This English version is provided for convenience. In case of doubt, the German version is legally binding.
1. Controller and contact
Controller within the meaning of the General Data Protection Regulation (GDPR):
Harald Maier
c/o MDC#2100
Welserstraße 3
87463 Dietmannsried
Germany
Email: [email protected]
2. Overview
- Cookies
- None. This website does not set any cookies and does not store anything in your browser.
- Analytics and tracking
- None. No analytics tools, advertising pixels or social media plugins are used. A cookie banner is therefore not required.
- Forms and accounts
- None. There are no contact forms, user accounts or newsletters.
- Third-party content
- None. Fonts, images and scripts are loaded exclusively from this domain.
3. Hosting and server log files
This website is served via Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the website, Cloudflare processes technically necessary data, in particular your IP address, the date and time of access, the page requested, the referrer and information about your browser and operating system. This is done solely to deliver the website and to keep it secure and stable, for example to fend off attacks. We do not analyse this data ourselves or combine it with other data.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in providing the website securely and reliably. A data processing agreement is in place with Cloudflare. Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework. More information: Cloudflare privacy policy.
4. Data processing on this website
This website is a static information page. Apart from the technically necessary hosting described in section 3, no personal data is collected, stored or shared when you visit it.
5. Contact by email
If you contact us by email, we process the data you provide (e.g. email address, name, content of your message) in order to answer your request. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).
To receive email we use Titan Email, provided by Titan Solution Ltd SEZC, Willow House, Cricket Square, Grand Cayman, KY1-1001, Cayman Islands, which we obtain through our domain provider DD24. Titan stores email with Amazon Web Services, Inc. (USA). Data may therefore be transferred to countries outside the EU (Cayman Islands, USA); this is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). More information: Titan privacy policy. We delete email enquiries once they have been fully dealt with, unless statutory retention obligations apply.
6. App websites and external links
This website links to the websites of the individual apps on their own subdomains (e.g. purecards.heroldem.com). Their own privacy policies apply there, which also describe how data is handled within the app – for PureCards, see purecards.heroldem.com/en/privacy.
Links to the App Store or other websites are only accessed when you click them; from then on, the privacy policy of the respective provider applies – for the App Store, that of Apple Inc.
7. Your rights
Within the limits of the law, you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as the right to object (Art. 21) to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.
8. Updates to this privacy policy
Last updated: 12 November 2026. We will update this policy if the website or legal requirements change – for example, before any new service is added.