At Linra, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, and protect your information in compliance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
1. Data Controller
The data controller for the processing of your personal data is:
Sebastian Wißmüller
Hauptstraße 3
91741 Theilenhofen
Email: [email protected]
2. Data We Collect
We collect the following types of personal data:
2.1 Account and User Information
- Account Information: Name, email address, and password.
- Contact Details: Phone numbers and other contact information you provide voluntarily.
- Payment Information: Billing address and payment details (processed by third-party providers).
2.2 Device and Technical Information
- Device Information: Device type, model, operating system, browser type and version.
- Network Information: IP address (masked for privacy), ISP, connection type.
- Browser Capabilities: Supported features, language preferences, timezone settings.
- Device Fingerprinting: A unique identifier for security and analytics purposes.
2.3 Location Information
- Approximate Location: Country, region, city derived from IP address.
- Timezone Data: To provide appropriate service hours.
2.4 Conversation and Usage Analytics
- Chat Interactions: Messages, response times, conversation duration.
- User Behavior: Buying journey stage, communication preferences.
- Performance Metrics: System response times, error rates, feature usage.
- Session Data: Visit frequency, returning user identification.
3. Purpose of Data Processing
We process your data for specific purposes with appropriate legal basis under GDPR Article 6:
3.1 Service Provision
Legal Basis: Contractual necessity (GDPR Art. 6(1)(b))
3.2 Payment Processing
Legal Basis: Contractual necessity + Legitimate interests for fraud prevention
3.3 Security
Legal Basis: Legitimate interests (GDPR Art. 6(1)(f))
3.4 Analytics
Legal Basis: Legitimate interests (GDPR Art. 6(1)(f))
3.5 Marketing
Legal Basis: Consent (GDPR Art. 6(1)(a)), withdrawable at any time
4. Data Sharing
We may share your data with:
- Service Providers: Payment processors, hosting providers, analytics services.
- Legal Authorities: When required by law or to protect our rights.
5. Data Retention
- Account Data: Until account deletion + 30 days
- Conversation Data: 3 years or until account deletion
- Analytics Data: 2 years in anonymized form
- Device Fingerprints: 1 year
- Payment Data: 7 years for legal compliance
- Marketing Consent: Until withdrawn
6. Your Rights Under GDPR
- Right of Access: Request a copy of your personal data.
- Right to Rectification: Request correction of inaccurate data.
- Right to Erasure: Request deletion of your data.
- Right to Restrict Processing: Request limitation of processing.
- Right to Data Portability: Receive data in a machine-readable format.
- Right to Object: Object to processing based on legitimate interests.
- Right to Withdraw Consent: Withdraw consent at any time.
How to Exercise Your Rights
Contact us at [email protected]. We will respond within 30 days.
7. Security Measures
We implement technical and organizational measures to protect your data, including encryption, access controls, and regular security audits.
9. Contact Us
Questions? Contact us at [email protected].