Table of contents

• Controller
• Data Processing in the App
• Web Hosting and Server Log Files
• Purchases and Subscriptions via Apple App Store
• Rights of Data Subjects
• Changes to this Privacy Policy

Controller

Jan Broder Engler
Eppendorfer Weg 273
20251 Hamburg

E-mail: hello@sepacode.app

Data Processing in the App

SEPAcode generates EPC QR codes for SEPA payments. All data you enter in the app — such as recipient name, IBAN, amount, and payment reference — is stored exclusively on your device. We do not collect, transmit, or have access to any of this data.

The app does not require an account, does not use analytics or tracking tools, and does not display advertising. It does not request access to your camera, photo library, contacts, or any other device resources.

Web Hosting and Server Log Files

Our website is hosted by IONOS. When you visit the website, the web server automatically records access data in server log files. This may include:

• URL of the page accessed
• Date and time of the request
• Amount of data transferred
• Browser type and version
• Operating system
• Referrer URL
• IP address

This data is used solely for the technical operation and security of the website (e.g. detecting and defending against attacks). It is not combined with other data sources.

• Legal basis: Legitimate interests (Art. 6(1)(f) GDPR)
• Service provider: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany — Privacy Policy

Purchases and Subscriptions via Apple App Store

The app and its optional subscription (SEPAcode Pro) are available through the Apple App Store. All purchase and subscription transactions — including payment processing, renewal billing, and cancellation — are handled entirely by Apple. We do not receive or process your payment data, subscription status, or any related transaction data. Apple’s privacy policy applies to all data collected in connection with purchases and subscriptions.

• Service provider: Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA — Privacy Policy

Rights of Data Subjects

To the extent that personal data is processed in connection with this website (e.g. server log files), you have the following rights under the GDPR:

• Right of access (Art. 15 GDPR): You may request information about the personal data we process about you.
• Right to rectification (Art. 16 GDPR): You may request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You may request deletion of your data where the legal requirements are met.
• Right to restriction of processing (Art. 18 GDPR): You may request that processing be restricted in certain circumstances.
• Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests.
• Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

To exercise your rights, please contact us at hello@sepacode.app.

Changes to this Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The date of the most recent update is shown at the top of this page.