Back to pegelWERK

Privacy Policy

In short: we process personal data only as far as necessary to operate the website, handle orders, answer support requests and ensure technical security. No evaluation for advertising, tracking or profiling. We use no analytics or tracking services, no cookie banner needed.

1. Controller

Sascha Hömske
Alte Poststr. 34
53721 Siegburg, Germany
Email: [email protected]

2. Overview

We process personal data only insofar as this is necessary to operate our website, provide our offerings, process orders, handle support requests and ensure technical security. No further evaluation for advertising, tracking or profiling purposes takes place.

3. Native Apps (pegelWERK-BM, voyzSESSION, loudness CORRECT)

The native apps pegelWERK-BM, voyzSESSION and loudness CORRECT process audio exclusively locally on the respective device. No audio data, measurement results or personal data is transmitted to our servers, unless this is expressly required for a specifically displayed function.

Depending on functionality, the following permissions may be required:

The apps contain no analytics SDK, no crash-tracking SDK, no advertising libraries and no other third-party tracking software. Internet access is generally not required for operation.

Distribution via the Apple App Store: pegelWERK-BM is offered through the Apple App Store (for iPad, iPhone, Mac). When purchasing, installing, updating or accepting optional TestFlight invitations, Apple processes data independently (e.g. Apple ID, purchase history, device tokens); we have no control over this. Apple's privacy policy applies: apple.com/legal/privacy. Apple provides us only with aggregated, anonymised sales and crash statistics that do not allow conclusions about individual users.

4. Orders and Payment Processing

Sales of the desktop apps outside the app stores are handled by Paddle, Paddle.com Market Ltd., Judd House, 18-29 Mora Street, London EC1V 8BT, United Kingdom. Paddle processes the data required for the purchase and invoicing, in particular name, email address, billing address and payment information.

When you click the buy button, a connection to Paddle's servers may be established. Before that, there is no technical integration of Paddle. For the data processing in the course of the purchase, Paddle acts in part as an independent controller or as Merchant of Record. Paddle's privacy policy applies: paddle.com/legal/privacy.

Legal basis for processing in connection with orders is Art. 6 (1) (b) GDPR.

From Paddle we receive the data required to deliver the licence key and to handle support requests, in particular your email address. Invoices and tax-relevant documents are retained within the statutory retention obligations.

5. Sending Licence Emails

Licence emails are sent via Resend Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. Resend processes the data required for delivery, in particular the buyer's email address and the message content.

A data processing agreement under Art. 28 GDPR is in place with Resend. Insofar as data is transferred to third countries, this is based on appropriate safeguards, in particular the EU standard contractual clauses. It cannot be ruled out that US authorities access data processed there. Resend privacy notice: resend.com/legal/privacy-policy.

6. Server Log Files and Website Operation

Our website is provided via Cloudflare Pages and other Cloudflare services. With each request, technically necessary data is processed, in particular IP address, date and time of the request, the resource requested, the amount of data transferred, and browser and system information. The IP address is considered personal data.

This processing serves to deliver the website, ensure stability, perform error analysis and protect against abuse and attacks. Legal basis is Art. 6 (1) (f) GDPR. Insofar as individual processing operations are necessary for the performance of a contract or pre-contractual measures, Art. 6 (1) (b) GDPR may additionally apply.

A data processing agreement under Art. 28 GDPR is in place with Cloudflare. Insofar as data is transferred to the USA, this is based on appropriate safeguards; access by US authorities cannot be ruled out. Cloudflare privacy notice: cloudflare.com/privacypolicy.

7. Cookies and Comparable Technologies

We ourselves set no cookies for analytics, marketing or tracking purposes. Insofar as technically necessary storage or access technologies should be required for providing our services (e.g. for attack detection by Cloudflare), these serve solely the functionality and security of the website.

We do not use any browser-side reach measurement or web-analytics tool. No user profiles are created and no cross-device tracking takes place. A cookie banner is therefore not required.

8. Fonts

All fonts used on this website are loaded locally from our web server. No connection to external font providers, in particular Google Fonts, is established. Therefore, no data is transmitted to external providers when loading the fonts.

9. Cloudflare Infrastructure

We use Cloudflare services for the provision, protection and technical processing of our website and individual backend functions. These may include Cloudflare Pages, R2, Workers and D1.

In particular, the following data may be processed:

Cloudflare R2 is used to deliver trial downloads. When downloading, technically necessary access data may be processed. Cloudflare Workers are used to handle licence and support functions. Cloudflare D1 serves as a database for technical and organisational data, e.g. for licences, trial management and rate limits.

Processing is based on Art. 6 (1) (f) GDPR insofar as it serves the secure and efficient operation of our website and systems, and on Art. 6 (1) (b) GDPR insofar as it is necessary for contract performance or licence provision. A data processing agreement under Art. 28 GDPR is in place with Cloudflare. Insofar as data is transferred to the USA, this is based on appropriate safeguards; access by US authorities cannot be ruled out. Cloudflare privacy notice: cloudflare.com/privacypolicy.

10. Local Storage in the Browser

This website uses local browser storage (localStorage) exclusively to store your language choice. Only a local entry for the language setting is stored. It remains on your device and is not transmitted to us.

The storage is technically necessary in order to display your chosen language again on your next visit. Legal basis is Art. 6 (1) (f) GDPR and, where applicable, § 25 (2) no. 2 TDDDG (formerly TTDSG).

11. YouTube Videos

On the page pegelwerk.com/videos we embed videos from YouTube. We use a privacy-friendly two-click solution. On first loading the page, only a locally stored preview image is shown; no connection to YouTube or Google is established at that point.

Only when you actively click a video is the YouTube player loaded. From that point on, YouTube or Google processes personal data, in particular your IP address as well as technical device and browser information. Cookies may be set and data may be transferred to the USA.

Legal basis for loading the video after your click is your consent under Art. 6 (1) (a) GDPR and, where applicable, § 25 (1) TDDDG (formerly TTDSG). Further information can be found in Google's privacy policy: policies.google.com/privacy.

12. Support Requests

If you contact us via the support form or by email, we process the data you provide in order to handle your request. This may include in particular name, email address, details of the app, version, operating system and the description of your request.

The support form is processed technically via our infrastructure and forwarded for delivery to our support mailbox ([email protected]). To prevent spam, temporary technical processing of rate-limit information may be necessary; the IP address is not stored in plaintext.

Depending on the occasion, processing is based on Art. 6 (1) (b) GDPR insofar as your request relates to a contract or pre-contractual measures, otherwise on Art. 6 (1) (f) GDPR based on our legitimate interest in handling requests efficiently.

13. Retention Period

We store personal data only as long as necessary for the respective purposes or as required by statutory retention obligations. Statutory retention periods apply to invoices and tax-relevant documents. We delete support requests as soon as they are no longer needed and no statutory obligations prevent deletion. Server logs are, according to Cloudflare, typically retained for only a few days; the IP hashes processed for abuse prevention are without function after a short time.

14. Your Rights

Within the statutory requirements, you have the right to:

To exercise your rights, a message to [email protected] is sufficient.

No solely automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

Providing personal data is neither legally nor contractually required. However, for a purchase or a support request, the fields marked as required are necessary; otherwise we cannot process the order or answer the request.

15. Supervisory Authority

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44, 40102 Düsseldorf, Germany
www.ldi.nrw.de

Last updated: June 2026 · Privacy questions: [email protected] · The German version of this document is legally binding.