Privacy notice

Se Han GmbH, c/o Factory Görlitzer Park, Lohmühlenstraße 65, 12435 Berlin, Germany, represented by Alexandra von Quadt, is the controller for the processing described here. You can reach us at hello@se-han.de.

We have not appointed a data protection officer, as we are not required to under Art. 37 GDPR and § 38 BDSG.

Visiting the site. Our hosting provider processes server log data (IP address, time, requested page, browser) to deliver the site securely. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a working, secure service. Logs are kept for a short period and then deleted.

Creating an account. Email address, password (stored only as a hash), your name, page address, timezone and the content you publish. Legal basis: Art. 6(1)(b) GDPR, performance of the contract you enter into with us.

Sending a booking request. Name, email address and/or phone number, optional social handle, the selected date, time and activity, and your message. This is passed to the host whose page you booked so they can answer you. Legal basis: Art. 6(1)(b) GDPR.

Confirmation messages. When a host accepts a request, we send a confirmation to the contact details you gave. Legal basis: Art. 6(1)(b) GDPR.

Payments. If a booking or a subscription is paid, payment data is collected and processed by our payment provider. We never see or store full card details. Legal basis: Art. 6(1)(b) GDPR and Art. 6(1) lit. c GDPR for retention duties under tax and commercial law.

Optional storage. Anything beyond strictly necessary storage only happens after you allow it in the privacy banner. Legal basis: § 25(1) TTDSG and Art. 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future.

We use strictly necessary storage to keep you signed in and to remember your privacy choice. This does not require consent under § 25(2) TTDSG. We do not run advertising or cross-site tracking.

We use carefully selected processors under Art. 28 GDPR: a cloud hosting and database provider (hosting, authentication, storage), a payment provider for paid bookings and subscriptions, and an email delivery provider for confirmations. Where a processor is based outside the EU or EEA, the transfer is covered by the EU Standard Contractual Clauses and additional safeguards.

Booking details are visible to the host you booked with. We never sell personal data.

Account data is kept while your account exists and is deleted when you delete it. Booking records are kept while they are needed for the plan and for any claims arising from it. Data relating to payments is kept for the statutory retention periods of six to ten years under German tax and commercial law.

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). Where processing is based on consent, you may withdraw it at any time.

Signed-in hosts can download a copy of all of their data and delete their account and everything on it under Settings → Your data. Guests can write to hello@se-han.de and we will respond within one month.

You also have the right to lodge a complaint with a supervisory authority. The one competent for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.

Traffic is encrypted in transit (TLS). Access to stored data is restricted at row level so that hosts can only reach their own records. Passwords are never stored in readable form.