Skip to main content
erleben.app
de
Legal

Privacy policy

This privacy policy applies to the website erleben.app, including its information pages, the sample editor, the contact form and the booking system, as well as the information pages muehlen.app and erinnern.app and the Mühlen.app app on the App Store and Google Play. For the experience apps operated by our customers (for example, under their own subdomain or domain), the privacy policy of the respective operator, which is stored within the app, applies. The section ‘Our customers’ experience apps’ describes what happens there from a technical perspective.

Date: September 2026

Data controller

Seeger & Krämer GbR (brand: erleben.app)
Desteler Str. 43, 32351 Stemwede
Telephone: +49 5745 910 9000
Email: info@erleben.app

Authorised partners: Tobias Seeger, Tim Krämer. No data protection officer is to be appointed; please direct any enquiries regarding data protection to the address provided.

Hosting and server log files

The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in data centres in Germany. A contract for data processing has been entered into with Hetzner in accordance with Article 28 of the GDPR.

When you access the website, the server automatically processes connection data: IP address, date and time, URL accessed, amount of data transferred, the previously visited page (referrer), as well as browser and operating system.

  • Purpose: Delivery of web pages, security, detection and prevention of attacks, error analysis
  • Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in secure and stable operation)
  • Retention period: Log files are deleted after 90 days, unless they are required for a longer period to investigate a security incident.

Cookies and local storage

This website uses only technically necessary cookies and storage entries. These are required for the functionality you have requested and therefore do not require your consent (Section 25(2)(2) of the German Telemedia Act (TDDDG)). We do not set any advertising, tracking or analytics cookies; a cookie banner is therefore not required.

  • NEXT_LOCALE (cookie, 30 days): remembers the language you have selected.
  • settings (cookie, valid for erleben.app and all subdomains): your display settings, such as font size, so that they also apply in the Erlebnis apps.
  • __qr (cookie, 2 minutes): when accessed via a QR code, this cookie carries the code’s identifier across a redirect so that access statistics can track the entry path. The cookie is deleted immediately after being read.
  • erleben-tour-entwurf (local storage): the draft you create in the example editor (location, text, selected modules, a random identifier), so that you can continue where you left off on your next visit. You can delete it by clearing your browser’s website data. The ‘Example Editor’ section explains when a copy is sent to us.
  • progress (local storage, only in experience apps): which chapters you have already read.

Access statistics (Umami)

To measure reach, we use Umami, an open-source software programme that we run ourselves on our servers in Germany. Umami does not set any cookies and does not store any identifiers in your browser. Your IP address is not stored; to distinguish between visits, Umami generates a hash value that cannot be reversed. This hash changes at the start of each month, after which previous visits can no longer be traced.

The data collected includes pages viewed, time spent on the site, the referring website, browser, operating system, device type, screen size, language settings, and the country and region in which you are located. In addition, we track the entry point (e.g. search engine, referral, QR code, advert) and the time spent on each page. On the website erleben.app, we also track how it is used: links and buttons clicked, questions expanded, settings in the price calculator, how far a page has been scrolled, and whether a contact enquiry or appointment booking has been completed. The contents of form fields are not recorded. No merging with other data or profiling takes place.

  • Purpose: To understand which content is used and to improve the website
  • Legal basis: Article 6(1)(f) of the GDPR
  • Retention period: 24 months, after which the data is deleted or aggregated into anonymous monthly figures
  • Recipients: none; the analysis remains on our servers

Error monitoring (Sentry)

To detect technical errors, we use Sentry from Functional Software, Inc., 45 Fremont Street, San Francisco, CA 94105, USA. If an error occurs in the browser or on the server, the error message, time, page accessed, browser, operating system and device type are transmitted, but no IP address. In the event of a browser error, the session history may also be transmitted as a recording (session replay), including the content visible at the time. Anything typed into input fields is masked in the recording. Such a recording only begins once an error has occurred.

  • Purpose: To identify and rectify errors; to ensure the stability of the website
  • Legal basis: Article 6(1)(f) of the GDPR
  • Storage location and contract: The data is stored in Sentry's EU region. We have concluded a data processing agreement with Functional Software, Inc. in accordance with Art. 28 GDPR.
  • Transfer to third countries: As the provider is based in the USA, access from the USA cannot be ruled out. Functional Software, Inc. is certified under the EU-U.S. Data Privacy Framework, and the EU Commission's standard contractual clauses apply in addition.
  • Retention period: 90 days

Advertising performance measurement (OpenAI Ads)

We place adverts in ChatGPT. To determine whether an advert has led to a contact enquiry, we use the Conversions API provided by OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland.

If you click on one of our adverts in ChatGPT, OpenAI appends a click identifier to our website’s URL. We only store this identifier in your browser’s cache whilst the page is open; we do not load any scripts from OpenAI, nor do we store any cookies or other entries on your device. If you submit the contact form or book an appointment during this session, our server reports the event ‘contact enquiry’ or ‘appointment booking’ to OpenAI, together with the click identifier, the time and the page address. Your name, email address, the content of your message, IP address and browser details are not transmitted in this process.

  • Purpose: Measuring the effectiveness of our adverts
  • Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in measuring the effectiveness of our adverts)
  • Transfer to third countries: OpenAI may process data in the USA. This is based on the Standard Contractual Clauses of the European Commission (Art. 46(2)(c) GDPR). Further details can be found in the OpenAI Privacy Policy.
  • Objection: at any time by emailing info@erleben.app (Article 21 GDPR)
  • Retention period: none on our part; the retention period at OpenAI is governed by their privacy policy

Contact form, email and telephone

If you contact us via the contact form, we will process your name, your email address, your message and, if provided, your organisation. The message is sent as an email to our inbox at info@erleben.app. The same applies if you contact us directly by email or telephone.

  • Purpose: To process your enquiry and any follow-up questions
  • Legal basis: Article 6(1)(b) of the GDPR, where this relates to the initiation or performance of a contract; otherwise, Article 6(1)(f) of the GDPR (legitimate interest in responding to enquiries)
  • Retention period: until your enquiry has been fully processed; if a contract is concluded, the retention periods under commercial and tax law of up to ten years apply
  • Recipients: our email inbox is hosted by Hetzner Online GmbH in Germany

Example Editor

On the Editor page, you can create your first experience location without logging in. Your entries are initially stored in your browser. When you click on ‘Add modules’ in the third step, your browser sends the draft to our server, and we receive it as an email in our inbox. This includes the selected template, the location name and coordinates, the names and texts of your experience locations, the selected modules, and a random identifier for the draft, which we use to merge multiple submissions from the same browser. In addition, we collect your browser’s connection details, namely your IP address, browser and operating system, language settings, time zone, screen size, the page you visited and the referring page, as well as – if you arrived via an advert in ChatGPT – the click ID for that advert. We review these drafts to understand how the editor is being used and to contact you if the draft indicates the organisation for which you created it. This does not result in the creation of an account, and you do not need to provide any contact details.

  • Purpose: To understand how the editor is being used; To prepare for a potential project discussion
  • Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in the demand for our product and in its improvement)
  • Retention period: twelve months, after which the data is deleted unless a project has been initiated
  • Recipients: our email inbox; see the section ‘Contact form, email and telephone’
  • Objection: at any time by emailing info@erleben.app (Art. 21 GDPR)

Appointment booking (Cal.com)

A booking calendar is embedded on the Contact and Support pages. It runs on our own server at cal.scortex.de (Hetzner Online GmbH, Germany) using the open-source software Cal.com; when you access these pages, your browser establishes a connection to this server, which results in the data mentioned under ‘Server log files’ being generated. When you make a booking, we process your name, email address, the selected appointment and any optional details you provide. You will receive a confirmation email containing the link to the video conference. If you find us via an advert in ChatGPT and book an appointment during the same session, we pass the advert’s click ID to the booking calendar and report the booking to OpenAI as described under ‘Advertising performance measurement’, without including your name, email address or appointment details.

  • Purpose: Arranging and conducting the consultation
  • Legal basis: Article 6(1)(b) of the GDPR
  • Retention period: up to twelve months after the appointment, after which the data is deleted unless a business relationship has been established

Maps and location search (OpenStreetMap)

The example editor on the Editor page and the map preview on the home page display maps from the OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom). When the map tiles are loaded, your browser transmits your IP address and the selected map section to the OpenStreetMap Foundation’s servers. If you search for a place name in the example editor, this search term is sent, together with your IP address, to the OpenStreetMap Foundation’s Nominatim service; Your draft itself is not sent to OpenStreetMap.

  • Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in a functioning map display without a commercial map provider)
  • Third country: An adequacy decision has been issued by the European Commission for the United Kingdom.
  • For further details, see the OpenStreetMap Foundation’s Privacy Policy.

Embedded content from client projects

The module library and the example editor display sections from our clients’ published experience apps, exactly as they appear there. Images, audio clips, 3D models and panoramas are loaded from our own servers in Germany; no content from external platforms such as YouTube or Vimeo is embedded. Fonts are embedded locally; Google Fonts or similar services are not loaded.

Mühlen.app on the App Store and Google Play

We provide the Mühlen.app app for Android and iOS ourselves. It shows the experience app at muehlen.app and its subdomains. This privacy policy applies to the app. For the content of the individual operators, such as the Mühlenverein im Kreis Minden-Lübbecke e.V., their own privacy policy, available in the app, applies as well.

  • Download: When you download the app, Apple (App Store) or Google (Google Play) process your data under their own privacy policies. We only receive aggregated figures from them, such as downloads and crashes, and no information about individuals.
  • Android: The app opens the pages in your browser, usually Chrome (Trusted Web Activity). Its settings apply, and data such as your progress in a tour is stored in the browser.
  • iOS: The app shows the pages in a built-in browser view (WebKit). Data such as your progress is stored in the app and deleted with it.
  • App identifier: When loading pages, the app indicates that it is running as an app (the addition “MuehlenApp” in the browser identifier or the referrer “android-app://app.muehlen”). We use this to hide the installation hint and to count visits from the app separately in our statistics.
  • Location: only if you allow it in the operating system prompt. It is used on your device to show your position on the map and the distance to places, and it is not transmitted to us. You can withdraw access at any time in your device settings.
  • Camera: only for the photo booth, and only when you open it and allow access. Photos stay on your device until you save or share them yourself.
  • No ads, no account: The app shows no ads, does not track you across apps or websites of other companies and needs no sign-in. It does not send notifications at present.

Visitor statistics (Umami), error monitoring (Sentry) and server log files work in the app as described above.

  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a working app); access to location and camera only with your consent via the operating system prompt (Section 25(1) TDDDG, Art. 6(1)(a) GDPR)

Our customers’ experience apps

If, as an organisation, you operate an experience app on our platform, you are responsible for processing your guests’ data; we act as a data processor on the basis of a contract in accordance with Article 28 of the GDPR. Depending on the configuration, the following services are used:

  • Hetzner Online GmbH (Germany): Hosting of the app, media and statistics
  • Umami on our servers: Access statistics per project, without cookies
  • Sentry (Functional Software, Inc., USA): error monitoring as described above, without IP address
  • OpenStreetMap: Maps in the guest app
  • fal.ai, DeepL and Auphonic: only if you use AI-powered image, translation or audio functions in the editor; in this case, the content you enter – not your guests’ data – is transferred to these providers

The specific processing activities within your app are governed by the project-specific privacy policy, which you maintain in the editor.

Your rights

You have the right to request information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing on the basis of Art. 6(1)(f) GDPR (Art. 21). You may withdraw any consent you have given at any time with effect for the future. To do so, please contact info@erleben.app.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is the
State Commissioner for Data Protection and Freedom of Information in North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf
https://www.ldi.nrw.de

Changes

We will update this policy if the legal situation or our data processing practices change. The version published here at any given time shall apply.