Privacy Policy

1. Data Controller

SCANNA (myscanna.com), Tobias Schmidt, [Address], kontakt@myscanna.com

2. Data Collected & Purpose

• Email address — For price alerts (Legal basis: Art. 6(1)(b) GDPR)
• Server logs — IP address, browser UA, timestamp (Art. 6(1)(f) GDPR, legitimate interest in security)
• Supabase Auth — Magic-link token (temporary, no password stored)
• Push subscriptions — Endpoint & keys for Web Push (only with explicit consent, Art. 6(1)(a) GDPR)

3. Third Parties & Processors

• Supabase Inc. (USA) — Database & authentication. DPA and SCCs per Art. 46 GDPR in place.
• Resend Inc. (USA) — Transactional emails. DPA in place.
• Vercel Inc. (USA) — Hosting. SCCs per Art. 46 GDPR.

4. Cookies & Storage

We use only technically necessary cookies (session token for Supabase Auth, age-gate cookie). No tracking or advertising cookies are used. Consent under § 25 TTDSG is therefore not required for operation.

5. Your Rights (Art. 15–22 GDPR)

• Access to stored data (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure of your data ("right to be forgotten", Art. 17)
• Restriction of processing (Art. 18)
• Objection to processing (Art. 21)
• Data portability (Art. 20)

Please send requests by email to: datenschutz@myscanna.com

6. Complaints

You have the right to lodge a complaint with a data protection supervisory authority. Competent authority for Germany: Federal Commissioner for Data Protection (BfDI).

7. Protection of Minors

This website is intended exclusively for persons aged 18 and over. An age-verification prompt is shown on access. Data of minors is not knowingly processed.