MAINTENY DATA PROTECTION
Last updated: Oct 26, 2026
1. INFORMATION ON THE COLLECTION OF PERSONAL DATA
We are pleased that you are visiting our website. The protection of your privacy and of your personal data when using our website is important to us.
In the following, we inform you about the collection of personal data when using our websites mainteny.com and mainteny.de. Personal data is all data that can be related to you personally. This includes, for example, information such as your first and last name, your address, your telephone number, your e-mail address, but also your IP address.
Data that cannot be related to your person, for example through anonymization, is not personal data. The processing of personal data within the meaning of Art. 4 No. 2 GDPR always requires a legal basis or your consent.
Processed personal data must be deleted by us as soon as the purpose of the processing has been achieved and there are no longer any statutory retention requirements.
In order to provide the functions and services of our website, it is necessary for us to collect personal data about you.
We would be happy to explain to you below the type and scope of the respective data processing, the purpose pursued and the corresponding legal basis as well as the respective storage period and the rights you are entitled to.
1.1 CONTROLLER
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:
Mainteny GmbH
Rheinsberger Str. 76/77, 10115 Berlin
Register court: Amtsgericht Berlin (Charlottenburg)
Commercial register no.: HRB 232178 B
1.2 CONTACT FOR DATA PROTECTION MATTERS
You can contact us at any time if you have any questions about data protection.
E-mail: privacy@mainteny.com
2. PROVISION AND USE OF THE WEBSITE / SERVER LOG FILES
2.1 TYPE AND SCOPE OF DATA PROCESSING
Every time you visit our website https://mainteny.com, data is collected. Technically necessary data is automatically collected and stored in so-called log files. By default, software keeps an event log in text format (a log file) of each visit to the website https://mainteny.com. The configuration of the web server software determines which information is logged.
If you use this website without otherwise transmitting data to us (e.g. through registration), we collect technically necessary data via server log files, which is automatically transmitted to our server, including:
- visited website
- time of access
- amount of data sent in bytes
- source/reference (referrer) from which you reached the page
- browser used
- operating system used
- IP address used
2.2 SSL OR TLS ENCRYPTION
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
2.3 PURPOSE AND LEGAL BASIS OF DATA PROCESSING
Access to our website and every retrieval of files is only logged for backup purposes and troubleshooting and is necessary from a technical point of view in order to be able to display our website to you.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a functional and secure website, troubleshooting, and detecting and defending against attacks.
2.4 STORAGE DURATION
The personal data mentioned will be deleted as soon as it is no longer required to display the website. When collecting the data for provision of the website, this is the case when the respective session has ended. The data stored in the log files will be deleted after 30 days at the latest.
2.5 OBJECTION
You may object to the processing on grounds relating to your particular situation (Art. 21 GDPR). As the log files are necessary for the secure operation of the website, compelling legitimate grounds may override an objection.
3. HOSTING
We host the content of our website with the following provider:
Amazon Web Services EMEA SARL
38 Avenue John F. Kennedy
L-1855 Luxembourg
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include IP addresses, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.
The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6(1)(f) GDPR).
Our hoster will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.
4. ELECTRONIC MAIL (E-MAIL)
4.1 TYPE AND SCOPE OF DATA PROCESSING
There is an e-mail contact option on our website that can be used for electronic contact. If you send us an e-mail, the personal data transmitted with the e-mail will be stored. At the time the e-mail is sent, the IP address as well as the date and time are also stored.
4.2 PURPOSE AND LEGAL BASIS OF DATA PROCESSING
Your e-mail address and the data transmitted with the e-mail will only be used for the purpose of corresponding with you. We would expressly point out any other purposes and ask for your explicit consent. The legal basis for the processing of personal data is Art. 6(1)(b) GDPR (performance of pre-contractual measures at the request of the data subject) and Art. 6(1)(f) GDPR (legitimate interest in processing incoming inquiries).
The other personal data processed during the e-mail process serves to prevent misuse and to ensure the security of our information technology systems. The legal basis for this is Art. 6(1)(f) GDPR. Our legitimate interest lies in the security of our IT systems and the prevention of misuse.
4.3 DURATION OF STORAGE AND POSSIBILITY OF OBJECTION
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data sent with the e-mail, this is the case when the respective communication has ended and the matter can be regarded as closed. The additional personal data collected during the e-mail process will be deleted after 30 days at the latest.
You can object to the storage of your personal data at any time. You can send your objection to the e-mail address privacy@mainteny.com.
4.4 COMMUNICATION SECURITY
Please note that legally secure communication cannot be guaranteed by a simple e-mail. Information that you send to us unencrypted by e-mail can possibly be read by third parties on the transmission path.
5. USE OF COOKIES
5.1 TYPE AND SCOPE OF DATA PROCESSING
In addition to the aforementioned data, cookies are stored on your computer when you use our website.
Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and through which certain information flows to the body that sets the cookie. Cookies cannot run programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective overall.
This website uses session cookies, the scope and functionality of which are explained below:
Session cookies are necessary for the functioning of this site and enable you to navigate the site and use its services and functions. Session cookies store a so-called session ID, with which various requests from your browser can be assigned to the same session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
We only use cookies and similar technologies that are not technically necessary (see section 10) with your consent via our cookie banner. You can revoke your consent at any time via the cookie settings on our website.
5.2 PURPOSE AND LEGAL BASIS OF DATA PROCESSING
The cookies we use enable you to access the Mainteny offer more conveniently. We use them, for example, to save you from having to repeatedly re-enter your details in the search form. The sole purpose of the cookies used is to enable and facilitate electronic communication.
The legal basis for setting technically necessary cookies is Section 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act). The subsequent processing of personal data is based on Art. 6(1)(f) GDPR (legitimate interest in a functional website).
5.3 DURATION OF STORAGE AND POSSIBILITY OF OBJECTION
Deletion takes place immediately after closing your browser. You can delete or block cookies at any time via your browser settings. This may limit the functionality of the website.
6. CUSTOMER COMMUNICATION AND SUPPORT
6.1 Chatbot – Crisp
For customer communication, technical support, and product-related messages (e.g. feature updates, service notices, or notifications), we use the communication service Crisp, operated by Crisp IM SAS, 2 Boulevard de Launay, 44100 Nantes, France.
Crisp provides a chat solution that combines AI-powered chatbot functionality with direct communication with Mainteny staff. Depending on how the service is used, personal data may be processed, in particular:
- message content exchanged via chat,
- contact and communication details (e.g. e-mail address or phone number, if provided),
- technical usage data (e.g. IP address, device information, time of interaction),
- as well as voluntarily provided content such as screenshots or other business-related information shared by users in the context of support communication.
Processing is carried out solely for the purposes of handling customer inquiries, providing support services, improving customer communication, and delivering product-related information.
Crisp processes personal data exclusively on our behalf on the basis of a data processing agreement in accordance with Art. 28 GDPR. Data processing takes place within the European Union. Core infrastructure (databases, messaging servers, APIs) is hosted in the Netherlands, supplementary systems (e.g. plugins) in Germany, and encrypted backups are stored exclusively in Ireland. Crisp does not use the data for its own purposes.
6.2 AI Telephone Assistant
For the receipt and pre-qualification of incoming customer calls, we use an AI-powered telephone assistant operated on the platform of MULTICODE S.R.L., Str. Gării Nr. 9, Bl. L15, Ap. 19, Iași, Romania.
The telephone assistant receives calls, captures the caller's request, and automatically creates a support ticket for processing by our team. Callers are informed at the beginning of the conversation that they are interacting with an AI-powered system and that the call is recorded. By staying on the line, callers consent to the recording. In particular, the following personal data may be processed:
- name and company name of the caller,
- contact and communication data (e.g. phone number, e-mail address),
- call recording or transcript,
- description of the caller's request.
Processing is carried out exclusively for the purpose of handling customer inquiries. The legal basis is Art. 6(1)(b) GDPR (performance of a contract) for existing customers and Art. 6(1)(f) GDPR (legitimate interest in efficient customer communication) for other callers. The legal basis for recording the call is your consent (Art. 6(1)(a) GDPR). You can request the deletion of a recording at any time by e-mail to privacy@mainteny.com.
MULTICODE S.R.L. processes personal data exclusively on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. Primary hosting takes place within the European Union. To the extent that data is transferred to sub-processors in third countries in the course of processing, such transfers are carried out on the basis of the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914). Use of the data for own purposes is excluded.
7. HUBSPOT CRM
We use HubSpot CRM to manage our customer and prospect contacts. The provider is HubSpot Ireland Ltd., 1 Sir John Rogerson’s Quay, Dublin 2, Ireland.
With HubSpot CRM, we manage existing and potential customers and their contact persons and record our communication by e-mail, phone or social media. We use the data to communicate with you and for marketing measures (see sections 11 and 12).
The legal basis is Art. 6(1)(b) GDPR (initiation and performance of contracts) and Art. 6(1)(f) GDPR (legitimate interest in efficient customer management and communication).
HubSpot processes the data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. Transfers to the USA are possible; they are based on the EU Standard Contractual Clauses. HubSpot is also certified under the EU-US Data Privacy Framework. Further information: https://legal.hubspot.com/privacy-policy
8. PAYMENT PROVIDERS
8.1 Chargebee
We use Chargebee for subscription management and billing. The provider is Chargebee B.V., Piet Heinkade 55, 1019 GM Amsterdam, Netherlands (hereinafter Chargebee).
Chargebee enables us to efficiently manage customer subscriptions and handle invoicing and payment processing. Through Chargebee, we can automate billing workflows, manage payment plans, and ensure accurate financial records for our customers. The data collected through Chargebee includes customer contact details, billing information, and transaction history, which are used to manage subscriptions and fulfill payment-related requirements.
Processing is carried out for the performance of a contract (Art. 6(1)(b) GDPR) and to comply with statutory retention obligations (Art. 6(1)(c) GDPR in conjunction with Section 147 AO and Section 257 HGB). Chargebee processes the data as a processor on the basis of an agreement pursuant to Art. 28 GDPR.
For more details, please refer to Chargebee's privacy policy: https://www.chargebee.com/privacy/.
Data transfer is based on the EU Commission's Standard Contractual Clauses. More details can be found here: https://www.chargebee.com/security/#gdpr.
8.2 Stripe
We additionally use the payment service provider Stripe Payments Europe, Ltd., The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland ("Stripe") to process payments. As part of the payment process, Stripe processes personal data such as payment information (e.g. credit card number, bank details), name, billing address, e-mail address, and technical usage data required to complete the transaction.
The legal basis for this processing is Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in secure and efficient payment processing). Stripe may transfer data to affiliated entities in the United States. Stripe is certified under the EU-US Data Privacy Framework and applies additional safeguards.
For more information, please refer to Stripe's privacy policy: https://stripe.com/privacy
9. SOCIAL MEDIA
9.1 LINKEDIN
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Which data is collected?
- user authentication
- targeted articles, posts and advertisements
- analysis and research of user behavior
- passing on to third parties: in addition to the legal obligation to pass data on to authorities, personal data is also passed on to advertisers in anonymized form.
You can adjust your privacy settings in your user account.
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
10. ANALYTICS AND MARKETING TOOLS
10.1 GOOGLE TAG MANAGER
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a tool that we can use to integrate tracking or statistics tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It is only used for the administration and delivery of the tools integrated via it. However, the Google Tag Manager records your IP address, which can also be transmitted to Google's parent company in the United States.
The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in a quick and uncomplicated integration and management of various tools on its website. If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's end device (e.g. device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.
10.2 GOOGLE ADS
The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively, for example by analyzing which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.
The use of this service is based on your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TDDDG. The consent can be revoked at any time.
Data transfer to the USA is based on the EU Commission's Standard Contractual Clauses. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/
10.3 GOOGLE CONVERSION TRACKING
This website uses Google Conversion Tracking. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
With the help of Google Conversion Tracking, Google and we can recognize whether the user has carried out certain actions. For example, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to generate conversion statistics. We learn the total number of users who have clicked on our ads and what actions they have taken. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification purposes.
The use of this service is based on your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TDDDG. The consent can be revoked at any time.
You can find more information about Google Conversion Tracking in Google's privacy policy: https://policies.google.com/privacy?hl=en.
10.4 GOOGLE ANALYTICS
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, length of stay, operating systems used and origin of the user. This data is assigned to the respective end device of the user. There is no assignment to a user ID.
Furthermore, we can use Google Analytics to record, among other things, your mouse and scroll movements and clicks. Google Analytics also uses various modeling approaches to supplement the recorded data sets and uses machine learning technologies for data analysis. Google Analytics uses technologies that enable the user to be recognized for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the USA and stored there. Google Analytics 4 anonymizes IP addresses by default, meaning that no complete IP addresses of users are stored or transmitted to Google.
The use of this service is based on your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TDDDG. The consent can be revoked at any time. Data transfer to the USA is based on the EU Commission's Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
11. NEWSLETTER
NEWSLETTER DATA
If you would like to receive the newsletter offered on the website, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected, or only on a voluntary basis. We use this data for sending the requested information and do not pass it on to third parties.
The processing of the data entered in the newsletter registration form takes place exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You can revoke your consent to the storage of the data and the e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The lawfulness of the data processing operations that have already taken place remains unaffected by the revocation.
The data you have stored with us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter, and will be deleted from the newsletter distribution list after you unsubscribe or once the purpose no longer applies. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest in accordance with Art. 6(1)(f) GDPR.
Data stored by us for other purposes remains unaffected.
After you have been removed from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist if this is necessary to prevent future mailings. The data from the blacklist is only used for this purpose and is not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
12. ADVERTISING AND CUSTOMER COMMUNICATION
We use the business contact details of our customers, prospective customers and business partners (e.g. name, company, job title, address, e-mail address, phone number) to inform them about our products, services and events and to ask for their feedback on our services, for example by post, e-mail, phone or in person. We only send advertising by e-mail or phone where this is permitted by law, e.g. with your consent.
We receive this data from you or from publicly accessible sources (e.g. company websites, commercial register). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in direct marketing and maintaining our customer relationships. Where you have given your consent, the legal basis is Art. 6(1)(a) GDPR. We store the data for this purpose until you object, at most three years after our last contact.
You can object to the use of your data for advertising at any time, e.g. by e-mail to privacy@mainteny.com.
13. YOUR RIGHTS
As a data subject, you have the following rights:
- If your personal data is processed, you have the right to receive information about the data stored about you (Art. 15 GDPR).
- If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR).
- If the legal requirements are met, you can request the deletion or restriction of processing and object to the processing (Art. 17, 18 and 21 GDPR).
- Right to data portability (Art. 20 GDPR).
- If you have given us your consent to the processing of personal data, you have the right to revoke your declaration at any time with effect for the future.
- If you make use of your above rights, we will check whether the legal requirements for this are met.
- With regard to possible violations of your freedom and personal rights through the processing of your personal data, you can lodge a complaint with the competent supervisory authority, the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information), Alt-Moabit 59-61, 10555 Berlin (further information: https://datenschutz-berlin.de).
- You are also welcome to contact us at the address mentioned in section 1.2
Right to object: Where we process your data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. You may object to processing for advertising purposes at any time without giving reasons. An informal message to privacy@mainteny.com is sufficient.