset by the operator at any time (see "Storage Duration").