Disclaimer
Disclaimer
Privacy Policy
1. Controller
The controller responsible for data processing on this website and in the Freeyourbase applications is:
Freeyourbase GbR Partners: Florian Becker, Karl Becker, Nordendstrasse 14 60318 Frankfurt am Main Germany Email: info [att] freeyourbase.org
We have not appointed a data protection officer, as the statutory conditions requiring one do not apply. For any data protection matter, please contact us at the email address above.
2. Scope
This privacy policy applies to the website freeyourbase.org including all subpages, and to the applications we offer for iOS and Android.
3. Your rights
You have the following rights regarding your personal data:
- Access to the data processed and a copy of it (Article 15 GDPR)
- Rectification of inaccurate data and completion of incomplete data (Article 16 GDPR)
- Erasure (Article 17 GDPR)
- Restriction of processing (Article 18 GDPR)
- Data portability (Article 20 GDPR)
- Withdrawal of consent with effect for the future (Article 7(3) GDPR)
- Lodging a complaint with a supervisory authority (Article 77 GDPR)
An informal message to [email protected] is sufficient to exercise these rights.
Our competent supervisory authority is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany. You may also contact the supervisory authority of your place of residence or work.
Right to object under Article 21 GDPR
Where we process your data on the basis of legitimate interests under Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing. If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless the processing serves to establish, exercise or defend legal claims.
Where your data is processed for direct marketing purposes, you may object at any time without giving reasons. Your data will then no longer be used for that purpose.
An objection can be made informally and should be addressed to info [att] freeyourbase.org.
4. Legal bases
Unless stated otherwise in the individual sections below, we process data on the basis of your consent (Article 6(1)(a) GDPR), for the performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR), to comply with legal obligations (Article 6(1)(c) GDPR), or to safeguard legitimate interests (Article 6(1)(f) GDPR).
5. Hosting and server log files
Our website is hosted by All-inkl. Web: all-inkl.com A data processing agreement under Article 28 GDPR is in place with this provider.
When you access our website, the server automatically records information transmitted by your browser:
- IP address
- date and time of access
- page or file requested
- volume of data transferred
- message indicating whether the request succeeded
- browser and operating system used
- previously visited page (referrer)
This data is not combined with other data sources. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in the technically sound and secure operation of the website. Log files are deleted after 14 days.
6. Cookies and consent management
Cookies and comparable technologies are used on our website.
Technically necessary cookies required for the operation of the website do not require consent (Section 25(2) no. 2 of the German Digital Services Data Protection Act, TDDDG). The legal basis for the subsequent processing is Article 6(1)(f) GDPR.
All other cookies and any other access to your device — in particular for analytics purposes — are used only where you have given express consent via our consent banner (Section 25(1) TDDDG, Article 6(1)(a) GDPR). Your selection is stored so that the banner does not reappear on every visit.
You may withdraw your consent at any time with effect for the future. To do so, open the cookie settings via the link in the website footer and change your selection.
7. Contact form
If you contact us via the contact form or by email, we process the information you provide in order to handle your enquiry.
The only mandatory information is email adress and message. You may use the form without giving your name.
The legal basis is Article 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract, and otherwise Article 6(1)(f) GDPR based on our legitimate interest in responding to enquiries.
We delete your enquiry once it has been conclusively dealt with, unless statutory retention obligations apply. Where an enquiry leads to a contract, the commercial and tax retention periods of six and ten years respectively apply.
8. Order processing and payment
When you make a purchase via our website, we process the data required to perform the contract, in particular your email address, the information required for invoicing, and details of the product purchased and the payment transaction.
The legal basis is Article 6(1)(b) GDPR for performance of the contract and Article 6(1)(c) GDPR for statutory retention obligations.
Payment processing via Stripe
Payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
You enter your payment details directly with Stripe. At no point do we receive complete card or account details — only confirmation or rejection of the payment and the information required to match it to your order.
Stripe processes in particular master data such as name and address, payment data, transaction amounts, the time and recipient of the payment, and technical data such as IP address and device characteristics, the latter also for fraud prevention. For part of this processing, Stripe acts as an independent controller.
Stripe may transfer data to affiliated companies in the United States. This is based on the European Commission's adequacy decision on the EU-US Data Privacy Framework and, additionally, on standard contractual clauses under Article 46(2)(c) GDPR.
Further details and how to exercise your rights vis-à-vis Stripe: https://stripe.com/privacy
Invoicing and accounting
To meet our commercial and tax obligations, we process your order and invoice data as part of our accounting and transmit it, where necessary, to our tax advisor and to the tax authorities. The legal basis is Article 6(1)(c) GDPR. Deletion takes place after the statutory retention periods of six and ten years respectively have expired.
We do not operate customer accounts. No registration is required in order to make a purchase.
9. Google Analytics
Where you have given consent via our consent banner, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies and comparable technologies to analyse your use of the website. The data processed includes in particular a pseudonymous user identifier, a truncated IP address, pages visited, time spent, the source of the visit, and information about your device, browser and approximate location at regional level.
IP anonymisation is active by default in Google Analytics 4; IP addresses are truncated before any storage.
Purpose: analysis of website use, compilation of reports on website activity, and improvement of our offering.
Legal basis: your consent under Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw it at any time via the cookie settings in the website footer.
Recipients: Google Ireland Limited as processor under an agreement pursuant to Article 28 GDPR. Transfer to Google LLC in the United States cannot be ruled out. This is based on the adequacy decision on the EU-US Data Privacy Framework and, additionally, on standard contractual clauses.
Retention period: user-related data is deleted automatically after 14 months.
Further information: https://policies.google.com/privacy
10. Sharing function
Our pages include buttons allowing you to share articles via WhatsApp, Reddit or email.
These are simple links only. No connection to the servers of these providers is established when you load our pages, no scripts are loaded from them, and no data is transmitted to them.
Data is transmitted only if you actively click one of these buttons, at which point you leave our website. The respective provider is responsible for any subsequent processing, and its privacy terms apply.
The legal basis for providing these buttons is Article 6(1)(f) GDPR, based on our legitimate interest in the distribution of our content.
11. Fonts
All fonts used on this website are served from our own server. No connection is made to Google Fonts or any other external font service.
12. Our applications
No user account and no registration is required to use our applications.
All entries, test results and progress are stored exclusively on your own device locally. This data is not transmitted to us and is not accessible to us at any time. If you delete the application, this data is removed with it; we are then unable to restore it.
The applications contain no analytics services, advertising networks or crash reporting services.
Purchases via the App Store and Google Play
Where our applications are obtained via the App Store operated by Apple Inc. or via Google Play operated by Google Ireland Limited, the purchase takes place through that platform. The data arising in the process — in particular your account details and payment information — is processed by Apple or Google under their own responsibility. We receive only aggregated sales statistics with no personal reference.
The privacy terms of Apple (https://www.apple.com/legal/privacy/en-ww/) and Google (https://policies.google.com/privacy) apply respectively.
13. Scientific study "Core Test: Loneliness"
At [research.freeyourbase.org] and through the application of the same name, we are conducting a scientific field study into the psychological causes of loneliness. Collection period: 1 October 2026 to 31 December 2029.
Anonymity of the survey
No personal data is collected, processed or stored as part of the study. In particular, we do not record:
- names or other identifying characteristics
- email addresses or other contact details
- user accounts or login credentials
- IP addresses
- device, installation or session identifiers
- location data
- processing times or timestamps
No code list exists or will be created that would allow submitted responses to be attributed to an individual. Re-identification is not possible by any means.
As this is anonymous data with no personal reference, the General Data Protection Regulation does not apply to this collection. We nevertheless provide transparent information about the procedure.
What is transmitted
If you consent, only the following information is transmitted:
- age group and gender, in categories
- your responses regarding the experience of loneliness, perceived distress and its duration
- your responses regarding the form of loneliness and your life circumstances
- your answers to the questions of the core test
- language version, source of participation (app or browser) and program version
- month and year of participation
No exact date or time is stored.
When transmission occurs
The test runs entirely on your device. No data is transmitted to us while you are completing it.
Only after you have answered all questions are you asked whether you would like to contribute your responses to the research. Without your express consent at that point, no data leaves your device. Your result is shown to you regardless of that decision, so you can take the test and keep your result without submitting anything.
If you stop before that point, nothing is stored and nothing is transmitted.
No cookies, no third parties
No cookies are set on the test page. No third-party services are embedded — no analytics or audience measurement, no advertising networks, no crash reporting, no externally loaded fonts or scripts. All content is served from our own server.
Access logging is disabled for this area; IP addresses are not stored. Google Analytics is not active on these pages.
Local storage on your device
Once you have completed your participation, a technical marker is placed on your device (via localStorage in the browser, via the device's internal settings store in the app). Its sole purpose is to prevent accidental repeat participation, and it is strictly necessary for conducting the study. Consent is therefore not required under Section 25(2) no. 2 TDDDG.
This marker contains no personal information and is never transmitted to us. You can delete it at any time by clearing the website data in your browser or resetting the app data.
Retention period
The anonymised study data is retained for at least ten years after the conclusion of the study. This follows the German Research Foundation's guidelines for safeguarding good scientific practice and serves to make published results verifiable.
Use and publication
The data is analysed exclusively for scientific purposes. Results are published in aggregated form; individual participants are not identifiable in them.
After the study concludes, the anonymised dataset will be made publicly available together with the analysis procedure, so that the results can be verified.
The data is not passed on for commercial purposes. It is not sold, not rented out and not used for advertising.
Withdrawal
You may withdraw your consent at any time. Please note: because the survey is entirely anonymous, responses already submitted cannot be identified and therefore cannot be deleted retrospectively. A withdrawal affects future participation only.
Responsible for the study
Florian Becker, Freeyourbase GbR, florian.becker [att] freeyourbase.org
Further information on the study, its methodology and the existing conflict of interest can be found at Menu -> R & D
14. Transfers to third countries
Where we use services that may involve processing outside the European Union and the European Economic Area, this takes place only under the conditions of Articles 44 et seq. GDPR. This currently concerns the services named in sections 8 and 9.
The basis is either an adequacy decision of the European Commission — for the United States, the decision on the EU-US Data Privacy Framework of 10 July 2023, provided the receiving company is certified under it — or the conclusion of standard contractual clauses under Article 46(2)(c) GDPR together with supplementary safeguards.
15. Recipients of your data
Beyond the service providers named in the individual sections, we pass on your data only where this is necessary to perform a contract, where we are legally obliged to do so, or where you have consented. Recipients may include in particular our tax advisor, the tax authorities and, in the event of a dispute, legal advisors and courts.
We do not sell your data and do not pass it on for third-party advertising purposes.
16. Data security
This website uses transport encryption in line with current standards (TLS). You can recognise an encrypted connection by the "https://" in the address bar and the padlock symbol in your browser.
In addition, we take appropriate technical and organisational measures under Article 32 GDPR to protect your data against loss, destruction, manipulation and unauthorised access. Please note that data transmission over the internet, for example when communicating by email, may have security vulnerabilities; complete protection against access by third parties is not possible.
17. Changes to this privacy policy
We update this privacy policy when the legal situation, our offerings or the nature of our data processing changes. The version available on this page applies in each case.
