Legal notice · Privacy · Accessibility

Legal notice

Provider

Dietrich Altergott
Pfossertweg 2
77933 Lahr
Deutschland

Contact

info@leistungsblick.de

Privacy

Leistungsblick processes your information about your household, income and housing costs, as well as the results calculated from it, on your device. This information and these results are not transmitted to our purchase server or to Stripe. Before a purchase, your entries remain in the open tab. To process the purchase, the app transmits a random case number and your confirmation that you reside in Germany to our purchase server.

If you purchase a case report, your browser stores the report on this device, including the key information used in it about your household, location, rent and income, as well as the asset information, the random case number, the redemption status and checksums. The language selection is stored independently of this. Reloading the tab does not delete a purchased report. You can use “Remove report from this device” to delete the report and the associated purchase and redemption status from this device. The independently stored language selection remains unchanged.

Before you click to purchase, you are asked for the required consent to begin performance during the withdrawal period. Our purchase server records the time of this confirmation and the fixed version of the consent used. It then creates a Stripe Checkout session containing the random case number, the price, a checksum of the contract version and the return address. The Stripe page opens separately. You enter your email address, billing address and payment details directly with Stripe. After payment, our purchase server receives a payment message signed by Stripe and temporarily reads its complete content for processing. The buyer’s email address contained in it is used to send the contract confirmation via SMTP, currently using Gmail. The contract confirmation and the attached contract documents contain no information about household, income, housing costs, assets or calculation results. Neither the buyer’s email address nor their name or postal address is stored from this in the purchase journal or the delivery queue. Leistungsblick does not store card or bank details. The purchase journal contains the random case number, Stripe purchase and event IDs, payment and redemption status, timestamps, confirmation of residence in Germany, consent and contract versions with their checksums, contract and withdrawal references, delivery evidence and, where applicable, refund or review notes. No automatic deletion is currently configured for this journal. If you use the online withdrawal form, your name, email address, reference and selected language are transmitted to our purchase server for processing and confirmation of receipt. Of these, only the reference or its HMAC verification value and the timestamp are stored in the journal, not your name or email address. The confirmation of receipt is sent to the email address provided via SMTP.

The web server keeps an access log. It contains, among other things, your IP address, the date and time of access and the address you called up. This serves the operation and security of the server. Details about your case are not in it — they never reach the server. We also compile protected visitor statistics on our own server from successful requests for public pages. To estimate visitors per day, IP addresses and browser identifiers are processed only during analysis using changing temporary identifiers. Only totals for up to 31 calendar days and fixed source categories, such as Instagram, are stored. Full addresses and link parameters, IP addresses, browser identifiers and temporary identifiers are not included in the statistics. Case details and payment routes are not analysed. No additional cookies or tracking scripts are used for this, and no data is sent to an external analytics service.

Optional usage statistics

Only with your consent, we count benefit areas opened, broad steps, error messages and purchase clicks, a broad traffic source and narrow/wide view. No input values, results, payment data or screen recordings. Processing on our own Netcup server in Germany, without external analytics services. A random visit key stays only in tab memory and is deleted on the server within 24 hours; aggregate counters remain for at most 31 days. Your choice is stored in session storage for this tab. Withdraw at any time via “Change statistics”. Measurement then stops and we send a deletion request for the current visit key; existing aggregates remain. IP addresses and browser identifiers are not logged at the statistics endpoint. Separate server logging is described above. Basis: consent (GDPR Art. 6(1)(a); TDDDG § 25(1)).

You have the right to information, correction, deletion, restriction of processing, data portability and objection, as well as the right to complain to a supervisory authority. For that, contact the address given in the legal notice.

Accessibility

This statement describes the actual state, not a goal. An external audit for conformity with the WCAG or EN 301 549 has NOT taken place so far. The details below come from our own automated checks.

Checked automatically and kept that way: labelling of the controls, keyboard access to the flows, error messages tied to the field they belong to, and the display on narrow screens without horizontal scrolling.

Not checked so far: contrast ratios across the whole surface, behaviour with screen readers in all flows, and how understandable the texts are against a fixed language level. If you notice a barrier, write to us at the address given in the legal notice.