Privacy notice
As of October 2026. The German version is authoritative.
1. Who is responsible?
Andre Hoffmann, Gartenstr. 4, 64354 Reinheim, email: hallo@bummly.app
2. In short
- This website sets no cookies and uses no tracking, analytics or embedded third-party services. Even the fonts are served from our own server.
- We only store data if you join the waitlist, and only for as long as you want to be on it.
3. Visiting the website
The website runs on the operator's own server in Germany. When you visit, the server processes technically necessary data: IP address, date and time, page requested, browser identifier and referrer. This is needed to deliver the page and fend off attacks (Art. 6(1)(f) GDPR). Server logs are deleted after 14 days at the latest. The waitlist application itself does not store IP addresses; to prevent abuse it briefly counts sign-ups per address in memory, as a hash only.
4. Waitlist
What: your email address, the page language, optionally the city and occasions you tick, and the times you signed up and confirmed.
Why: to tell you when Bummly launches in your city or when we are looking for testers. City and occasions help us plan the pilot. We don't share the data and don't use it for third-party advertising.
Legal basis: your consent (Art. 6(1)(a) GDPR), given by ticking the box and clicking the confirmation link (double opt-in).
How long: unconfirmed sign-ups are deleted automatically after 30 days. Confirmed sign-ups are deleted when you unsubscribe, or at the latest when we no longer need the waitlist after launch.
Withdrawal: you can withdraw your consent at any time via the "unsubscribe" link in every email or by writing to hallo@bummly.app. Your address is then deleted immediately.
Sending email: we use Brevo (Sendinblue SAS, Paris) to send the confirmation email, under a data processing agreement where required (Art. 28 GDPR).
5. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). Just send us an email.
You can also complain to a data protection authority, for example the Hessian Commissioner for Data Protection and Freedom of Information (datenschutz.hessen.de).
6. The app
The future Bummly app will have its own privacy notice. This page only covers the website and the waitlist.