Privacy policy

1. Controller

Kaleb Jahnke, Koppelstraße 6a, 27711 Osterholz-Scharmbeck
Email: jahnke.kaleb@gmail.com

2. Basic principle of the application

The web app generates GiroCodes (SEPA-QR) and invoice PDFs locally in your browser. Your input is not transmitted to our server or stored by us. Anonymized usage data (page views, performance) is processed separately, as described in §9.

3. Hosting & server logs

The website is hosted by Vercel (Vercel Inc., USA). Transfers are based on EU standard contractual clauses. When you access the site, technically necessary connection data (e.g. IP address, date/time, requested URL, user agent, referrer) is processed in server logs. Legal basis: Art. 6 (1) lit. f GDPR.

4. External resources (CDNs)

We may use CDNs to deliver libraries. When loading such files, your IP address may be transmitted to CDN providers. Legal basis: Art. 6 (1) lit. f GDPR.

5. Optional external QR fallback

If you activate the “external QR fallback” option, the EPC text is transmitted to the external QR service api.qrserver.com. This may include payment data (recipient, IBAN, amount, payment reference). Legal basis: Art. 6 (1) lit. a GDPR (consent). Without activation, no transfer takes place.

6. Communication

If you contact us by email, we process your data for handling your request (Art. 6 (1) lit. b/f GDPR).

7. Your rights

You have the following rights:
- access, rectification, erasure, restriction (Art. 15–18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing (Art. 21 GDPR)
- right to lodge a complaint with a supervisory authority

8. Transfers to third countries

Vercel Inc. is based in the USA. Transfers are based on EU standard contractual clauses.

9. Cookies / tracking

The app does not use cookies for analytics or marketing purposes.

For traffic measurement and performance analysis, we use Vercel Web Analytics and Vercel Speed Insights (Vercel Inc., USA — see also §3 and §8). Both services are cookieless: no cookies are set, and no user is identified across devices or sessions. We collect aggregated, anonymized data such as pages visited, load times, and technical performance metrics (Core Web Vitals). Sensitive data from URL parameters (e.g. from scanned payment data) is automatically stripped before being sent to Vercel. The legal basis is our legitimate interest in analyzing and improving the website (Art. 6 (1) lit. f GDPR). For more information on how Vercel processes data, see vercel.com/legal.

10. Changes

We may update this privacy policy if functionalities or legal requirements change.