Privacy policy

1. Responsible person

Tobias Schacht, Astromantie, Krückebergstr. 18, 32602 Vlotho, Germany
Email: info@astromantie.com
As a one-person company, we do not have to appoint a data protection officer. If you have any questions about data protection, write to us directly.

2. The most important things in brief

• We process your data to provide you with our interpretations, your account and the app. We do not sell data or show third-party advertising.
• We do not use advertising or tracking cookies. We only load third-party services when you need them with a click, for example when paying or registering with Google.
• We write our analyses with the support of artificial intelligence. Your data will not be used to train AI models (Section 6).
• We do not need any photos or biometric data for our analyses. Only your first name and your birth chart go to the AI ​​(Section 6).

3. Visiting the website and servers

The website and database run on servers from Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen) in data centers in Germany. Hetzner processes the data on our behalf; There is a contract for order processing with Hetzner. Backup copies are also available from Hetzner in Germany.

When you access our pages, the server processes technically necessary data: IP address, date and time, page accessed, amount of data transferred, browser and operating system. This serves to ensure secure operation and defense against attacks (Art. 6 Para. 1 lit. f GDPR). We delete these logs after 30 days, unless an entry is needed to investigate an attack.

All connections are encrypted via TLS. We store sensitive information such as dates of birth in encrypted form.

4. Customer account

For an account we need your email address, a password and your first name. For your interpretations, you provide your date of birth, time of birth and place of birth, as well as your gender (for the appropriate salutation). From this we calculate your birth horoscope. The legal basis is the fulfillment of the user contract (Art. 6 Para. 1 lit. b GDPR). To confirm your email address, we will send you an email with a link.

You can change your account details, download as a file and delete your account at any time on the website at astromantie.com/konto-loeschen or in the app. We will then delete your account and horoscope data. We only keep invoices and order receipts for as long as required by tax and commercial law (Section 14).

Sign in with Google: If you select “Sign in with Google”, your click will load Google’s registration service (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). In the app, registration takes place via Firebase Authentication, a service from the same Google company. Google sends us your name, email address and a Google identifier. Data can also go to Google LLC in the USA; it is certified according to the EU-US Data Privacy Framework. The legal basis is Article 6 Paragraph 1 Letter b GDPR.

5. Order an analysis

For an analysis, depending on the product, we process:

• First and last name and email address (for order, customer account and invoice),
• Date of birth, time of birth, place of birth and, if necessary, coordinates, optionally gender (for the correct salutation),
• in partner, friendship, child and family analyses, the same birth dates of other people,
• in the company analysis, name and founding dates of the company,
• in the power location analysis, your place of residence and your desired places,
• Notes that you voluntarily write in the text field (child and family analysis).

We need this data to fulfill the contract (Art. 6 Para. 1 lit. b GDPR). Without them we cannot create the analysis.

We calculate the birth horoscope (radix) from the birth data. We do not request or process photos, hand images or other biometric data.

Other people's data: If you give us other people's data, you assure us that you agree or that you are legally authorized to represent them, for example as a parent. Please inform them about this data protection declaration. We only use your data for the ordered analysis. In child analyses, the parents or guardians act on behalf of the child.

Storage: Your finished analysis will remain in your customer account under “My Purchases” as long as your account exists. So you can download it again at any time, even in the app. If you delete your account, we will also delete your analytics. If you don't log in for three years, we will automatically delete your account and analytics; We will remind you by email beforehand so that you can secure it. We delete the work files from which an analysis was created 12 months after delivery. The legal basis is the contract with you (Art. 6 Para. 1 lit. b GDPR).

Force location analysis: We draw the maps ourselves, on our server and on the work computer of the person responsible in Germany. Location data comes from freely available geodata that is stored locally.

6. Artificial intelligence

We use the AI “Claude” from Anthropic PBC (San Francisco, USA).

• Analyses: For writing your analysis, Anthropic only receives your first name and your birth chart: date of birth, time of birth and place of birth with the calculated planetary positions, optionally your gender for the salutation. In the case of analyses for several people, the same applies to the others; in the company analysis, the company's name and founding dates are added; in the place of power analysis, the place of residence and desired places and information that you voluntarily write in the text field. The AI ​​does not receive your last name, email address or payment details. For this we use a business access (Claude Team).
• Cosmic questions: We will send the text of your question and the planetary positions of your birth chart, without your name or email address. The AI ​​generates the answer automatically.

Anthropic processes this data on our behalf on the basis of an order processing contract. The transfer to the USA is secured by EU standard contractual clauses. Anthropic does not use the data to train its AI models and only stores it for as long as its security and misuse protection guidelines require. The legal basis is Article 6 Paragraph 1 Letter b GDPR. The AI ​​does not make any decisions about you within the meaning of Art. 22 GDPR. She writes interpretive texts that we provide to you.

7. Payment

You pay on the website via Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). The payment form only loads when you click on a purchase button. From then on, Stripe receives your payment details, your IP address and device information and sets cookies to prevent fraud. Depending on the payment method, other providers are involved, such as PayPal, Klarna, your bank, Apple Pay or Google Pay. We ourselves do not see or store complete card or account details. Stripe processes payment data partly on our behalf and partly under its own responsibility, for example to prevent fraud and to fulfill legal obligations; Stripe’s privacy policy applies to this. The legal basis is Article 6 Paragraph 1 Letters b and c GDPR.

Accounting: For our accounting, payment and invoice data from Stripe and PayPal (e.g. name, email address, amount, date, purchased product and invoice number) are automatically transferred to our accounting program Lexware Office (Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg). The transmission is carried out by the MiracleSync service from Flagship Apps GmbH (Erkrather Str. 401, 40231 Düsseldorf). Both process the data on our behalf on the basis of a contract for order processing. The legal basis is our legal obligation to keep records (Art. 6 Para. 1 lit. c GDPR).

If you purchase the app via Google Play or the Apple App Store, the respective store processes the payment under its own responsibility. We only receive information about which product you have purchased and until when the activation is valid. These purchase confirmations reach us via the RevenueCat service (RevenueCat, Inc., USA), which checks on our behalf whether a purchase is valid. To do this, we send RevenueCat your Astromantie customer number, no name or email address. The transfer to the USA is secured by EU standard contractual clauses.

8. Emails

We will send you emails that are part of your contract: order confirmation, invoice, reference to your completed analysis, notifications about activations and your account (Art. 6 Para. 1 lit. b GDPR). Our email inbox and shipping are handled by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur) on our behalf.

Reviews: We do not send requests for reviews via email. You can rate us voluntarily via Trustpilot (Section 12).

9. Contact

If you write to us by email or via the contact form, we will process your information in order to answer your request (Art. 6 Para. 1 lit. b or f GDPR). We check the form for spam on our own server without sending any data to third parties. We delete inquiries when they have been completed, at the latest after three years, unless there is an obligation to retain them.

10. Cookies and storage in the browser

• Necessary cookies: When you log in, WordPress sets session cookies to keep you logged in. There are also a few short-lived auxiliary cookies, for example for inviting friends until you register. They are absolutely necessary for the function you want (Section 25 Paragraph 2 No. 2 TDDDG).
• Local storage: We store settings such as light or dark mode and the selected login type in the memory of your browser or device. They don't leave your device.
• Fonts and program blocks are on our own server. When you access the page, no data is sent to Google Fonts or other third-party servers.

11. Visitor statistics

With the Independent Analytics program, we count page views on our own server, without cookies and without passing them on to third parties. It distinguishes visits using a check value consisting of the IP address and browser ID with a regularly changing random value. The IP address itself is not saved. The pages viewed, the page you came from, device type, operating system, browser and the approximate location (country and city) are recorded. The legal basis is our legitimate interest in improving our offering (Art. 6 Para. 1 lit. f GDPR). You can object to this at any time (Section 16).

Logged in to your account: If you are logged in to the website or app, Independent Analytics does not count you. Instead, we record once per day that your account was active that day and whether in the app or on the website. We do not store IP addresses, pages accessed or other data. The information remains on our own server, is only used for our internal statistics and is automatically deleted after 400 days. The legal basis is our legitimate interest in evaluating the use of our offer (Art. 6 Para. 1 lit. f GDPR).

12. Services that only load through your action

• Location search (GeoNames): If you enter a place of birth, your browser will query appropriate locations and time zones from GeoNames (Unxos GmbH, St. Gallen, Switzerland). Your search term and your IP address are transmitted. There is an adequacy decision from the EU Commission for Switzerland.
• Cards: Maps, for example in astrocartography, consist of map tiles from OpenStreetMap Deutschland (FOSSGIS e.V., Germany). In the “World” view (satellite image), the tiles come from Esri (Esri Inc., Redlands, USA). Tiles only load when a map is displayed. The tile server receives your IP address, in the “World” view in the USA.
• Trustpilot: The link “Rate us on Trustpilot” does not load anything. If you click on it, you will switch to Trustpilot (Trustpilot A/S, Pilestræde 58, 1112 Copenhagen, Denmark). Trustpilot is responsible for everything you enter there.

The legal basis is the fulfillment of the function that you access (Art. 6 Para. 1 lit. b GDPR) and our legitimate interest in a functioning website (Art. 6 Para. 1 lit. f GDPR).

13. The app

The app essentially shows our website with your account. What is written above also applies to the app. Additionally applies:

• Purchase from the stores: You can download the app via Google Play or the Apple App Store. The stores process data on downloads, updates and purchases under their own responsibility.
• Push notifications: Only if you allow it in the app (Art. 6 Para. 1 lit. a GDPR, Section 25 Para. 1 TDDDG). To do this, your device receives an identifier from Firebase Cloud Messaging (Google Ireland Limited) or Apple Push Notification Service (Apple Distribution International Ltd., Cork, Ireland). We save the identifier in your account in order to send you the messages. You can switch off push notifications at any time in the app or in your device's settings.
• Find friends via your address book (Android): Only if you explicitly start it and allow access will the app read the phone numbers from your address book. The numbers are already converted into test values ​​(hashes) on your device. Only these test values ​​are sent to our server. It compares them once with the test values ​​of users who want to be found themselves and does not save them. Names and other contact information do not leave your device. The legal basis is your desire to find friends (Art. 6 Para. 1 lit. b GDPR) and for the numbers of your contacts our legitimate interest in a data-efficient friend search (Art. 6 Para. 1 lit. f GDPR). You can only find your own number if you enter it yourself. You can remove them at any time.
• Widget and offline content: Moon widget and offline pages only store content on your device.

14. How long we store data

• Account details and horoscope: until you delete your account, at the latest after three years without registration (with a reminder beforehand).
• Completed analytics: as long as your account (Section 5). Working files for this: 12 months after delivery.
• Invoices and accounting documents: 8 years, business letters 6 years (§ 147 AO, § 257 HGB).
• Server logs: 30 days.
• Day count of logged in accounts (Section 11): 400 days.
• Contact requests: until completion, a maximum of three years.

15. Recipients and transfers outside the EU

Authorities only receive data if we are legally obliged to do so.

16. Your rights

You have the right to information (Art. 15 GDPR), correction (Art. 16), deletion (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to revoke your consent at any time with future effect (Art. 7 Para. 3). Write to us at info@astromantie.com.

You can also complain to a data protection supervisory authority (Art. 77 GDPR), for example in your country of residence. The state representative for data protection and freedom of information for North Rhine-Westphalia, Kavalleriestr., is responsible for us. 2-4, 40213 Düsseldorf, www.ldi.nrw.de. In Switzerland, the Federal Data Protection and Information Commissioner (FDPIC) is responsible, www.edoeb.admin.ch.

17. Users in Switzerland

The Swiss Data Protection Act (DSG) also applies to people in Switzerland. Data can be transferred to the countries mentioned in Section 15, i.e. to EU countries and the USA. For the USA, we rely on the Swiss-US Data Privacy Framework, provided the recipient is certified, and otherwise on standard contractual clauses.

18. Changes

We will adjust this statement if our offering or the legal situation changes. The version published here applies.