Privacy Policy

The data controller within the meaning of the General Data Protection Regulation (GDPR) is: Nils Plaha Hardbergstraße 77 69518 Abtsteinach Germany Email: info@shloce.com

We collect and process the following personal data: • Name and email address (upon registration) • Profile picture (when signing in via Google OAuth) • Payment data (processed via Stripe, not stored on our servers) • Usage data (IP address, browser type, access times) • Booking data (booked ad spaces, time periods, uploaded content)

We process your data for the following purposes: • Contract fulfillment: Processing bookings of digital ad spaces • Platform operation: Providing and improving our services • Communication: Notifications about booking status and approvals • Security: Protection against misuse and fraud

Your data is processed based on: • Art. 6(1)(b) GDPR – Contract performance (bookings, account management) • Art. 6(1)(f) GDPR – Legitimate interests (platform security, fraud prevention)

Your data is stored as long as your account is active. After account deletion, your data will be deleted within 30 days, unless legal retention obligations apply. Booking data is subject to commercial and tax law retention requirements and will be retained for 10 years (§ 147 AO, § 257 HGB under German law).

We use the following third-party services: • Google OAuth: For signing in via Google accounts. Data is transferred to Google LLC (USA). Google is certified under the EU-US Data Privacy Framework. Privacy policy: https://policies.google.com/privacy • Stripe: For payment processing. Payment data is processed directly by Stripe and not stored on our servers. Privacy policy: https://stripe.com/privacy • Hetzner: Hosting our platform on servers in Germany/EU. Data processing agreement in accordance with Art. 28 GDPR. Data is not shared with other third parties unless required for contract fulfillment or we are legally obligated to do so.

We only use technically necessary session cookies required for platform operation (e.g., authentication). These cookies are automatically deleted at the end of your browser session. We do not use tracking cookies, analytics tools, or advertising networks.

You have the following rights regarding your personal data: • Right of access (Art. 15 GDPR): You may request information about your data stored with us. • Right to rectification (Art. 16 GDPR): You may request correction of inaccurate data. • Right to erasure (Art. 17 GDPR): You may request deletion of your data, provided no retention obligations apply. • Right to restriction (Art. 18 GDPR): You may request restriction of data processing. • Right to object (Art. 21 GDPR): You may object to the processing of your data. • Right to data portability (Art. 20 GDPR): You may receive your data in a common format. To exercise your rights, please contact: info@shloce.com

You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is: The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI) Lautenschlagerstraße 20 70173 Stuttgart, Germany https://www.baden-wuerttemberg.datenschutz.de