Privacy Policy

Privacy Policy

Last updated: August 2025

1. Introduction and Scope

We, StaySaved GmbH (hereinafter "StaySaved", "we" or "us"), are pleased about your interest in our platform and our services. The protection of your personal data has the highest priority for us. This privacy policy informs you about which personal data we collect, how we process and use it when you visit our website https://staysaved.de/de/ and use our mobile app at https://dev.staysaved.de.

2. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection regulations is:

StaySaved GmbH

[INSERT COMPLETE BUSINESS ADDRESS]

Berlin, Germany


Email: info@staysaved.de

Phone: +49 (0)30 915 170 13

3. Data Protection Officer

We have appointed a data protection officer. You can reach them at:

[NAME OF DATA PROTECTION OFFICER]

[ADDRESS OF DATA PROTECTION OFFICER]

Email: [EMAIL OF DATA PROTECTION OFFICER]

4. Definitions

Our privacy policy is based on the terminology used by the European legislator when issuing the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand for both the public and our customers and business partners. To ensure this, we would like to explain the terminology used in advance.

  • Personal Data: All information relating to an identified or identifiable natural person (hereinafter "data subject").
  • Processing: Any operation or set of operations performed on personal data, whether or not by automated means.
  • Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
  • Processor: A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

5. Type, Scope and Purpose of Data Processing

5.1. Visiting Our Website

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

  • Information about the browser type and version used
  • The user's operating system
  • The user's internet service provider
  • The user's IP address
  • Date and time of access
  • Websites from which the user's system reaches our website (referrer)
  • Websites that are accessed by the user's system via our website

5.2. Using Our Mobile App

When you use our mobile app, we collect the following personal data to enable you to use the app and its functions:

Registration & Profile Data:

  • Name, email address, password
  • Date of birth, gender, profile picture

Financial Data:

  • Bank details (IBAN)
  • Transaction data, depot information

Location & Usage Data:

  • Location data for geo-assisted functions
  • App interactions and usage patterns

Device Data:

  • Device ID, operating system
  • Version, manufacturer

5.3. Purposes of Data Processing

We process your data for the following purposes:

  • Platform Provision: To enable you to use our website and app.
  • Contract Fulfillment: To fulfill our contractual obligations, especially to carry out automated investments.
  • Personalization: To provide you with personalized suggestions for renunciation opportunities (AI-based analysis).
  • Gamification: To implement StaySaved4Kids functions and family challenges.
  • Security: To ensure the security of our platform and fraud prevention.
  • Communication: To communicate with you, e.g., for support requests.
  • Marketing: To inform you about new products and features (only with your consent).

6. Legal Basis for Data Processing

Consent (Art. 6 para. 1 lit. a GDPR):

For certain purposes (e.g., marketing emails, location data) we obtain your explicit consent.

Contract Performance (Art. 6 para. 1 lit. b GDPR):

The processing of your data is necessary for the performance of the user contract.

Legal Obligation (Art. 6 para. 1 lit. c GDPR):

We are legally obliged to process certain data (e.g., from KWG, WpHG, Money Laundering Act).

Legitimate Interests (Art. 6 para. 1 lit. f GDPR):

We process data to protect our legitimate interests (e.g., to improve our services, to ensure security).

9. Your Rights as a Data Subject

You have the right:

  • • according to Art. 15 GDPR to request information about your personal data processed by us.
  • • according to Art. 16 GDPR to immediately request the correction of incorrect or completion of your personal data stored with us.
  • • according to Art. 17 GDPR to request the deletion of your personal data stored with us.
  • • according to Art. 18 GDPR to request the restriction of processing of your personal data.
  • • according to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another controller.
  • • according to Art. 7 para. 3 GDPR to revoke your once given consent to us at any time.
  • • according to Art. 77 GDPR to complain to a supervisory authority.

Note: This privacy policy was created for StaySaved GmbH. The fields marked with [PLACEHOLDER] must be filled with the actual company data before the privacy policy is published.

Last updated: August 2025