This English version is provided for convenience. In case of doubt, the German version is legally binding.
1. Controller and contact
Controller within the meaning of the General Data Protection Regulation (GDPR):
Harald Maier
c/o MDC#2100
Welserstraße 3
87463 Dietmannsried
Germany
Email: [email protected]
2. General information on data processing
We process personal data only to the extent necessary to provide this website, its content and our services, or where another legal basis applies. The legal bases derive in particular from Art. 6 (1) GDPR and are stated for each processing activity.
3. Hosting and server log files
This website is served via Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the website, Cloudflare processes technically necessary data, in particular your IP address, the date and time of access, the page requested, the referrer, and information about your browser and operating system. This serves to deliver the website and to keep it secure and stable, for example by fending off attacks.
The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in providing the website securely and reliably. With Cloudflare, there is ein Auftragsverarbeitungsvertrag. Data may be transferred to the USA; Cloudflare is certified under the EU-U.S. Data Privacy Framework . More information: Cloudflare privacy policy.
4. Data processing on this website
This website is a static information site. It sets no cookies of its own, contains no contact forms, uses no user accounts and stores no data in your browser. Fonts, images and scripts are loaded exclusively from this domain; no third-party content is embedded.
5. Contacting us by email
If you contact us by email, we process the data you send us (e.g. email address, name, content of your message) in order to answer your inquiry. The legal basis is Art. 6 (1) (b) GDPR where the inquiry relates to a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering inquiries). To receive email we use the Titan Email service of Titan Solution Ltd SEZC, Willow House, Cricket Square, Grand Cayman, KY1-1001, Cayman Islands, which we obtain through our domain provider DD24. Titan stores emails with Amazon Web Services, Inc. (USA). Data may therefore be transferred to countries outside the EU (Cayman Islands, USA); this transfer is based on EU-Standardvertragsklauseln (Art. 46 Abs. 2 lit. c DSGVO). More information: Titan privacy policy.
6. External services and links
Apart from hosting (section 3), this website uses no external services. Links to the App Store or other websites are only loaded when you click them; from then on, the privacy policy of the respective provider applies – for the App Store, that of Apple Inc.
7. Analytics and tracking
There is no tracking on this website. No analytics tools, advertising pixels or social media plugins are used, so no cookie banner is needed. Should this change, this policy will be updated beforehand.
8. Data processing in the PureCards app
The PureCards app is used to store and display QR codes, barcodes and cards (e.g. card name, code content, code type and card image). To add a card, you can use the camera or an existing photo; iOS asks for your permission first.
- Where codes and cards are stored
- Locally on your iPhone. Your cards are stored only within the app on your device – not on servers and not in iCloud.
- Syncing / Apple Watch
- Only between your iPhone and your paired Apple Watch. The app transfers your cards directly over Apple’s connection between iPhone and Watch (WatchConnectivity) – without our own servers and without any cloud. Name, code and a small preview image are sent to the Watch; photos of your cards stay on your iPhone.
- Camera and photos
- The camera is used only when you scan a code or take a photo of your card. A card photo is stored only within the app on your iPhone, not in your photo library. If you pick a picture from your library, the app receives only that one picture; with “Code from Photo” it is analyzed on your device and not stored.
- Sharing with third parties
- No. The app does not send any data to external services or to us.
- Analytics and tracking
- No. PureCards contains no analytics, tracking or advertising services.
- User account
- No. PureCards works without a user account and without signing in.
The privacy details in the App Store (“App Privacy”) must match this section.
9. Your rights
Within the limits of the law, you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as the right to object (Art. 21) to processing based on Art. 6 (1) (f) GDPR on grounds relating to your particular situation. You may withdraw any consent you have given at any time with effect for the future (Art. 7 (3)).
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the state where you live or where we are based. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.
10. Retention period
We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. We delete email inquiries once they have been fully dealt with and no retention obligations apply. Connection data (e.g. IP addresses) is processed as part of providing the CDN service.
11. Updates to this privacy policy
Last updated: 7. November 2026. We update this policy whenever the website, the app or the legal requirements change.