Privacy Policy

1. Controller

The controller for data processing in connection with ScanDran is:

ScanDran
Mehdi Aljebaay - ScanDran
Sole proprietorship
Wilhelmsruher Damm 139
13439 Berlin
Germany

Email: admin@scandran.de
Support: support@scandran.de

2. General information

ScanDran is a web-based application for digitally organizing waiting lists, status information, customer requests, and notifications for salons and similar service providers.

We process personal data only as far as necessary to operate the application, provide its features, perform contracts, maintain security, provide support, process payments, or meet legal obligations.

When a salon uses ScanDran to manage its own customers, staff, services, or queues, that salon is generally responsible for those data. ScanDran provides the technical platform and processes data to provide the relevant features.

3. Website access and technical data

When ScanDran is accessed, technically necessary data is processed.

Processing takes place to provide the service, maintain security, analyze errors, and prevent misuse. The legal basis is Art. 6(1)(f) GDPR.

• IP address
• date and time of access
• requested page or resource
• browser type and version
• operating system
• user agent
• referrer information if transmitted
• technical error, security, and log data

4. Cookies and browser storage

ScanDran uses technically necessary cookies as well as local storage, session storage, and service worker technologies.

These storage mechanisms are necessary to provide requested functions. ScanDran currently does not use analytics, tracking, or marketing cookies.

• session cookies for login and session management
• CSRF cookies to protect against abusive requests
• local language settings
• locally stored queue tickets and status links
• PWA and app settings
• service worker cache

5. User accounts, salon profiles, and queues

When an account is created or used, we may process name, email address, encrypted password, role, access rights, language setting, and technical security data.

Salon owners can manage data for their salon, staff, services, opening hours, logo, QR code settings, and queues. Customers can join a queue, retrieve status information, and receive notifications.

Displayed status information, wait times, and positions are used to technically organize the queue and may be influenced or changed by the salon.

6. Reviews, push notifications, and email

After a visit, ScanDran may enable a voluntary review. This can include a star rating, optional comment, and technical assignment data.

If push notifications are enabled, we process technical push data. Push notifications are used only if allowed in the browser or device.

ScanDran may send emails, especially for status links, technical information, account communication, or support.

7. Payment processing with Stripe

For paid features, subscriptions, invoices, payment status, and customer portal functions, ScanDran uses the payment provider Stripe.

Stripe processes payment, transaction, billing, and technical data where necessary for payment handling, fraud prevention, legal obligations, and payment services.

ScanDran generally does not store complete payment details such as credit card numbers. Payment-related metadata may be stored in ScanDran.

8. Hosting and external services

ScanDran is currently hosted with Hostinger. The server location is currently Germany, Frankfurt.

Additional providers may be used for email delivery, push notifications, payment processing, Google Fonts, hosting, security, and technical delivery.

When certain providers are used, processing of personal data in countries outside the European Union or European Economic Area cannot be excluded.

9. Recipients of personal data

Where necessary, personal data may be disclosed to the following categories of recipients. Personal data is not disclosed to third parties for advertising purposes.

• hosting and infrastructure providers
• email and communication providers
• payment providers
• browser and push service providers
• technical maintenance and support providers
• tax advisors, legal advisors, or authorities where legally required
• the relevant salon where data relates to its queue or customer management

10. Storage period and required data

Personal data is stored only as long as required for the respective purposes or as long as statutory retention obligations apply.

Certain data is required to use ScanDran. Optional information does not have to be provided, but missing optional data may limit individual functions.

11. Automated decisions and data protection officer

No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.

No data protection officer has been appointed.

12. Rights of data subjects

Data subjects have the following rights under the statutory requirements:

• right of access under Art. 15 GDPR
• right to rectification under Art. 16 GDPR
• right to erasure under Art. 17 GDPR
• right to restriction of processing under Art. 18 GDPR
• right to data portability under Art. 20 GDPR
• right to object under Art. 21 GDPR
• right to withdraw consent with future effect

13. Early access list

If you register interest in early access to ScanDran, we process the contact details you provide, especially salon name, contact person, email address and, where provided, phone number, city, and message.

Processing is used to handle your request and inform you about ScanDran launch and early access. You may withdraw consent at any time with future effect.

14. Right to lodge a complaint

Data subjects have the right to lodge a complaint with a data protection supervisory authority. For ScanDran, the Berlin Commissioner for Data Protection and Freedom of Information is particularly relevant.

Website: www.datenschutz-berlin.de

15. Security and changes

ScanDran takes appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, and unauthorized disclosure.

This Privacy Policy may be updated if legal, technical, or organizational changes occur.

The current version is available at /datenschutz