Politique de confidentialité

Last updated: 4 October 2026

1. Who is responsible

The controller for data processing on this website and in the Saldiqo app (app.saldiqo.com, also as an installable app and as a program for Mac and Windows) is:

Marlon Güttler, Saldiqo
c/o BFG Mediagroup, Bändelstockweg 20
88326 Aulendorf
Germany
Email: contact@saldiqo.com

You can reach us at this address with any question about data protection.

You can also reach this policy and the other legal pages at app.saldiqo.com/privacy, /legal-notice, /terms and /en/cookies (you will be forwarded to this website).

We have not appointed a data protection officer.

2. Website

Hosting

The website is operated by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus (server location: Frankfurt am Main, Germany). To deliver a page to you, the server technically processes your IP address and the requested address. We do not keep access logs for this. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is being able to deliver the website. We have a data processing agreement with the provider.

Cookies, third-party content and campaign parameters

The website does not set any cookies itself and contains no analytics tools and no advertising pixels. Fonts and images are hosted on our own server. No content is loaded from third parties.

If you reach the website via a link with campaign parameters in the address (utm_source, utm_medium, utm_campaign, utm_term, utm_content or ref), a script on the website adds these values to the links to the app in your browser. The website does not store anything for this (no cookie, no local storage) and does not send anything to us or to third parties; it does not pass on click identifiers from advertising providers (for example gclid). What the app does with these values is described in section 3 (“Campaign source”). Advertising pixels only exist on the public pages of the app and only after your consent (section 3).

Hint about the country page

If your browser’s time zone matches a country that has its own page, we show you a hint about it. The time zone is only evaluated in your browser and is not sent to us. If you dismiss the hint, your browser remembers the country in local storage (see the cookie notice) so that the hint does not come back.

Contact by email and contact form

If you write to us, including through the contact form at app.saldiqo.com/kontakt (name, email address and message), we process your message and your contact details in order to reply (Art. 6(1)(b) or (f) GDPR). We delete the message once the request has been dealt with and no statutory retention obligations apply. The contact form only forwards the message to us by email; it is not stored in the app. To prevent abuse, the server briefly counts submissions per IP address and per email address in memory (for one hour at most).

3. Public pages of the app: cookie notice, advertising pixels and campaign source

Public pages of the app are the pages you see without signing in, for example the home page, sign-up, sign-in, app download and legal pages. This section only applies there. We only load advertising pixels on public pages without input forms: the home page, app download and legal pages (legal notice, privacy policy, terms of service, cookie notice). No pixels run on sign-in and sign-up, so that no provider can capture what you enter in forms; if you move there from a page with pixels loaded, the app reloads the page so that the pixels are removed completely. If you are signed in, no advertising pixels are loaded; the app also reloads the page when you move into the signed-in area. On pages with one-time links (resetting your password, confirming your email address, accepting an invitation) no pixels run, and the server does not allow them there either.

Cookie notice

If pixels are set up, we ask on your first visit to a page where pixels may run (home page, app download, legal pages) whether you allow marketing cookies and pixels. On sign-in, sign-up and pages with one-time links the notice does not appear by itself, because no pixels run there. “Necessary only” and “Accept all” are shown with equal weight, and nothing is preselected. Your browser stores your choice in local storage, together with the providers the notice named at the time, the version of the notice, the language and the time. If a provider is added or the text of the notice changes, we ask again; until then we do not load any pixels. You can change or withdraw your choice at any time via the “Cookies” link (cookie settings) at the bottom of the home page and the download page of the app. If no pixels are set up, the notice does not appear by itself; the link then only shows that we use strictly necessary storage.

Advertising pixels (only with consent)

If you choose “Accept all”, we load the pixels of the advertising providers we have set up on the public pages without input forms (see above). The cookie notice names the ones currently active. Possible providers are:

• Meta Pixel from Meta Platforms Ireland Ltd., Ireland (Facebook, Instagram),
• Google tag (gtag.js, Google Analytics or Google Ads) from Google Ireland Ltd., Ireland,
• TikTok Pixel from TikTok Technology Ltd., Ireland.

The purpose is to measure which ads bring visitors to us. For this, your browser transmits directly to the provider concerned: the page visited including its address (including campaign parameters), your IP address, information about your browser and device, the time, an identifier from the provider’s cookies and the event “page viewed”. The pixels do not report sign-ups. The pixels may themselves evaluate click identifiers in the address (for example fbclid, gclid, ttclid). We do not transmit your name, email address or other account data to the providers. Personalised advertising is switched off for Google. If we use Google Ads, the Google tag also remembers whether you came via an ad on Google, so that later events can be attributed to that ad (conversion measurement). For this, your browser also calls Google addresses, for example googleadservices.com, googleads.g.doubleclick.net, ad.doubleclick.net, pagead2.googlesyndication.com and google.com, and Google may read or set cookies on these domains (see the cookie notice).

The providers also process the data under their own responsibility, for example to measure and improve their advertising services. If you are signed in with a provider, it can link the visit to your account there. We may be jointly responsible with the provider for collecting and transmitting the data when the page is viewed (Art. 26 GDPR); the providers make the relevant agreements available in their business terms. The providers may transfer data to the USA and other third countries (see section 8). No advertising pixel is currently set up, so the cookie notice does not appear by itself. Before we set up a provider, we will state here our role in relation to that provider and the basis for transfers to third countries.

The legal basis is your consent (section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future via “Cookie settings”; after that the app no longer measures anything. You can delete cookies already set by the providers in your browser.

Campaign source

If you reach us via a link with campaign information, the app reads the following from the address or the browser: the campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content), a referral parameter (ref), which kind of click identifier was present (for example “gclid”, but not its value), the domain of the referring website and the landing page. We never store click identifiers themselves.

• Without consent, this information only stays in memory while the page is open.
• With consent (“Accept all”), your browser remembers the first source in local storage for up to 30 days, so that it still counts if you sign up later. If you withdraw your consent (“Necessary only”), the remembered source is deleted in your browser.
• If you sign up, we send this information along and store it with your account. This lets us see, in aggregate, which campaigns bring sign-ups. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is measuring the success of our advertising. You can object to this at any time (section 11). We delete the information together with your account.

4. Your account in the app

Registration and account

For your account we store your first and last name, your email address, optionally your phone number, your password (only as an irreversible hash), your language, when you accepted which version of the terms and that you confirmed you act as a business and are at least 18 years old, and the details of your two-factor sign-in (see “Sign-in and security”). If you create a company, we store its master data, for example name, legal form, address, tax number and bank details, as well as your set-up answers. The legal basis is the performance of the user agreement (Art. 6(1)(b) GDPR).

To prevent the free service from being misused with multiple accounts, we reject disposable addresses and addresses with a “+” suffix and also store a normalised form of your email address. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protection against misuse.

Confirmations, consents and proof

When you register, you confirm with one checkbox that you act as a business (entrepreneur under section 14 BGB), on behalf of a business, or on behalf of an association, a foundation or another organisation, not as a consumer, and are at least 18 years old, that you accept the terms including the data processing agreement and that you have read this privacy policy. If you create a company at the same time, the savings check is switched on for it (section 5, terms section 5(1)). It is part of the service for that company, not a consent. There is no separate checkbox or separate notice for it at registration; you find it in the terms and here. We point out your right to object to it at any time in a separate notification at the latest with the first savings check communication. For anyone joining a company via an invitation, the savings check is not switched on.

We only ask for consents individually and without preselection, for example for passing your contact details on to a partner when you make a request. Saldiqo remains fully usable without consents. We store every confirmation, consent, withdrawal and objection with the time, the version and wording of the text shown, where it was given (for example registration or profile), the type of entry (contract, consent, withdrawal, objection or savings check as part of the service) and, at registration, the version of the terms you accepted (which is also the proof for the savings check from registration). We also store that we pointed out your right to object to the savings check, with the time, version, language and wording of the notification, without the IP address. All of this serves as proof (Art. 5(2), Art. 7(1), Art. 6(1)(c) GDPR). We only store the IP address from which you made the entry for consents and their withdrawal, not for the other entries (for example the confirmation at registration or an objection) and not for the notification about your right to object. For entries made before this version, partly only the version is stored, not the wording. You can withdraw or object at any time in your profile under “Privacy, savings check & consents”.

Sign-in and security

After you sign in, we set a session cookie (see the cookie notice). For each session we store the IP address and browser identifier so that you can see your active sessions and end unknown ones. We delete this information as soon as the session ends, at the latest after 7 days. To protect against attacks from other websites, the server checks the origin and a dedicated security header on every request that changes data.

To sign in, you need a second factor in addition to your password: a passkey or an authenticator app. If you set up an authenticator app, we store the shared secret key in our encrypted database. If you create a passkey (for example with Face ID, Touch ID, a fingerprint, your device PIN or Windows Hello), your device creates a key pair and keeps the private key. We only store the public key, the identifier of the passkey, the name you give it (for example “iPhone”), the type identifier reported by the device (AAGUID), whether the passkey can be synced between your devices, a counter and when you created and last used it. Your fingerprint, your face and your device PIN never leave your device: your device checks them itself and only tells us that you approved the passkey. For passkeys we use a random identifier that contains neither your email address nor your account number. For every sign-in and every new passkey we create a one-time random value that expires after five minutes. We show you backup codes for emergencies only once; we store them only as irreversible hashes and note when a code was used. We delete passkeys when you remove them in your profile, backup codes when you create new ones, and all of it when you delete your account. The legal basis is the performance of the user agreement (Art. 6(1)(b) GDPR) and our legitimate interest in the security of your account and of our service (Art. 6(1)(f) GDPR).

We log security-relevant events (for example sign-ins, failed attempts, password and two-factor changes, passkeys created and removed, backup codes used and created, changes to consents, invitations) with the time and IP address and delete them after 90 days. You can see your own events in your profile. Owners and admins of a company can see, in the company’s security log, the events that concern that company (for example invitations, role changes and exports), but not the sign-ins, registrations or partner requests of other members, and not the IP addresses of other people. We also delete actions of the operators in platform administration, for example role changes and time-limited support access, after 90 days. To fend off attacks, we briefly count requests per IP address in memory. We do not keep access logs of individual page views. The services on our server (app, website, mail server and the web server in front of them) write technical error and operating messages to logs that are kept only on this server; we do not use an external log service. In individual cases the messages may contain personal data, for example an IP address or an email address to which an email could not be delivered; the mail server log contains the sender and recipient address, time and delivery status of every email. The logs of the app and the website are limited to 50 MB per service: once that size is reached, the oldest entries are deleted, and they are also deleted when a new version is installed. We delete the logs of the mail server and the web server in front after 30 days at the latest; they are also limited to 30 MB per service. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the security of your account and of our service.

Emails from us

Without further consent, we only send you emails that are part of using the service: confirming your email address, resetting your password, invitations, reminders about setting up your company (Art. 6(1)(b) GDPR), and messages about reports and decisions in the template market (section 5). For the newsletter see section 5.

Checking email addresses

When you enter an email address, we check whether it probably contains a typo and whether the domain can receive email. For this we only look up the domain name (the part after the @) in the public DNS. The address itself is not passed on.

Multiple companies, team and invitations

With one account you can manage several companies and invite other people with roles (for example admin, accounting, support or tax adviser with read-only access). If someone invites you to a company, we store your email address, the intended role and who invited you. If you do not accept, the invitation expires after 14 days; we delete answered or expired invitations after 90 days. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest of the inviting company is working together as a team.

Notifications

In the app we show you notifications, for example new savings check hints, reactions to your templates in the template market or messages about reports. With the first savings check notification you receive, once, a separate notification about your right to object (section 5). Notifications remain stored until you delete them or delete your account. We also delete savings check notifications as soon as you switch the savings check off.

Program for Mac and Windows

The program for Mac and Windows shows the app (app.saldiqo.com) in its own window; everything this policy says about the app applies. On your computer the program only stores the size and position of the window and, like a browser, the session cookie and your settings listed in the cookie notice. The app cannot use the camera, microphone, location or notifications in the program. On macOS the program uses the operating system’s built-in spell checker. On Windows the spell checker is switched off; the program does not download any dictionaries for it. There is currently no automatic update; the program does not contact an update server.

5. Savings check, partner offers and other features

Savings check

The savings check is part of the service. For new accounts it is switched on from registration for the company you create when registering; this is governed by the terms (section 5(1)), which you accept with the one checkbox at registration. There is no separate checkbox or separate notice for it at registration. Its purpose is to show you where your company probably pays too much. For it, Saldiqo automatically analyses, once a week, the expenses and outgoing bank transactions of the last 12 months (supplier or counterparty, payment reference, category, amount, date) and the invoiced revenue of the current year. Fixed keyword rules recognise topics such as insurance, phone and internet, energy, bank fees, software or tax advice and estimate where you probably pay too much. You see the hints on the “Savings check” page in the app and as a notification (bell), not on your company’s start page and not in the company overview.

• For which companies: The default only applies to the company you create when registering. For other companies in which you are an owner or admin, the savings check only runs if you switch it on there yourself; never for companies in which you only have the accounting, support or tax adviser role. Anyone who creates an account via an invitation does not have it switched on. If the owner of a company they created with the savings check has switched it off, it does not keep running for their companies through an admin either.
• Our role: We carry out the analysis as a processor for the company concerned under the data processing agreement (Art. 28 GDPR). The savings check being switched on for the company created at registration is an instruction under § 5(1) of the terms of service; switching it off is a counter-instruction that applies immediately. The company is the controller for the transaction data (section 6). We do not use the analysis for our own purposes: we do not build profiles from it for ourselves, do not evaluate who receives which hints and pass nothing on. We only pursue our own purposes once you request a partner offer yourself (see “Partner offers”).
• The analysis and its results stay in Saldiqo, in the database of the company concerned. As examples we only keep names of payees that themselves contain a keyword of the rule (for example “Stadtwerke …”). Which hints you see depends only on the company’s data, not on whether there is a partner for a topic.
• Health insurance: Payments to health insurers can allow conclusions about health (Art. 9 GDPR). We therefore only show this hint if you switched on the savings check with your consent in version 2026-10-07.5 or later (only that text names health insurance), not with the default from registration. Social security contributions for employees (recognisable, for example, by the payment reference “Beitragsnachweis”) do not count.
• This is automated analysis (profiling within the meaning of Art. 4(4) GDPR), but not an automated decision with legal or similarly significant effects under Art. 22 GDPR: you only receive non-binding hints and decide for yourself.
• Our commercial interest: If you request a partner offer yourself through a hint or sign up for something via a partner site, the partner may pay us for it (see “Partner offers”). This is how we finance free use. We only show the partner for a hint and its offer once you choose “View offers (ad)”; they are marked as advertising. We do not sell or pass on transaction data or amounts from the savings check.

Objecting to the savings check: You can object to the savings check at any time without giving reasons, including the partner offers in the hints (advertising, Art. 21(2) and (3) GDPR): using “Switch off savings check” on the “Savings check” page, via the notification about your right to object in the bell (clicking it opens “Switch off savings check”) or in your profile under “Privacy, savings check & consents”. We point this out in a separate notification, apart from the hints, at the latest with the first savings check communication (Art. 21(4) GDPR); on the “Savings check” page the notice is always shown. If you switch it off, the weekly analysis stops for you and we delete your savings check notifications. For a company you created with the savings check, and for your other own companies, it ends immediately, even if an admin switched it on. We delete a company’s saved hints as soon as the savings check no longer runs there. All other features remain unchanged. You can switch it on again in your profile; this then counts as your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

We have not switched it on for accounts created before this version. For them, and for further companies, the savings check only runs if you agree to it in the app. That agreement is a consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future; at the same time it instructs us, on behalf of the company, to carry out the analysis. It applies to the companies in which you are an owner or admin.

Partner offers

For a hint, you can request an offer from a partner. Only if you click “Request offer” yourself and agree in the dialog to sharing with the partner named there with name and address do we store a request with your name, your email address, your phone number (only if you chose a call), the company name, the topic (for example “Electricity & gas”), the time and the proof of your consent (time, version and wording of the text, IP address, partner, channel). We pass this information on to a selected partner for that topic so that they can contact you by email or phone with an offer. Identical requests on the same topic within 30 days are combined.

• Partners are banks and finance brokers, software providers, and telecom and energy providers. We do not pass on requests on health insurance or tax advice, nor, until the legal position has been clarified, on other insurance.
• The dialog “Request offer” names the partner who will receive the request, with name and address, before you agree. If no partner is entered for a topic, you cannot request an offer on it.
• Partners never receive transaction data, amounts from the savings check or any other data of your company.
• The partners process the data under their own responsibility in accordance with their own privacy notices. Partners may pay us a fee for requests passed on to them; this is how we finance free use.
• With “View partner site (ad)” you open a partner’s page without us passing on any data. The partner’s privacy notice applies there.

The legal basis is your consent (Art. 6(1)(a) GDPR). If you withdraw it, we pass on no further requests. Data already passed on is held by the partner; please contact the partner to have it deleted. If you delete your account, we delete requests that have not yet been passed on; for requests already passed on we remove name, email address, phone number and company name and only keep the topic, time, status and proof of consent.

Retention periods for requests: We check requests automatically on a regular basis. We delete requests that were not passed on 24 months after the request, or 30 days after a withdrawal. For requests passed on, we remove name, email address, phone number, company name and note 24 months after the request, or at the latest 30 days after a withdrawal. This also applies if we have not yet reported the withdrawal to the partner; the report uses the request number. We delete the remaining proof of consent without contact details 5 years after it was passed on.

Newsletter

We do not currently send a newsletter and do not offer one at registration. If you agreed earlier, we only keep that proof; you can withdraw at any time in your profile under “Privacy, savings check & consents” or by emailing us. If we introduce a newsletter, we will describe it here beforehand and ask for your consent separately (Art. 6(1)(a) GDPR, section 7(2) UWG).

Template market

In the template market, signed-in users can share, rate and comment on design templates for documents. If you publish a template, it only contains design values (for example fonts, colours, layout), no company data, no logo and no letterhead. As the author, we show all signed-in Saldiqo users your first name and the first letter of your last name (for example “Erika M.”). Your comments are shown the same way. If you rate or comment on someone else’s template, the author is told so with this short name. You can delete your own templates and comments at any time; we also delete them with your account (for the stored state of reported content see “Reports”). We may remove content that breaks the template market rules. The legal basis is Art. 6(1)(b) GDPR (providing the template market at your request).

Confirmations when publishing: Before publishing, you confirm that you hold the necessary rights to the template and that it contains no data of third parties, and you grant the right of use under the terms of service. As proof, we store your account, the time, the version, language and wording of the confirmed texts and the name of the template, but no IP address. The proof remains even if you delete the template, because users who adopted it may continue to use it; we delete it with your account. The legal basis is Art. 6(1)(b) and (f) GDPR; our legitimate interest is being able to prove the grant of rights.

Reports: If you report a template or comment, we store your account, the reason, your explanation, your good-faith confirmation, optionally a different email address, the time and, as evidence, the state of the reported content (name and description of the template or text of the comment and the author’s short name). You receive the confirmation of receipt and the outcome in the app and by email to your account address or the address you entered. Only the operators of Saldiqo see the report; they are notified of new reports without the email containing the report text. If we remove content, we tell the person concerned that and why it was reported and removed, but as a rule not who reported it. We record every decision in the security log. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 16 and 17 of the Digital Services Act (notice and action, statement of reasons) and Art. 6(1)(f) GDPR; our legitimate interest is keeping the template market free of unlawful content and rule violations.

Hiding users: If you hide a person, we store whom you hid and when, so that you no longer see their content, they no longer trigger notifications for you and cannot comment on your templates. The person is not told. You can undo this at any time; we delete the entry with your account or theirs (Art. 6(1)(b) GDPR).

Retention in the template market: We delete decided reports, including the explanation, email address and stored state of the content, 12 months after the last decision (including a decision on an objection); open reports remain until we have decided. If you delete your account, we remove any different email address you entered immediately; the report itself remains until the end of the period without being linked to your account. If the author deletes the reported content or their account, the stored state also remains until the end of the period so that the decision stays traceable. We delete comments we removed 12 months after removal; templates we removed are visible only to you until you delete them or your account.

6. Data you manage in Saldiqo

In Saldiqo you manage data about your customers, suppliers and contact persons: contacts, quotes, invoices and e-invoices, bank transactions, expenses, receipts and support requests. You or your company are the controller for this data. We process it exclusively on your behalf and according to your instructions (Art. 28 GDPR), including in the savings check (section 5). The details are set out in our data processing agreement, which forms part of the terms and conditions.

If you send invoices or quotes through Saldiqo, they go to the recipients you choose, with the sender “Your company via Saldiqo”. Replies go to your company’s email address.

If you are a customer of a company that uses Saldiqo and have questions about your data, please contact that company directly. We support them in answering.

Public help centre

Companies can offer a help centre through Saldiqo where their customers send requests and read replies. We also process this data (name, email address, message, attachments) on behalf of the company concerned. We send confirmations and replies by email on behalf of the company.

7. Who receives your data

We only pass on data if this is necessary for operating the service, you have consented or the law requires it:

• Hosting: Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, server location Frankfurt am Main, Germany (processor).
• Sending emails: our own mail server on our server at Hostinger International Ltd. (address under hosting), place of processing Germany (processor).
• Backups and logs: our encrypted backups and the operating and security logs are currently kept only on our server at Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. We do not use any other provider for backups, keys or logs. If one is added, we will name it here.
• AI assistant: currently not set up. If we set it up, we will first name the provider and the details in section 5.
• Advertising providers Meta, Google and TikTok: only with your consent in the cookie notice and only on public pages of the app (section 3).
• Partners: only with your consent and only after your request (section 5).
• Authorities and courts: only if we are legally obliged to do so.

We do not sell transaction data and we do not pass on your customers’ data for our own purposes.

8. Transfers to third countries

Our servers are located in Frankfurt am Main, Germany. Data may be processed outside the EU/EEA in the following cases:

• Advertising pixels (only with consent): no advertising pixel is currently set up. Meta, Google and TikTok may transfer data to the USA and other third countries. Before we set up one of these providers, we will state here what the transfer is based on for that provider, for example the European Commission’s adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR) or the EU standard contractual clauses (Art. 46(2)(c) GDPR).
• AI assistant: currently not set up. If we set it up, we will first state the provider, its location and the basis for the transfer.

9. How long we keep data

• Account data, proof of confirmations, consents, withdrawals and objections, proof of the notice of the right to object to the savings check, and campaign source: for as long as your account exists.
• Sessions: until you sign out, after 12 hours of inactivity, at most 7 days.
• Security log: 90 days, including actions of the operators. Error and operating messages: as stated in section 4. Invitations: valid for 14 days, then stored for at most 90 days.
• AI assistant: currently not set up. If we set it up, we will first state how long we and the provider keep data relating to it.
• Partner requests: contact details for at most 24 months, at most 30 days after a withdrawal; the proof of consent without contact details for at most 5 years after it was passed on. If you delete your account before then, section 5 applies.
• Templates, comments and ratings in the template market: until you delete them or your account; comments we removed 12 months after removal. Proof of confirmations when publishing and hidden users: for as long as your account exists.
• Reports in the template market: 12 months after the last decision; a different email address at most until you delete your account (section 5).
• Savings check results: in the company’s database; they are overwritten weekly and deleted as soon as the savings check no longer runs for the company (after an objection or withdrawal, when no owner or admin uses it there any more or roles change), at the latest together with the company. Savings check notifications, including the notification about the right to object: until you delete them, at the latest until you switch the savings check off.

If you delete your account, we remove the data from the live system immediately. Exceptions: entries in the security log (with IP address) remain stored until the end of the 90 days, so that misuse can be investigated (Art. 6(1)(f) GDPR); for partner requests and reports in the template market, section 5 applies. Companies of which you are the owner are deleted with all their data and their key. In companies owned by others, only your membership ends; your name remains in the database of these companies (so that documents and requests continue to show it) and in their change log so that bookings stay traceable. We remove your email address there. Data remains in our encrypted backups until the backup concerned is deleted. We back up daily and keep the backups of the last 14 days and one backup per month for the last 12 months. No backup is older than 400 days; deleted data has therefore disappeared from the backups after 400 days at the latest. Statutory retention obligations (for example for invoices we issue to you) take precedence; in that case we block this data for any other use.

You fulfil your own retention obligations for invoices and receipts yourself (in Germany usually 8 to 10 years). Please export your data before you delete a company or your account.

10. Security

All connections are encrypted with HTTPS. Every company has its own database with its own key (AES-256). Backups remain encrypted. We store passwords only as hashes. Every account is protected with a second factor (passkey or authenticator app). The service worker of the installable app only stores program files, fonts and icons, no financial data. Further measures are described in Annex 1 of the data processing agreement.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can do much of this directly in the app: change or export data (a company’s data in its settings, the data linked to your account in your profile under “Export my data”), withdraw consents or delete your account. For anything else, an email to contact@saldiqo.com is enough.

Withdrawing consent: You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR): cookies and pixels via “Cookie settings”, sharing with partners, a savings check you switched on yourself and a newsletter you subscribed to earlier in your profile under “Privacy, savings check & consents”. Processing before the withdrawal remains lawful.

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, for example the campaign source, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). You can object to the savings check, including the partner offers in the hints (advertising), at any time without giving reasons: using “Switch off savings check” on the “Savings check” page, via the notification about your right to object or in your profile (section 5).

You can also lodge a complaint with a data protection supervisory authority, for example where you live, where you work or where we are based (Art. 77 GDPR).

12. Required information, profiling, no automated decisions

Without your name, email address and password and without the confirmation at registration (business or acting on behalf of one, at least 18 years old, terms including the data processing agreement, privacy policy), we cannot create an account for you. All other information is voluntary, although you need some of it for valid invoices. Profiling only takes place in the savings check, which we carry out as a processor for the company; you can object to it at any time (section 5). We do not make automated decisions with legal or similarly significant effects under Art. 22 GDPR.

13. Changes

If our data processing changes, we will update this policy. We will inform you about significant changes in the app or by email. If we need your consent for something new, we will ask you beforehand.

This is an English version of our German privacy policy (Datenschutzerklärung). Both say the same.