Privacy policy

Version 2026-12 · as of 12 November 2026

1. Key points at a glance

• We process your data so that you can use our parental allowance calculator, the parental allowance software and our parental allowance consultation.
• For parental allowance applications, we also need special categories of data, e.g. information on pregnancy, birth, maternity protection, employment prohibition, illness, a disability of your child and church tax (which may reveal your religious affiliation). We only process this data with your separate, voluntary and explicit consent. We ask for it before you use the parental allowance calculator (section 8).
• No tracking, no advertising cookies. Content from third parties (YouTube, Google reviews) and remembering a partner referral are only used after your consent. In our app, we only set strictly necessary cookies.
• You submit your applications yourself. We do not transmit any application data to authorities.
• Your data is stored on servers of our host IONOS in Germany. We store particularly sensitive fields in encrypted form. A second factor is available for signing in.
• In our app, the roadmap, reminders and document folder remain on your device. Apple or Google processes purchases in the app (section 5a).

2. Controller and data protection officer

Einfach Elterngeld GmbH, represented by the managing director Felix Böhme, Pennricher Straße 31, 01157 Dresden, Germany, phone +49 351 799 938 50, e-mail kontakt@einfach-elterngeld.de.

You can contact our data protection officer directly at datenschutz@einfach-elterngeld.de or by post at: Einfach Elterngeld GmbH, attn. data protection officer, Pennricher Straße 31, 01157 Dresden, Germany.

3. Your rights

You have the right to

• access (Art. 15 GDPR),
• rectification (Art. 16),
• erasure (Art. 17),
• restriction of processing (Art. 18),
• data portability (Art. 20).

You can withdraw consent at any time with effect for the future (Art. 7(3)), as easily as you gave it: in the customer area or by e-mail. Processing carried out until then remains lawful.

Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation.

Right to lodge a complaint (Art. 77 GDPR): The competent authority is the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte), Maternistraße 17, 01067 Dresden (postal address: Postfach 11 01 32, 01330 Dresden), post@sdtb.sachsen.de, phone +49 351 85471-101.

Please send requests to datenschutz@einfach-elterngeld.de. To protect your data, we may ask for proof that the request comes from you.

In the customer area under “Privacy & data security”, you can at any time

• download a copy of your data under Art. 15 GDPR as a PDF,
• download a complete data export (ZIP with your data in machine-readable form, all uploaded files, applications, invoices and order documents) and
• request the erasure of your account and your data.

To protect your data, you first confirm your password and – if set up – your second factor. We log each retrieval and each request without content (type, time, channel) and inform you by e-mail. The log serves as proof that we handled your requests in time (Art. 6(1)(c) in conjunction with Art. 5(2) and Art. 12 GDPR); we delete it 3 years after the end of the year of the request. After an erasure, we only keep what we are legally obliged to keep (e.g. invoices for 8 years) and restrict this data from any other use (Art. 18 GDPR).

4. Hosting, logs, backups, security

Hosting: The website, customer area, database and e-mail mailboxes are operated for us by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, in a data centre in Germany. We have a data processing agreement with IONOS (Art. 28 GDPR).

Server logs: For every page request, the web server stores the IP address, date and time, requested address and status code, amount of data transferred, referrer and browser identifier. The purpose is secure operation and defence against attacks (Art. 6(1)(f) GDPR). The logs are deleted after 7 days. No statistical evaluation takes place.

Application logs: technical error messages, 30 days.

Sign-in security log: customer number, event and time, without IP and e-mail address, 12 months.

Visitor statistics without personal reference: To understand which pages and calculators are used and where visitors leave, we count the page views of our public pages ourselves. Only daily totals are counted: the page viewed (without any additions to the address), whether the visit came from outside, the origin group (e.g. “Google” or “Direct”), the device class (mobile, tablet, computer or app), from which page of our website you went on to which other page, addresses that were not found, and the number of calculations in our calculators. We do not store any IP address, any identifier of your device or browser and no history of individual visitors, and we do not set a cookie. Nothing is stored on or read from your device for this (section 25 TDDDG is not affected). We do not count views by search engine robots, prefetching or our staff as visits. If a program of an AI service retrieves one of our public pages (for example because an AI assistant reads the page to answer a question), we count this separately from visits: per day only a total per page and program (for example “ChatGPT-User”), without IP address and without any further details. The daily totals cannot be attributed to any person; no personal data arises from them. Insofar as the processing during the short moment of counting were nevertheless regarded as personal, the legal basis is our legitimate interest in designing our website according to demand (Art. 6(1)(f) GDPR). We delete the daily totals after 25 months.

Backups: We back up the database hourly and the files daily. The backups are stored on our server and additionally in encrypted form (the key stays with us) in data centres of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in the EU and in the object storage of IONOS SE in Germany, each as a processor. We keep backups for 7 days; to protect against manipulation and encryption by attackers, removed backup states remain technically locked for up to 7 further days and are then permanently deleted. If a backup is restored, we repeat the deletions that became due in the meantime. We archive invoices separately and in encrypted form because of the statutory retention obligation.

Monitoring: We monitor whether our website is reachable and whether backups are running with the services Better Stack and Healthchecks.io. These services only receive technical status messages from our server, no data about you.

Protective measures: HTTPS; encrypted storage of particularly sensitive data fields (e.g. names, address, tax ID, bank details, income); two-factor sign-in (mandatory for staff with admin access); limited sign-in attempts; content security policy. Uploaded files are not publicly accessible; only authorised persons have access.

5. Cookies and similar technologies (Section 25 TDDDG)

We only store information on your device that is strictly necessary (Section 25(2) no. 2 TDDDG) or that you have allowed (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).

Name	Purpose	Duration	Type
laravel_session	session (sign-in, forms, payment process, entries in the free calculator)	until the browser closes or 120 minutes of inactivity	necessary
XSRF-TOKEN	protection against forged form requests	2 hours	necessary
remember_web_…	“Remember” (stay signed in), only at your request. In the app, “Remember” („Daten merken“) is preselected; you can deselect it before signing in.	30 days	necessary at your request
ee_trusted_device	“Trust this device for 30 days”, only at your request	30 days	necessary at your request
ee_geraet	recognises after sign-in whether you use a known device, so that we can warn you about a sign-in on a new device (section 7)	365 days, only set when signing in	necessary (account security)
borlabs-cookie	stores your choice in the cookie notice	1 year	necessary
ee-language	language when booking a consultation	1 hour	necessary
ee_app_hinweis	remembers that you closed the notice about our app at the top of the page or tapped “Get”, so that it does not appear again (content only “zu” or “geladen”)	30 days, after “Get” 180 days	necessary at your request
referrer	remembers that you came via our partner Steuertipps (section 18)	30 days	only with consent
__stripe_mid, __stripe_sid	fraud prevention by Stripe, only on payment pages	1 year or 30 minutes	necessary for payment

In our app, we only set strictly necessary cookies on the pages of our website (section 5a). What the app itself stores on your device is also described in section 5a.

Cookie notice: It is self-programmed and uses no external services. It has three categories: “Essential” (always active), “External media” (YouTube, Google reviews) and “Partner referral” (cookie referrer). The last two are not preselected. Rejecting is as easy as accepting: all buttons are on the same level. Without consent, the website works normally. You can change or withdraw your choice at any time via “Cookie settings” at the bottom of every page and in the customer area. When you withdraw, we delete the respective cookie. If new purposes are added, we ask you again.

5a. Our app for iPhone and Android

This section only concerns you if you use our app “Einfach Elterngeld”. For everything you do on our website in the app – calculator, guides, customer account, application, consultation – the other sections of this privacy policy apply unchanged.

Download via the App Store and Google Play: You download the app from the App Store of Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, or from Google Play, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You conclude the purchase of the parental allowance software with Apple Distribution International Ltd. at Apple and with Google Commerce Limited, 70 Sir John Rogerson’s Quay, Dublin 2, D02 R296, Ireland, at Google (see “Purchases in the app”). Apple and Google are themselves responsible for the download, your store account, payments in the store and the statistics of the stores; their privacy notices apply. Apart from a purchase in the app (see “Purchases in the app”), we do not receive any information about you personally from Apple and Google, only aggregated figures (e.g. downloads per day) and, if you have allowed this in your device settings, crash reports without names and contact details.

Structure of the app: Part of the app runs only on your device: roadmap („Fahrplan“), deadline reminder („Fristen-Wecker“), document folder („Unterlagen-Mappe“) and child benefit dates („Kindergeld-Termine“). The app shows the calculator, guides and your customer account as pages of our website einfach-elterngeld.de in the app window. Sections 4 (logs), 5 (cookies), 7 to 11 (customer account, consent, calculator, software, consultation) and 13 (payment processing) apply to these pages in particular. So that our website shows the pages in the layout for the app, the app adds the suffix “EinfachElterngeldApp” with the version number and the operating system (iOS or Android) to the browser identifier. Like the rest of the browser identifier, the suffix is kept in the server log for 7 days; we do not set an additional cookie for this.

Cookies and external media in the app window: In the app window, we only set cookies that are strictly necessary for signing in and for the functions you request (section 5, Section 25(2) no. 2 TDDDG). There is therefore no cookie notice with choices there; under “More → Cookie settings” („Mehr → Cookie-Einstellungen“) you will find a short notice about this. We do not load external media (YouTube videos, Google reviews) in the app window; in their place there is a link to YouTube or to our reviews on Google (section 16). We do not set the cookie referrer for partner referrals (section 18) in the app window. The app opens the consultation booking and other pages of our website with payment (e.g. “Add a personal consultation” („Persönliche Beratung dazubuchen“)) in a browser window within the app; for the pages of our website, the same applies there as in the app window, for up to 2 hours after they were last opened from the app. On Android, this browser window shares its cookies with your browser (e.g. Chrome); during this time, the same then also applies there. The app also opens the appointment portal in a browser window within the app; the same applies there as when you open it in your browser. On iOS, the app also opens links to other providers (including the links to YouTube and to our reviews on Google) in a browser window within the app; on Android, it opens them in your browser or in the provider's app (e.g. YouTube); the notices of the respective provider apply there.

Settings from our server: The app loads a file with settings from our server, e.g. deadline rules, child benefit dates and notices. The request does not contain any information from you. As with every page request, the IP address and browser identifier are kept in the server log for 7 days (section 4).

Data only on your device: For the roadmap and deadline reminder, you enter the expected date of birth or your child's date of birth, if applicable that maternity protection after the birth lasts 12 instead of 8 weeks (e.g. in the case of multiple births or a premature birth), and, for each parent, the role (mother or partner), the desired first month of parental allowance and, if applicable, the start of parental leave. The app uses this to calculate the deadlines on your device. For the child benefit dates, you select the last digit of your child benefit number. The app stores this information, your reminders, completed steps, settings as well as the checklist and the documents in the document folder only in the protected storage of the app on your device; they are not transmitted to us, and we have no access to them. The app evaluates your answers in the eligibility check before the purchase, in the “Application” area („Antrag“), only on the device and does not store them; they are gone when you close the app. If you have switched on device backup in iCloud or with Google, this data may be included in your device backup; this depends on your settings and the terms of Apple or Google. You delete the data under “More → Delete data on this device” („Mehr → Daten auf diesem Gerät löschen“) or by uninstalling the app; when you delete the data in the app, the app also removes what our website has stored in the app (e.g. cookies) and signs you out. This does not delete copies in a backup of your device. If a purchase in the app has not yet been completed (paid or with a pending payment, but not yet activated), the app keeps only the note about it when deleting (the identifier of your registration and the status and time of the purchase) until we have processed the purchase, usually when your access is activated; if a pending payment is not made, the app deletes the note a few days later (see “Purchases in the app”). Storage on your device is strictly necessary for the function you request (Section 25(2) no. 2 TDDDG).

Reminders: The app schedules reminders using the notification function of your device. We do not use a push service; no identifier for notifications is created, and our server does not learn whether and when you are reminded. You decide whether the app may show notifications in your device's prompt and at any time in its settings. Notifications may be visible on the lock screen; they therefore only state the deadline, e.g. “In 7 days: give notice of parental leave”. You can add dates to your calendar as a calendar file via the share menu; the app does not need access to your calendar for this.

Camera and document scanner: With the scanner, you photograph documents. The images are processed into a PDF on your device and stored only in the document folder.

• iPhone: The app asks for access to the camera. The scanner is part of the operating system (Apple VisionKit); processing takes place entirely on your device. Neither Apple nor we receive the images.
• Android: The app opens the camera app of your device and imports the photo taken; the app itself does not need camera permission for this. The photo is processed on your device and stored only in the document folder; we do not receive it. The app itself does not store a copy in your gallery; whether the camera app itself stores a copy depends on the camera app. The privacy notices of its provider apply to the camera app.

We only receive a document when you upload it from the folder to your customer account; sections 10 and 11 then apply.

Sharing, opening, printing: At your request, the app passes PDFs from the folder or from your customer account to the share menu or the file viewer of your device; from there, you can also print them. For this, the app stores downloads from your customer account in the app's cache on your device; they remain there until you choose “More → Delete data on this device” („Mehr → Daten auf diesem Gerät löschen“) or uninstall the app (on Android, the app also removes them with the next download if they are older than 24 hours). With “Share roadmap” („Fahrplan teilen“), the app passes the text of all upcoming dates and a calendar file with these dates to the share menu, e.g. for the other parent. You choose where a file goes; the privacy notices of the chosen app or recipient apply.

Rating the app: On iOS, the app may show Apple's rating prompt after your application has been created, no more than once a year; you decide whether to rate, and Apple governs the prompt and the rating under its own terms. On Android, the app does not show a rating prompt. Under “More → Rate app” („Mehr → App bewerten“), the app opens the app's page in the App Store or on Google Play.

No advertising ID, no tracking: The app does not use an advertising ID, analytics or crash services, advertising or services that evaluate your behaviour. Apart from the identifier of your registration, which the app passes to Apple or Google during the purchase (see “Purchase and activation”), and the diagnostics of the purchase library on Android (see below), the app itself does not transfer any data to third parties.

Purchases in the app: You can buy the parental allowance software (GTC § 5) in the app as an in-app purchase via Apple or Google.

Provisional registration: Before the store's purchase dialogue opens, the app asks for your name, your e-mail address and a password. We store this information together with your confirmation of the GTC (version, language, time), your consent under section 8 as well as the platform (iOS or Android) and the version of the app under a random identifier on our server so that we can assign your purchase to your customer account, even if the app is closed during the purchase. We store the name and e-mail address in encrypted form and the password only as a hash. The customer account is only created when the purchase is successful. If no purchase is made, we delete the provisional registration after 30 days at the latest. After a paid purchase, we transfer the name, e-mail address, password and consent to your customer account and clear them from the registration. If we cannot automatically assign a paid purchase to a customer account (case requiring clarification, e.g. because the e-mail address is already in use) and your registration still exists when the purchase is reported to us as paid, we clear the name, e-mail address, password and the record of your consent as soon as we have assigned the purchase or closed the case, no later than 30 days after registration; we continue to handle the case after that. We keep the identifier, the confirmed version of the GTC, the language, the times, the platform and the app version as proof of the conclusion of the contract (section 21). If the purchase is only reported to us as paid after we have deleted the registration (e.g. because the payment was only completed later), nothing of the registration remains; we then handle the case requiring clarification without it. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measure at your request), for the proof Art. 6(1)(f) GDPR (see “Purchase and activation”).

Calculator entries: If you used the parental allowance calculator before the purchase, you decide with a checkbox in the purchase form (not preselected) whether we transfer your entries to your customer account after the purchase. Only entries from your current session are transferred (section 9). We do not create a copy of your entries on the server before the purchase. If the session ends before the purchase is completed, the entries are deleted and you can calculate again. The checkbox does not replace your consent under section 8, which we obtain separately for health information.

Purchase and activation: Apple or Google processes the purchase and payment under its own terms and on its own responsibility; you enter your payment details there, we do not receive them. During the purchase, the app passes a random identifier of your registration to Apple or Google; it contains neither your name nor your e-mail address. From Apple or Google, we receive the following about the purchase: purchase number (transaction ID or purchase token and order number), the identifier of your registration, product, time, country of the store, status of the purchase (e.g. pending payment or test purchase), for Apple also price and currency, as well as later changes such as a refund and the reason for it; we use other technical details of the notification only for verification and do not store them. We verify the purchase on our server (for Apple using Apple's signature, for Google via Google's interface), create your customer account, activate the software and block it if the store refunds the purchase. After the purchase, we send you an order confirmation with the contract documents by e-mail. We do not issue invoices for purchases via Apple or Google; you receive the proof of purchase from the store. We record every notification from Apple or Google about the purchase and every processing step (e.g. activation, blocking, assignment) in a log without names and e-mail addresses. The legal basis is Art. 6(1)(b) GDPR, for bookkeeping Art. 6(1)(c) GDPR in conjunction with Section 147 AO and Section 257 HGB. Insofar as we keep the purchase data, the log and the proof of your registration in order to prove the purchase, to clarify claims arising from the purchase (e.g. a subsequent demand for payment after a refund by the store, GTC § 8.7 e) and to protect ourselves against misuse (e.g. against purchases reported twice or forged purchases), we rely on our legitimate interest (Art. 6(1)(f) GDPR). Section 21 states how long we store the purchase data.

Android – diagnostics of Google's purchase library: For purchases via Google Play, the app contains Google's “Google Play Billing Library”. As long as you do not start a purchase, the app does not connect to Google Play and the library does not transmit any data. As soon as you start a purchase in the app, the library uses the connection to Google Play and transmits technical diagnostic data to Google: the result of the connection or of the purchase process (e.g. an error code), the versions of the library, the app and Google Play, device model, manufacturer and system version, country and language of the device setting, mobile network operator, type of network connection, time zone and a random number generated anew each time the app starts; your IP address is transmitted in the process. The app does not pass on your name or e-mail address to the library; Google receives the identifier of your registration with the purchase anyway (see “Purchase and activation”). So that no paid purchase is lost (e.g. if you close the app during the purchase), after a purchase has been started the app also connects to Google Play later at startup, when you return to the app and when the internet connection returns, and queries purchases that have not been completed; this ends when you uninstall the app or choose “More → Delete data on this device” („Mehr → Daten auf diesem Gerät löschen“) – if a purchase is still open when you delete the data, only once we have processed it; if a pending payment is not made, a few days later. Google uses the diagnostic data to operate and monitor the purchase library and to fix errors; Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for this as a controller in its own right; there is no joint controllership with us. We do not receive this data. The library is technically necessary for the purchase via Google Play that you request; access to your device therefore takes place without consent under Section 25(2) no. 2 TDDDG. Transfers to the USA are possible (section 20). On iOS, the purchase is part of the operating system (StoreKit); the app does not contain any library from Apple or third parties for this.

Refund, referral reward and subsequent demand for payment: If you withdraw from a purchase in the App Store towards us, we refund the price at your request by bank transfer (GTC § 9.5 b); for Google Play, we refund via Google. If you bought in the app and meet the conditions for a reward under “Customers refer customers” (GTC § 8.7 c, Annex 3), we pay you the reward by bank transfer. For this purpose, we process the bank details you give us (account holder, IBAN) as well as the amount and the time. If we demand the amount from you after a refund by the store (GTC § 8.7 e) and you pay it, we receive the name and bank details of the paying person with the incoming payment. The payments are made via our bank (sections 13 and 20) and are entered in our bookkeeping. We do not store the bank details as a separate item in your customer account; they are only contained in your message to us (section 6) and in our accounting records. The legal basis is Art. 6(1)(b) GDPR, for bookkeeping Art. 6(1)(c) GDPR in conjunction with Section 147 AO and Section 257 HGB. Section 21 states how long we store this information.

Deleting your account in the app: You can also make the erasure request under section 3 in the app: in the customer account under “Privacy & data security” or via “More → Delete account” („Mehr → Konto löschen“). Instructions without signing in are available at https://einfach-elterngeld.de/konto-loeschen; you can also send your request by e-mail to datenschutz@einfach-elterngeld.de. We process it within one month. Section 21 states which data remains longer for legal reasons. You delete the data on your device yourself as described above.

6. Contact and support centre

E-mail, phone, contact form: We process your details (name, e-mail, phone if applicable, customer number, message, attachments) to handle your request (Art. 6(1)(b) GDPR where related to a contract, otherwise point (f)). To prevent misuse, we limit the number of messages per IP address; we only store the IP address briefly for this purpose.

Support centre: We file messages from the contact form, e-mails to our support addresses and requests from the customer area (“My requests”) as a request (ticket) in our own support system on our servers at IONOS. We store subject, sender, recipients and message texts in encrypted form; attachments are stored on our server and are not publicly accessible. Only our staff have access. Section 21 states how long we keep requests.

Phone: Our phone number +49 351 799 938 50 runs via the cloud telephone system Placetel of Gamma Placetel GmbH, Lothringer Straße 56, 50677 Cologne, Germany. On our behalf, Placetel processes your phone number if transmitted, time and duration of the call, the assignment to extensions and messages on our voicemail. According to the provider, the servers are located in Germany. We do not record calls.

Encrypted e-mails: We send outgoing e-mails via the encryption gateway “MXG” of comcrypto GmbH, Brückenstraße 4, 09111 Chemnitz, Germany. The gateway checks how secure the route to the recipient is and encrypts the transmission accordingly; this is indicated by the lock symbol in the subject line. comcrypto processes the content, attachments and addresses of the e-mails on our behalf (Art. 6(1)(f) in conjunction with Art. 32 GDPR).

Health data in messages: If you tell us, for example, your expected date of delivery on your own initiative, we only process this information to reply, on the basis of your explicit consent (Art. 9(2)(a) GDPR).

7. Customer account and sign-in

In the customer account, we store your name and e-mail address (encrypted), your password (only as a hash), language, booked services, invoice and payment status and your contract documents (order details, version of the GTC, withdrawal notice, your declarations and consents).

Two-factor sign-in: code by e-mail (valid for 10 minutes, only stored as a hash), authenticator app (key encrypted) or passkey (biometric data never leaves your device; we only store a public key). We only store recovery codes and trusted devices as hashes.

Active sign-ins: Under “Sign-in & security”, you can see where you are signed in and end other sign-ins. For this, we store for each sign-in the browser and operating system in rough form (encrypted), start, last activity and end – no IP address and no device models. If you sign in on a device that we do not yet know for your account, we send you an e-mail. We delete ended sign-ins after 30 days and known devices 12 months after the last sign-in.

Legal basis: Art. 6(1)(b) and (f), Art. 32 GDPR.

Access by staff: Staff with admin access only access data for support and order processing, always with a second factor. Every “login as customer” is logged. Only specifically authorised persons create copies of data and data exports in response to requests by e-mail or post; each operation is logged, and you receive a notification. In the customer view, staff cannot trigger a copy of data, an export or an erasure request for you.

Provisional registration in the app: If you buy the parental allowance software in our app, we store your details from the purchase form (name, e-mail address, password as a hash, language, confirmation of the GTC, consent under section 8) under a random identifier until the purchase is completed, for no more than 30 days; after that, we delete them if no purchase has been made (section 5a). In addition, we store the platform (iOS or Android) and version of the app. We pass the identifier on to Apple or Google during the purchase. After a paid purchase, the name, e-mail address, password and consent become part of your customer account; in a case requiring clarification, we clear them as soon as we have assigned the purchase or closed the case, no later than 30 days after registration. The identifier, the confirmed version of the GTC, the language, the times, the platform and the app version remain as proof until we remove the link between the purchase and your customer account (section 21). Legal basis: Art. 6(1)(b) GDPR, for the proof Art. 6(1)(f) GDPR.

8. Consent to the processing of special categories of data (Art. 9 GDPR)

Before you use the parental allowance calculator or the parental allowance software or upload documents for the consultation, we ask for your consent (Art. 9(2)(a) GDPR). The consent is:

• separate from the GTC, the order and other declarations, with its own checkbox that is not preselected;
• voluntary: we do not tie it to other purposes. Without this information, however, we cannot calculate or prepare applications, or only to a limited extent; the functions concerned are then not available;
• explicit and logged: we store the version and a checksum of the wording, language, time and channel;
• revocable at any time, in the customer area (profile) or by e-mail to datenschutz@einfach-elterngeld.de.

After a withdrawal, we immediately block the information concerned and delete your calculator and master data as well as generated application PDFs after 14 days; invoices and order documents remain because of the statutory retention obligation. If you consent again before then, the deletion is cancelled. In the free calculator without a customer account, we delete your entries immediately when you withdraw.

If we receive your consent in another way (e.g. by e-mail), our consultation team records this with name and time in your customer account.

If we change the wording of the consent, it receives a new version and we ask you again the next time you use the service.

Wording of the consent (version 2026-10-v3):

I consent to Einfach Elterngeld GmbH processing my information on pregnancy, birth, maternity protection, employment prohibition, illness, a disability of my child and church tax liability as well as information that may allow conclusions to be drawn about my family constellation (e.g. the chosen designation of the parents) in order to calculate my parental allowance, prepare applications and advise me. I declare that I have parental responsibility for my child and that I also release the information about my child (e.g. on a disability) for processing on the child's behalf. Where I provide information about the other parent (e.g. on maternity protection, illness or church tax liability), I confirm that the other parent has been informed and has consented to the processing of their special categories of personal data, or that I am entitled to provide this information. The only recipients are the host IONOS and, for a consultation, the consultants, each on behalf of Einfach Elterngeld GmbH; the information is stored until the chosen retention period expires. I can withdraw this consent at any time with effect for the future; the information is then blocked and deleted. Without this information, a calculation or the preparation of applications is not possible or only to a limited extent.

8a. Data of the other parent and of your child

The parental allowance application often also requires information on the other parent and on your child, e.g. name, date of birth, income and parental leave of the other parent, possibly also special categories such as maternity benefit, illness or church tax status of the other parent, and for the child the information in section 10. We only collect the information required by the respective application form. Please inform the other parent about this processing and this privacy policy.

The legal basis for the information about the other parent and your child (name, date of birth, income, parental leave, etc.) is performance of the contract with you (Art. 6(1)(b) GDPR) and our legitimate interest in preparing your application completely and correctly (Art. 6(1)(f) GDPR). You act for your family; we use the information only for your application.

The legal basis for special categories (Art. 9 GDPR) of the other parent and of your child (e.g. maternity pay, illness, disability, church tax) is your consent (Art. 9(2)(a) GDPR; section 8). In the wording of the consent you declare that you have parental responsibility for your child and release the information about your child also on the child's behalf, and you confirm that the other parent has been informed of the processing and has consented to the processing of their special categories of personal data, or that you are entitled to provide this information. Without this consent we do not accept such information; the calculator, the software and the upload of documents cannot then be used. You can withdraw the consent at any time with effect for the future (section 8).

9. Parental allowance calculator

The calculator calculates the expected parental allowance from your entries, e.g. income and tax class; date of birth or expected date of delivery, premature birth, multiple births; periods with maternity benefits; an illness caused by pregnancy and its period; for older siblings their date of birth, a premature birth and months of parental allowance.

Legal basis: Art. 6(1)(b) GDPR; for health information your consent (section 8).

Without a customer account: Your entries are only stored in encrypted form in your session and are deleted when it ends, at the latest 120 minutes after your last entry. We do not create a hidden guest account for this and do not use the entries for analysis or advertising. We only transfer them to a customer account if you actively choose to do so when making a purchase (in the app with a checkbox in the purchase form, section 5a); section 10 then applies.

We determine the federal state from the postal code using our own table (data source GeoNames), without third-party services.

10. Parental allowance software (application assistant)

Which data: what the official forms require.

• About you and, where applicable, the other parent (section 8a): names, dates of birth, address, contact details; marital status, nationality, residence title; sex as registered (only for the “sex” fields and the form of address in applications and cover letters); tax ID, health insurance; bank details for payment; employer, income, working hours, parental leave, other benefits.
• About your child: name, dates of birth, sex, tax ID, child benefit number, household.
• Special categories: pregnancy, expected date of delivery, premature birth, multiple births; maternity protection, maternity benefit, employment prohibition; illness caused by pregnancy, sickness benefit; disability of a child; church tax status.

Purpose: calculation and planning (including the most favourable assessment and example distributions); preparation of the application forms (parental allowance, child benefit, parental leave notification) and cover letters; storage so that you can continue working. When an application is created, we store the underlying calculation values as proof of calculation in your customer account.

Saving drafts: While you fill in a step of the parental allowance calculator, we automatically (and at the push of a button) save your entries that are not yet completed in encrypted form in your customer account, so that you can continue later. They are only applied when you complete the step with “Next”. We delete the drafts together with your other calculator data (section 21); after an application has been created, we no longer save new drafts. Staff cannot see your drafts.

Designation of the parents: You can choose how we refer to you and the other parent in the software (mother, father or neutral “parent”). The neutral designation is preset. This information is only used for display, is voluntary and is stored in encrypted form. It may allow conclusions to be drawn about your family constellation and thus about sexual orientation (special category under Art. 9 GDPR) and is therefore expressly part of your consent under section 8. It is not transmitted to AI services.

Legal basis: Art. 6(1)(b) GDPR; for special categories section 8 or 8a.

Recipients: We do not transmit any application data to authorities. Our host (processor) and authorised staff have access.

Protection: We store personal, tax, bank, income and health insurance data as well as periods of maternity benefit in encrypted form. The PDFs are not publicly accessible.

10a. Submitting the application (assistant and electronic signature)

This section only concerns you if you use the "Submit application" assistant in your customer account.

Which data: postcode and town (to determine the responsible office), where necessary district and – in Bavaria – your child's date of birth; the parental allowance office determined, the route you chose and your note "sent on". For the route with a qualified electronic signature additionally: the PDF/A file of your application created for signing, the signed file you upload and the result of our preliminary check (names of the signatories, time, issuer and type of certificate, whether the file was changed afterwards). The application files contain the data from section 10, including special categories.

Purpose: determining the responsible parental allowance office, showing the possible routes with instructions, providing the file for signing, checking the signature in advance and recording the dispatch for you.

Signature and dispatch: You sign electronically yourself with a trust service provider of your choice (e.g. sign-me by D-Trust GmbH). You send the application to the parental allowance office yourself, e.g. by e-mail to the address named by the office or via "Mein Justizpostfach". The privacy notices of the respective provider or authority apply. We do not transmit any data to signature providers or authorities. The preliminary check of the signature takes place on our server, without an external verification service.

Legal basis: Art. 6(1)(b) GDPR; for special categories section 8 or 8a.

Recipients and protection: Access is limited to our hosting provider (processor) and authorised staff; in a consultation, your adviser sees the office, route, status and result of the preliminary check. We store postcode, town, file details and the check result encrypted; the files are not publicly accessible. They are deleted together with the application data (section 21).

10b. Child supplement check and application

This section only concerns you if you use the child supplement (Kinderzuschlag) check in your customer account.

Which data: For the check we take over details from your parental allowance calculation (section 10: family, children, income, periods of parental allowance and maternity protection). In addition, the details you add or change in the check: housing costs (rent including heating), income from work and income of the other parent, maintenance or maintenance advance per child, other children in the household (age), other income, housing benefit and whether there are substantial assets (yes/no). We also store the result: whether child supplement is likely to be possible, the recommended month of application with the expected amount, and the date of the check. As soon as we offer filling in the child supplement application, the details required by the official application form will be added (e.g. housing situation, other persons in the household, income and expenses, child benefit number, bank details).

Purpose: initial assessment of whether and from which month child supplement is possible; showing the result in your overview; pre-filling when you check again; in future, filling in the application. You can delete the details at any time with "Discard details".

Reminder at your request: If the check results in a recommended month of application in the future, you can choose in your overview that we remind you once by e-mail on the 1st of that month to apply. Without your choice we do not send a reminder. We store your choice with the date and time; for sending we only store the date, no text and no amounts. You can unsubscribe at any time in your overview or via the link in the e-mail; the e-mail contains no advertising.

Legal basis: Art. 6(1)(b) GDPR (use of the software).

Recipients: We do not pass on the details, not even to the Familienkasse; you submit the application yourself. Access is limited to our hosting provider (processor) and authorised staff. In a parental allowance consultation, your adviser can technically see the details in the customer view but does not edit them; the child supplement check is not part of the consultation.

Protection and storage period: We store the details encrypted in your customer account and delete them together with your calculator data (section 21). Scheduled reminders are deleted 30 days after they were sent or no longer apply.

11. Parental allowance consultation

Booking: name, contact details, phone number, expected date of birth, package, payment data (section 13).

Upload in the customer area: for example payslips, tax assessments, employer certificates, birth certificate, copy of ID, maternity benefit or health insurance certificates, medical certificates and letters from the parental allowance office. We check the type and size of each file and store it so that it is not publicly accessible. You can also obtain employer certificates through the function “Employer completes it for you” (paragraph below).

Reading your documents: Payslips, profit statements and income tax assessments that you upload for the consultation are read automatically (text recognition) on our own server in Germany, so that we can suggest figures for your parental allowance calculation to our advisers, such as monthly gross pay, tax class or profit. The data do not leave our server; we do not use external AI or cloud services and do not use your data for training. We store the extracted figures in encrypted form together with their location in the document and delete them together with the document. No figure is used without review: your adviser checks every figure against the document before it is used in the calculation. To improve recognition we only count anonymously how often a figure was recognised – without amounts, names or any link to you.

Employer completes it for you (Top and Premium packages): In the “Parental allowance application” checklist you can generate a personal link for your employer. Through it, your employer enters the details of the official form “Arbeitgeberbescheinigung” (employer certificate) for the parental allowance office (e.g. employment, parental leave, employer top-up to maternity pay, civil-service pay, weekly hours with expected income), checks them in a preview and signs on screen or – alternatively – on a printed and hand-signed form. We complete the form with them and place it in the matching rows of your documents. You forward the link yourself, or we send an invitation to the contact person you name – only when you press the button; it is sent on your behalf and replies go to your e-mail address. If you enter an address for the contact person, we send your employer a six-digit code for confirmation. Data processed: from you the details the form provides at the top (your name, date of birth and address, and your child’s name and date of birth), the name of the employer and optionally the name and e-mail address of a contact person; from the employer the details of the form (periods, amounts, weekly hours, details of the employer), name, role and place of the signing person and the signature image. We show you the details about you and your child before sending; you confirm that your employer sees them on the form. Your employer sees no other data about you. We store the details encrypted and no IP addresses; the dialog sets only a technically necessary session cookie and loads nothing from third parties. The link is valid for 14 days; you can withdraw a request at any time, after which the link is invalid immediately. We delete the employer’s details, the details about you and your child for the form, the signature image and the contact person’s details 90 days after signing; the completed form remains in your advisory file like your other documents (section 21). Recipients: our advisers and our hosting provider (section 4); no disclosure to third parties. The privacy notice for employers is available in the dialog.

Session: by phone or Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. We use a business Microsoft 365 subscription; Microsoft's data protection addendum (Art. 28 GDPR) therefore applies. Microsoft processes connection and metadata; transfers to the USA are possible (section 20). Sessions are not recorded.

Notes and applications: We prepare a summary of the session and, for Top/Premium, your applications. We store both in your customer area.

Activation of the software (Basic package): If you activate the parental allowance software after the session, we transfer your calculation from the consultation; section 10 applies to further use.

Who has access: our consultants. Some of them work freelance; we have contractually bound these persons as processors (Art. 28 GDPR).

Legal basis: Art. 6(1)(b) GDPR; for special categories section 8 or 8a; for the invitation and the dialog with the contact person at the employer Art. 6(1)(f) GDPR (obtaining the certificate you requested).

12. Appointment portal (termin.einfach-elterngeld.de)

Sign-in: with the e-mail address of the customer account. The portal only reads the customer number, e-mail address and consultation status.

Processed: answers in the questionnaire, e.g. income range, types of income, pregnancy and expected date of delivery (with consent under section 8); appointment, language; e-mails to reserve and confirm appointments. The answers are also sent to our mailbox for review.

Storage of notes at pCloud: We store session notes (PDF) with pCloud International AG, Zugerstrasse 74, 6340 Baar, Switzerland, in the Europe data region. This is based on a data processing agreement (Art. 28 GDPR). An adequacy decision of the EU Commission exists for Switzerland. We keep the notes for at least 3 years after the consultation has been completed and delete them after that following a review.

Storage period in the portal: personal data 92 days after the appointment; sign-in attempts and IP address in the log 30 days; expired sessions 7 days.

13. Payment processing

Depending on the payment method, we pass on name, e-mail, amount and order number to the payment service. You enter card and account details directly there. The services are controllers in their own right and may carry out their own fraud and credit checks.

• Stripe (credit card, SEPA direct debit, Klarna): Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. We only load the Stripe script on payment pages.
• Klarna (via Stripe): Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.
• PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
• Invoice (consultation only): we process invoice data and receipt of payment ourselves or via our bank.
• In-app purchase (only in our app, parental allowance software): in the App Store, Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland; on Google Play, Google Commerce Limited, 70 Sir John Rogerson’s Quay, Dublin 2, D02 R296, Ireland. We do not pass on your name or e-mail address to Apple or Google in this case; details in section 5a. If we refund the price of a purchase in the App Store by bank transfer after your withdrawal, if we pay you a referral reward or if you subsequently pay us the amount after a refund by the store, the payment is made via our bank; for this purpose, we process your bank details (section 5a).

Legal bases: Art. 6(1)(b) GDPR; retention under Art. 6(1)(c) GDPR in conjunction with Section 147 AO (German Fiscal Code) and Section 257 HGB (German Commercial Code). We transmit invoice data to our tax accountants for bookkeeping.

Origin of your order: If you reach our website via one of our advertising or newsletter links, the link contains a campaign identifier (e.g. source, campaign and search term of the ad). We keep this identifier in your session for the duration of your visit (section 5, laravel_session) and store it with your order if you place one. In addition, we keep in your session for the duration of your visit the page of our website through which you entered (entry page) and the origin group you came from (e.g. “Google”), and store both with your order; this also applies if your link does not contain a campaign identifier. This shows us which advertising leads to orders and whether it pays off. We only evaluate this in aggregated form and do not pass the identifier on to advertising providers or other third parties. We do not store an advertising provider's click identifier. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in checking the cost-effectiveness of our advertising). You may object at any time (section 3); we will then delete the identifier from your order. Retention as for order details (section 21).

14. System e-mails

We send order confirmations with contract documents and invoices; sign-in codes, password links and security notifications (e.g. sign-in on a new device); appointment confirmations; acknowledgements of receipt for withdrawals; information on the retention of your application data (notice 30 days before deletion); at your request, the reminder of the child supplement application month (section 10b, can be unsubscribed). The legal basis is Art. 6(1)(b) or (f) GDPR. E-mails are sent via our mail server at IONOS. We do not send advertising e-mails.

15. Parental allowance course (Udemy)

Our course is only available on Udemy. If you follow the link or buy there, Udemy processes your data under its own responsibility in accordance with its privacy policy. As a course provider, according to Udemy we see the names and profile information of participants, not their e-mail addresses, as well as statistics, e.g. on countries and languages. We show software customers a Udemy voucher link in the customer area; we do not transmit any data to Udemy in doing so.

16. External media – only with your consent

We only load this content once you allow “External media” in the cookie notice or agree at the preview image (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw at any time via “Cookie settings”.

• YouTube videos (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) via youtube-nocookie.com. After the start, Google receives your IP address, among other things, and may set cookies.
• Google reviews: official Google Maps element with our reviews. Google receives the IP address and device data.

Transfers to the USA are possible (section 20). Our own explanatory videos are stored on our server and do not load third-party content. We do not load any external media in the app window of our app or in browser windows that the app opens for our website; you can reach YouTube videos and our reviews on Google there via a link (section 5a).

17. Reviews on our website

ProvenExpert: our own seal image with a link. No data is transmitted to ProvenExpert when a page is loaded. Our server retrieves the overall rating without your data.

Individual customer reviews: We only show individual review texts if the reviewer has expressly agreed to their use. They are then shown with first name and initial of the surname, the source and the date. The legal basis is the consent (Art. 6(1)(a) GDPR). We do not copy review texts from Google without such authorisation.

18. Partner Steuertipps

If you come via a link from our partner Steuertipps and have allowed “Partner referral” in the cookie notice, we remember this referral for 30 days in the cookie referrer. This serves to display the partner logo (co-branding) and to attribute any commission. If you buy during this period, we record the referral in your customer account. Without consent, we do not set the cookie; the website works normally. We do not set it in the app window of our app or in browser windows that the app opens for our website (section 5a). We do not pass on personal data to the partner. Legal basis: consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).

19. Social media

We operate profiles on Instagram and YouTube. Our website does not embed these services; the icons at the bottom of the page are simple links.

Instagram: For the statistics on visits to our profile (Page Insights), we are joint controllers with Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (Art. 26 GDPR). Meta has undertaken to fulfil the information obligations and to handle data subject rights (https://www.facebook.com/legal/terms/page_controller_addendum). You can also exercise your rights against us. Meta is solely responsible for all other processing (https://privacycenter.instagram.com/policy).

YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for processing on youtube.com (https://policies.google.com/privacy). We only receive aggregated statistics on the use of our channel from YouTube, without reference to individuals.

Transfers to the USA are possible for both services (section 20).

19a. Partner offers (partner.einfach-elterngeld.de)

On partner.einfach-elterngeld.de, cooperation partners present their offers. These are advertisements; we sometimes receive a commission for referrals. References to these offers on our website, in the customer area and in order confirmations lead via a redirect on our website (einfach-elterngeld.de/weiter/…). We only count how often which offer was opened from which place, per day, without IP address and without any information about you. The link to the partner portal contains an identifier of this place (e.g. “ratgeber-kindergeld”) so that the partner portal can evaluate where its visits come from in aggregated form. The partner portal does not set cookies for visitors; it counts page views and clicks on “To the offer” without IP address. The privacy notice of the partner portal applies in addition: https://partner.einfach-elterngeld.de/datenschutz

19b. Notices about our app and about Einfach Wohngeld

On our website, in the customer area and in order confirmations we point to our own offers of Einfach Elterngeld GmbH: our app “Einfach Elterngeld” and Einfach Wohngeld (einfach-wohngeld.de). These links lead via a redirect on our website (einfach-elterngeld.de/weiter/eigen/…). We only count how often which destination was opened from which place, per day, without IP address and without any information about you. For the app, the redirect uses your browser’s device identifier (user agent) to choose the App Store or Google Play; the link contains an identifier of the place (e.g. “leiste”) so that Apple or Google can show us in aggregated form how many visits and downloads came from our website. What Apple and Google process when you open their store is their own responsibility (section 5a). The link to einfach-wohngeld.de also contains an identifier of the place; the privacy notice of Einfach Wohngeld applies there: https://einfach-wohngeld.de/datenschutz. You can close the notice about the app at the top of the page; the cookie ee_app_hinweis remembers this (section 5). The legal basis for counting is our legitimate interest in evaluating our notices (Art. 6(1)(f) GDPR).

20. Recipients and transfers to third countries

Service	Purpose	Role	Location / third country
IONOS SE	hosting, database, e-mail, encrypted backup copy	processor	Germany
Hetzner Online GmbH	encrypted backup copy	processor	EU
comcrypto GmbH, Chemnitz	encryption of outgoing e-mails	processor	Germany
Gamma Placetel GmbH, Cologne	telephone system, voicemail	processor	Germany
freelance consultants	parental allowance consultation	processor	Germany
Microsoft Ireland Operations Ltd.	video consultation (Teams)	processor (Microsoft DPA)	Ireland / USA possible
pCloud International AG	storage of consultation notes	processor	Switzerland, Europe data region
Stripe, Klarna, PayPal	payment	controllers in their own right	Ireland, Sweden, Luxembourg / USA possible
Google Ireland Limited	YouTube, Google reviews (after consent)	controller in its own right	Ireland / USA possible
Meta Platforms Ireland Ltd.	Instagram Page Insights	joint controller	Ireland / USA possible
Udemy, Inc.	course	controller in its own right	USA
ProvenExpert	review profile (link and server retrieval only)	controller in its own right	Germany
tax accountants, bank	bookkeeping, receipt of payment, payouts (e.g. refund or reward by bank transfer)	controllers in their own right	Germany
Apple Distribution International Ltd.	App Store, app download, in-app purchase	controller in its own right	Ireland / USA possible
Google Ireland Limited	provision of Google Play, app download	controller in its own right	Ireland / USA possible
Google Commerce Limited	in-app purchase via Google Play	controller in its own right	Ireland / USA possible
Google Ireland Limited (Google Play Billing Library, Android only, only after a purchase has been started)	technical diagnostic data of the purchase library	controller in its own right	Ireland / USA possible

Third countries: We store your data in the EU. Microsoft, Google, Stripe, PayPal, Meta and Apple may transfer data to the USA. This is based on the adequacy decision on the EU-US Data Privacy Framework (10 July 2023) for certified companies, otherwise on standard contractual clauses (Art. 46 GDPR). An adequacy decision exists for Switzerland. You only reach Udemy if you go to udemy.com yourself; we do not transmit any data to Udemy.

21. Storage period

We only store data for as long as necessary for the respective purpose. We delete health and application data earlier than contract and invoice data. For possible legal claims, we do not keep any application content, only the specific evidence required, separately and with restricted access.

Data	Deletion
Entries in the free calculator without a customer account	only in your session (encrypted); deleted when the session ends, at the latest 120 minutes after the last entry, or immediately when consent is withdrawn
Software: application data, drafts, proof of calculation, generated applications, submission data (section 10a), completed support requests	according to your choice in the customer account: immediately or 6, 12 (default), 24 or 36 months after the applications have been created, changeable at any time. We announce the deletion by e-mail 30 days in advance; the period is not extended without action on your part. For applications created before 10 October 2026, the period starts on that date. As proof of the licence used, a note without application content remains (type, date).
Software: paid licence not yet used	no deletion as long as the licence has not been used (unlimited right of use, GTC § 5.3); at your request we delete the account earlier
Consultation: uploads, notes, draft applications, submission data (section 10a), support requests	at least 3 years after the consultation has been completed, then after a review (open requests only after they have been closed)
Employer link “Employer completes it for you” (request, name of the employer, details about parent and child for the top of the form)	link valid for 14 days; the request belongs to the advisory file (row “Consultation”); details of the contact person see next row
Employer’s details in the dialog, signature image, name/role/place of the signing person, contact person (name, e-mail)	90 days after signing; unsigned drafts exist only in the employer’s browser; the completed form remains in the advisory file
Requests without a contract (e-mail, contact form, support centre without customer account)	12 months after the request has been closed
Contract and evidence data without application content and uploads (order details, contract documents, your declarations, withdrawal records without IP address, records of consent after the consent has ended)	3 years from the end of the year in which the contract or the consent ended (regular limitation period), with restricted access; insofar as they are commercial or business letters, 6 years (Section 257 HGB)
Invoices and accounting records	8 years from the end of the year (Section 147 AO, Section 257 HGB)
Data of the app on your device (roadmap, reminders, completed steps, document folder, settings, downloads in the cache)	only on your device; until you delete it in the app or uninstall the app; a note on a purchase that has not yet been completed, until we have processed the purchase (section 5a)
Provisional registration in the app (section 5a), as long as no purchase has been made	deleted completely no later than 30 days after registration; with the purchase, the name, e-mail address, password and consent become part of the customer account
Name, e-mail address, password and record of consent from the provisional registration in the case of a paid purchase that we cannot automatically assign to a customer account (case requiring clarification)	cleared as soon as we have assigned the purchase or closed the case, no later than 30 days after registration
Proof of the confirmed version of the GTC for a purchase in the app (with the identifier, language of the confirmed GTC, platform, app version and times)	3 years from the end of the year of purchase, together with the link to your customer account
Purchase data from Apple or Google (in-app purchase) linked to your customer account	3 years from the end of the year of purchase; after that, we remove the link to your customer account
Log of the notifications from Apple or Google and of our processing relating to a purchase (without names and e-mail addresses)	deleted together with the link between the purchase and your customer account (3 years from the end of the year of purchase); notifications not assigned to a purchase 3 years from the end of the year of receipt
Information on purchases via Apple or Google required for tax purposes, without a link to your customer account (transaction number, time, product, price, status)	10 years from the end of the year of purchase (Section 147 AO, Section 257 HGB); if the purchase has been credited against an invoice (booking a consultation, GTC § 6.9 b), it remains linked to that invoice and can therefore be attributed to you for as long as we store it; it is only deleted once these 10 years have expired and, in addition, the invoice and the documents relating to that invoice (e.g. a cancellation invoice or correction invoice) no longer have to be kept (8 years from the end of the year of the most recent of these documents)
Monthly statement “App Store sales” („App-Store-Verkäufe“) for bookkeeping (for each purchase: purchase no., transaction number, time, platform, product, price, status; without names, e-mail addresses and customer numbers)	10 years from the end of the year in which we created it (Section 147 AO, Section 257 HGB)
Bank details for a refund, referral reward or subsequent demand for payment for a purchase in the app (section 5a)	in your message to us, like your other requests; in our accounting records 8 years from the end of the year (Section 147 AO, Section 257 HGB)
Log of your data protection requests (without content)	3 years from the end of the year; open erasure requests until they are completed
Active sign-ins / known devices	30 days after the end of the sign-in / 12 months after the last sign-in
Appointment portal	92 days after the appointment
Server logs	7 days
Application logs	30 days
Sign-in security log	12 months
Backups	7 days, technically locked protective copies for no more than 7 further days; repeated deletion run after every restoration

After you withdraw your consent under section 8, we immediately block the information and delete your calculator and master data as well as the application PDFs after 14 days, unless there is a retention obligation. At your request, we delete your account earlier.

22. Obligation to provide data, no automated decisions

Without the information required for a contract, we cannot provide the service. We do not make automated decisions within the meaning of Art. 22 GDPR. The software only calculates; the authority decides on your application. Figures extracted from your documents are also always checked by a person before they are used.

23. Changes

We adapt this privacy policy when the processing or the legal situation changes. The version published here applies; earlier versions: einfach-elterngeld.de/en/legal-archive

In case of doubt, the German version of this privacy policy applies.