Privacy policy

Schwankl UG (haftungsbeschränkt), Nikolastraße 9, 94081 Fürstenzell, Germany, email: info@tganext.com. Further details are in the legal notice.

Account and sign-in (email address, name, sign-in times) to perform the contract (Art. 6(1)(b) GDPR). Contact requests (name, company, email address, phone, message) to answer your request (Art. 6(1)(b) and (f) GDPR). Log data to keep operations secure (Art. 6(1)(f) GDPR). Content you record in the application for your company — such as contacts, projects, working hours and documents — is processed on behalf of your company (Art. 28 GDPR); your company is the controller for it.

We use service providers to run the service — for database, file storage and sign-in, and for server and email delivery — each under a contract in accordance with Art. 28 GDPR. The data is stored in data centres in the EU. Customers receive the list of sub-processors with the data processing agreement.

When we want to win an office as a customer, the operator (Schwankl UG) invites the owner by email. This only happens in answer to an earlier contact in which you agreed to receive it — for example a phone call, a contact request through the website or a personal conversation. We record: the kind and date of the contact, the person we spoke with, who spoke for us, and a free-text note.

For this we process your name, your email address, the name of the office and the note on the contact. The legal basis is Art. 6(1)(b) GDPR (steps towards a contract at your request); for the proof and the block list below Art. 6(1)(c) in conjunction with Art. 5(2) GDPR and point (f) (proof that we did not write unasked, section 7(2) of the German Unfair Competition Act).

If you do not respond, we remind you once after 7 days. After 14 days the invitation expires, and all details about you and the office are deleted. You can decline at any time through the link in the email; the office, the invitation and all details are then deleted immediately.

After a decline or an expiry, the only thing that remains as proof is a checksum of your email address together with the kind and date of the contact, the confirmation of your consent and the times of sending and decision, for 3 years — without your name and without your address in plain text. We also keep a block list that contains only this checksum, so that you are not invited again by mistake. A new invitation is possible only after a new, documented contact.

If you accept the invitation, your name, address and note are stored for at most 3 years from sending; after that, and at the latest when your office ends with us, only the record without name and address remains, which is deleted 3 years after that end. If you cancel after accepting but before setting up, we delete the office immediately and treat it like a decline; your account remains until you delete it yourself.

Team invitations are valid for 14 days; invitations never accepted are deleted 30 days after they expire. If you change your sign-in address, the confirmation link sent to the new address is valid for 60 minutes; after that, the unconfirmed address is deleted.

Our backups may still contain deleted data for up to 30 days; after that it is removed there too.

Details are in the cookie policy.

Account data until the account is deleted, followed by a 30-day grace period. Contact requests six months after the request has been dealt with.

Access, rectification, erasure, restriction, data portability and objection. You can withdraw consent at any time — the button in the footer is enough. You also have the right to lodge a complaint with a supervisory authority.