placeto.shop is a map-based service to show and manage nearby offers. The following sections describe what data may be processed when you use the service.

• Account data (e.g., email address) for login and security.
• Shop/product entries and optional images you upload.
• Location data you set for a pickup/placement point.
• Technical log data (e.g., IP address, timestamps) for operation and security.
• Map display via Google Maps.

When you access the website, the hosting provider processes server log data (e.g., IP address, date/time, requested page, user agent). This is necessary to deliver the website and to protect against misuse.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

Retention: Log files are typically stored for a limited period and then deleted. (Depending on hosting configuration.)

If you create an account or log in, we process your email address and technical security data (e.g., token hashes, timestamps). This is required to provide login, prevent abuse, and secure your account.

Legal basis: Art. 6(1)(b) GDPR (performance of contract / pre-contractual measures) and Art. 6(1)(f) GDPR (security).

Retention: Account data is stored as long as the account exists. Security tokens expire and are removed/invalidated.

If you create shops/products, send requests, or upload images, the entered content is processed to provide the service. Uploaded files are stored in user-specific folders.

Please upload only content you are allowed to use (e.g., your own photos) and no sensitive data.

Legal basis: Art. 6(1)(b) GDPR.

You can set a location on the map as a pickup/placement point. The coordinates you choose are stored for displaying and using that point in the service.

If you use the "Find me" function or automatic centering, the browser/phone asks for permission to access your device location. This data is used to center the map and is not stored as such unless you actively place/save a point.

Legal basis: Art. 6(1)(b) GDPR for saved pickup points; device geolocation is based on your consent via browser prompt.

The map is displayed using Google Maps (Google Ireland Limited). When the map loads, your IP address and technical data may be transmitted to Google. This may also involve transfers to third countries (e.g., the USA) depending on Google processing.

We currently do not use additional analytics or tracking tools.

Legal basis: Art. 6(1)(f) GDPR (interest in providing map functionality). If required, consent can be used (Art. 6(1)(a)).

The service uses technically necessary storage (e.g., session cookies) to keep you logged in and to protect forms (CSRF).

Legal basis: Art. 6(1)(f) GDPR and § 25(2) TTDSG (strictly necessary).

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

You can contact us at the email address above.