Privacy policy

Preamble: This privacy policy informs you about the processing of personal data when using the Perfoodto platform. It applies to the website at www.perfoodto.at, the related web application and the Perfoodto app for iOS and Android (together the “Platform”).

1. Controller and principles

1.1 Controller

The controller under the GDPR is Philipp Gerald Gutschi, Untergösel 82, 9413 Frantschach Sankt Gertraud, Austria, email: office@perfoodto.at.

1.2 Personal data and principles

Personal data means any information relating to an identified or identifiable natural person. We process data only as far as necessary to operate the Platform and observe in particular lawfulness, purpose limitation, data minimisation and storage limitation.

1.3 Legal bases

Depending on the processing, we rely on:

• Art. 6(1)(b) GDPR: performance of a contract and pre-contractual steps (account, subscription, support in a contractual relationship)
• Art. 6(1)(a) GDPR: consent (in particular analytics and optional marketing cookies)
• Art. 6(1)(f) GDPR: legitimate interests (security, abuse prevention, technical logs), unless your interests override ours
• Art. 6(1)(c) GDPR: legal obligations (in particular tax and bookkeeping retention)

For non-essential cookies and similar technologies we also observe section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021).

1.4 Storage period

We store personal data only as long as needed for the respective purposes or as required by statutory retention rules.

Indicative periods:

2. Your rights

You have the rights under Articles 15 to 22 GDPR where the legal conditions are met. Exercising them is generally free of charge. Contact office@perfoodto.at.

2.1 Access, rectification, erasure, restriction

You may request access to personal data concerning you and ask for rectification of inaccurate data, erasure or restriction of processing where the legal conditions are met.

2.2 Data portability

Where processing is based on consent or contract and carried out by automated means, you may receive the data you provided in a commonly used, machine-readable format and, where applicable, have it transmitted to another controller.

2.3 Withdrawal and objection

You may withdraw consent at any time with effect for the future, for example via the cookie banner. Processing based on consent before withdrawal remains lawful.

Where we process data on the basis of legitimate interests, you may object on grounds relating to your particular situation (Art. 21 GDPR).

2.4 Complaint to a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, https://www.dsb.gv.at/, email: dsb@dsb.gv.at.

3. Security and cookies

3.1 Technical and organisational measures

We take appropriate technical and organisational measures to protect your data, including encrypted transmission (HTTPS), access controls and protected password storage. In the app we store login tokens in the device’s protected storage where possible. Please keep your login details confidential.

3.2 Cookies and similar technologies

On the website we use cookies and similar technologies. You can control optional categories via our cookie banner. Advertising cookies for the Kostnix plan are confirmed in a separate notice after registration. In the app, separate notices apply for Google AdMob, the User Messaging Platform (UMP) consent form and App Tracking Transparency (see sections 4.8 and 4.9).

Categories on the website:

• Essential cookies: Required for operation, security and basic functions (session, CSRF protection, cookie settings, “remember me”). Legal basis: legitimate interests or contract (Art. 6(1)(f) or (b) GDPR) together with section 165(3) TKG 2021.
• Analytics cookies: Help us understand website usage (Google Analytics and Mouseflow). Only with consent (Art. 6(1)(a) GDPR, section 165(3) TKG 2021).
• Advertising cookies: Belong to the free Kostnix plan and deliver Google AdSense on the website. You cannot use Kostnix without these cookies. The alternative is an ad-free subscription (Sparfuchs or Küchenchef). Legal basis: contract for the ad-funded plan (Art. 6(1)(b) GDPR) together with section 165(3) TKG 2021.
• Marketing cookies: May enable extended Google-related measurements (for example Google Signals via Consent Mode). Only with consent.

You can change website settings at any time via the cookie banner. Disabling essential cookies may impair the Platform. App settings for ads and tracking are available in the app settings and in your device system settings.

4. Recipients and third-party services

4.1 Hosting

The Platform is hosted by:

Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany
Privacy policy: https://www.hetzner.com/legal/privacy-policy

In particular, server log data may be processed, such as:

• IP address
• date and time of the request
• requested URL and HTTP status
• referrer
• browser and device information
• amount of data transferred

Legal bases are contract performance and our legitimate interest in secure and efficient operation (Art. 6(1)(b) and (f) GDPR). A processor agreement under Art. 28 GDPR is in place with the hoster.

4.2 Google Analytics and Google Tag Manager

On the website we use Google Analytics 4 and Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics collects usage information and may transfer data to Google servers, including in the USA. Google is certified under the EU-US Data Privacy Framework. We use Consent Mode version 2. Without analytics consent, no analytics cookies are set; a strongly limited aggregated measurement may still occur where technically provided.

Tag Manager itself usually does not store personal data but may trigger other tags.

Legal basis is your consent (Art. 6(1)(a) GDPR, section 165(3) TKG 2021). You may withdraw consent at any time via the cookie banner.

Typical cookies:

• _ga: Distinguishes visitors and sessions (up to 2 years)
• _ga_0MRD26944F: Session-related distinction (up to 2 years)

More information: https://policies.google.com/privacy

4.3 Mouseflow

On the website we use Mouseflow provided by Mouseflow ApS, Flæsketorvet 68, 1711 Copenhagen, Denmark. Mouseflow is delivered via Google Tag Manager. Mouseflow records sessions (session replay) and creates heatmaps and usage statistics.

In particular, mouse movements, clicks, scrolling, visited pages, device data and a truncated IP address may be processed. Mouseflow masks IP addresses automatically. According to Mouseflow, keystrokes are not captured. Data of customers in the EU is stored in the EU. For transfers to third countries Mouseflow relies on standard contractual clauses and the EU-US Data Privacy Framework.

Legal basis is your consent (Art. 6(1)(a) GDPR, section 165(3) TKG 2021). Tracking starts only after analytics consent. You may withdraw consent at any time via the cookie banner.

Typical cookies:

• _mfauth: Technical session assignment (session)
• _mflang: Mouseflow language setting (1 year)
• mf_20db9035-b896-463f-975b-7c80f1a47fad: Session identifier for analytics and session replay (session)
• mf_user: Distinguishes new and returning visitors (90 days)

More information: https://mouseflow.com/legal/privacy/

4.4 Stripe (payments and customer portal)

For subscriptions and payments we use Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

Payment data such as card numbers are processed by Stripe. We do not store full card data. Stripe may receive in particular your email address, billing address, transaction data, technical data and our user ID as metadata. Via the Stripe customer portal you can manage subscriptions and payment methods.

Legal bases: contract performance and legitimate interest in secure payment processing (Art. 6(1)(b) and (f) GDPR). Stripe may transfer data to the USA and is certified under the EU-US Data Privacy Framework.

More information: https://stripe.com/privacy

4.5 Cloudflare Turnstile

To protect against abuse and automated access we use Cloudflare Turnstile (Cloudflare, Inc. or affiliates) on login, registration, password reset, contact and support forms on the website.

Technical data (such as IP address, browser information and a verification token) may be sent to Cloudflare. Legal basis is our legitimate interest in Platform security (Art. 6(1)(f) GDPR).

More information: https://www.cloudflare.com/privacypolicy/

4.6 App stores

The Perfoodto app may be obtained via the Apple App Store and Google Play.

Apple and Google process their own data as store operators, for example for downloads, updates, device accounts and store reviews. For that processing Apple or Google are independent controllers.

More information:

Apple privacy: https://www.apple.com/legal/privacy/

Google Play privacy: https://policies.google.com/privacy

4.7 Google AdSense (website)

On the website we show advertising banners via Google AdSense provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This applies to guests and to the free Kostnix plan. AdSense is part of free website use. You cannot use Kostnix without ads. The Sparfuchs and Küchenchef plans are ad-free on the website.

AdSense may process in particular the IP address, browser and device information, the page visited and cookie identifiers. Google may also transfer data to the USA and is certified under the EU-US Data Privacy Framework. We use Consent Mode version 2.

Legal basis is the contract for ad-funded free use or the Kostnix plan (Art. 6(1)(b) GDPR) together with section 165(3) TKG 2021. You confirm this for Kostnix via the separate ads notice after registration. If you do not want ads, choose Sparfuchs or Küchenchef.

Typical cookies:

• __gads: Measures ad impressions (up to 13 months)
• __gpi: Delivers ads (up to 13 months)
• _gcl_au: Conversion information (90 days)
• IDE: Personalized ads via DoubleClick (up to 13 months)

More information: https://policies.google.com/privacy

https://policies.google.com/technologies/ads

4.8 Google AdMob (app)

In the Perfoodto app for iOS and Android we show advertising banners via Google AdMob provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This applies to guests and to the free Kostnix plan. Sparfuchs and Küchenchef are ad-free in the app.

AdMob may process in particular device and app information, IP address, advertising identifiers (where authorised), interactions with ads and technical diagnostic data. Google may also transfer data to the USA and is certified under the EU-US Data Privacy Framework.

In the European Economic Area and comparable regions we use Google’s User Messaging Platform (UMP). Through it we obtain consent for personalised advertising and for accessing information on the end device where required. Without such consent, non-personalised ads may still be shown where the ad-funded access provides for that. On iOS we additionally ask via App Tracking Transparency (ATT) for permission to track or use the advertising ID. In the app settings you can reopen Google’s privacy options where available.

Legal basis for showing ads as part of free use or the Kostnix plan is Art. 6(1)(b) GDPR. For personalised advertising and for accessing information on the end device (including the advertising ID where authorised), the legal basis is your consent under Art. 6(1)(a) GDPR together with section 165(3) TKG 2021. You may withdraw consent via UMP, ATT and your device settings. If you do not want ads, choose Sparfuchs or Küchenchef.

More information: https://policies.google.com/privacy

https://policies.google.com/technologies/ads

https://support.google.com/admob/answer/10113005

4.9 Firebase Analytics (app)

In the app we use Firebase Analytics (Google Analytics for Firebase) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand app usage and improve the app.

In particular, app events (for example screen views, sign-in, recipe views), device and app version, language and technical identifiers may be processed. Google may also transfer data to the USA and is certified under the EU-US Data Privacy Framework.

On iOS we start Firebase analytics only after you authorise tracking via App Tracking Transparency. Without that authorisation, no analytics events are sent to Firebase. Android has no ATT dialog. There, analytics may run from app start where technically enabled.

Where consent is given, the legal basis is Art. 6(1)(a) GDPR together with section 165(3) TKG 2021. Where measurement on Android runs without a separate dialog, we also rely on our legitimate interest in improving and stabilising the app (Art. 6(1)(f) GDPR), where permitted under TKG 2021. You can stop processing by withdrawing ATT authorisation, via device settings or by uninstalling the app.

More information: https://firebase.google.com/support/privacy

https://policies.google.com/privacy

4.10 Sign-in with Google, Apple and Facebook

You can sign in with a Google, Apple or Facebook (Meta) account. You are redirected to the provider. We receive in particular a provider identifier, your email address and, where shared, your name.

We use these data to create your Perfoodto account or to link it to an existing account. A password is not required for this sign-in. Legal basis is contract performance (Art. 6(1)(b) GDPR).

The providers may process their own data and transfer data to the USA. Google and Apple are certified under the EU-US Data Privacy Framework. Meta relies on the Data Privacy Framework or appropriate safeguards. For that processing the providers are independent controllers.

More information:

Google privacy: https://policies.google.com/privacy

Apple privacy: https://www.apple.com/legal/privacy/

Meta privacy: https://www.facebook.com/privacy/policy

5. Processing on the Platform

5.1 Visiting the website

When you access the Platform, technically necessary connection data are processed (see hosting and essential cookies). Association with a user account only occurs if you are signed in.

5.2 Registration and account

For an account we process in particular:

• email address and password (stored hashed), unless you sign in with Google, Apple or Facebook
• provider identifier for social login (Google, Apple or Facebook)
• federal state (for regional offer matching)
• preferred language
• optional settings such as default portions and store/category order
• optional first and last name where you provide them (for example in support)
• registration and email verification timestamps

Legal basis is Art. 6(1)(b) GDPR. Without the required data an account or personalised use is not possible.

5.3 Bookmarks and votes

If you bookmark or vote on recipes, we store the link to your user account. Legal basis is Art. 6(1)(b) GDPR.

5.4 Subscriptions and invoices

When you take out a subscription we process contract and billing data including Stripe customer ID, plan, status, terms and invoice documents. Legal bases are Art. 6(1)(b) and (c) GDPR.

5.5 Emails and notifications

We send necessary transactional emails (for example confirmation, password reset, email change). Further notices may be sent where you do not object and where legally permitted. Legal bases are Art. 6(1)(b) or (f) GDPR.

5.6 Contact and support

If you contact us via the contact or support form, we process the data you provide (name, email, subject, message) to handle your request. Legal bases are Art. 6(1)(b) or (f) GDPR.

5.7 No public user profiles

Perfoodto does not publish public user profiles for meetings or matchmaking. Your bookmarks and votes are not intended as a public profile for third parties.

5.8 App

The Perfoodto app for iOS and Android is part of the Platform. Account, bookmarks, votes, personalisation and subscriptions are the same as on the website.

The app communicates with our servers via an interface (API). The same technical connection data as for a website visit may arise, in particular IP address, time, requested URL and device or client information. Legal bases are contract performance and our legitimate interest in secure operation (Art. 6(1)(b) and (f) GDPR).

After sign-in the app stores a login token locally on the device, in the operating system’s protected storage where possible. The token keeps you signed in and is deleted when you sign out. Guests can use parts of the app without an account. In that case no login token is stored. For guests and Kostnix, ads (AdMob) and usage analytics (Firebase Analytics) may run in the app. Details and legal bases are in sections 4.8 and 4.9. On iOS we ask for App Tracking Transparency authorisation before tracking or accessing the advertising ID.

6. Transfers to third countries

Where providers transfer data to third countries, in particular the USA (for example Google, Apple, Meta or Stripe), this is based on an adequacy decision (EU-US Data Privacy Framework) and/or appropriate safeguards under Art. 46 GDPR. See the providers’ privacy notices for details.

7. Privacy contact

For privacy requests contact the controller at: