Privacy Policy for the Donnerberg App

Last updated: November 2, 2026

1. Data Controller

The party responsible for the processing of personal data in connection with the Donnerberg App is:

Svetozar Grbic
Donnerberg
Von-Werthern-Str. 4a
96487 Dörfles-Esbach
Germany
Telephone: +49 89 215400980
Email: info@donnerberg.net

Further legal information can be found in our Legal Notice.
This privacy policy applies to the new Donnerberg App for iOS and Android. A separate privacy policy applies to our online shop at www.donnerberg.net.

2. Purpose and Functions of the App

The Donnerberg App provides information about Donnerberg products, in particular massage chairs and other wellness and fitness products.
Its functions include:

• Displaying products and product information

• Providing video instructions

• Access to wellness and relaxation content

• Selecting the preferred language

• Registration and login

• Simplified guest access without entering a personal email address

• Managing personal app settings

Some content is provided by third-party services.

3. User Accounts and Guest Access

Registration with a User Account

Users can create a regular user account.
In particular, the following data are processed:

• Name

• Email address

• Username, if used

• Login credentials

• Preferred language

This data is used to create and manage the user account and to provide the app's functions.
The legal basis is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures).

Simplified Guest Access

The app also offers simplified guest access.
For this purpose, the user can enter a name. A personal email address and a self-selected password are not required for this access.
To technically provide guest access, the app automatically creates a user account with technical login credentials.
This data is used exclusively to provide guest access, manage the session, and store personal app settings.
Guest access is also technically linked to a user account. Therefore, the relevant data can be stored in the app's database.
The legal basis is Art. 6(1)(b) GDPR.

4. Language Settings

The Donnerberg App supports German and English.
The selected language is assigned to the user account or guest account. This allows the preferred language to be used again in subsequent use, as long as the respective account or session is available.
This processing serves to provide the language settings requested by the user.
The legal basis is Art. 6(1)(b) GDPR.

5. Technical Provision by Adalo

For the technical development and provision of the app, we use the Adalo platform provided by Adalo, Inc., USA.
Adalo provides functions in particular for user management, authentication, database management, and the provision of app content.
In this context, the following data may be processed:

• User account data

• Technically generated login credentials

• Language settings

• Technical connection data

• IP address

• Information about the device, operating system, and use of the app, to the extent that this is technically necessary

Adalo processes the personal data stored in the app as part of the technical provision of the service.
The processing serves to provide the app and its functions, as well as to ensure technical security and stability.
The legal basis is Art. 6(1)(b) GDPR, to the extent that the processing is necessary to provide the functions requested by the user, and Art. 6(1)(f) GDPR for measures to ensure technical security.
Further information can be found in the Adalo Privacy Policy.

6. International Data Transfer

When using Adalo and, if applicable, other technical service providers, personal data may be processed outside the European Union or the European Economic Area, in particular in the USA.
Where such transfers are required by law, appropriate safeguards pursuant to Art. 44 et seq. GDPR must be in place. These may include adequacy decisions by the European Commission or standard contractual clauses.
Further information about processing by Adalo is available in the provider's privacy information.

7. Technical Connection Data and Operational Security

When using the app, technically necessary information is transmitted between the end device and the services used for operation.
This may include, in particular:

• IP address

• Date and time of requests

• Requested content

• Technical information about the device and operating system used

• Information about the processing of requests and technical errors

This data may be processed to provide content, troubleshoot, ensure operational security, and protect against misuse.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of the app.

8. YouTube Videos

The Donnerberg App provides video instructions and wellness content via YouTube.
YouTube is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When loading the embedded YouTube player or playing a video, a connection may be established with servers operated by Google or YouTube.
In particular, the following information may be transmitted:

• IP address

• Device and browser information

• Information about the video content accessed

• Technical usage and connection data

Data processing outside the European Union, in particular in the USA, is possible.
Where consent is required to load YouTube content, the embedding is based on Art. 6(1)(a) GDPR and the relevant privacy protections for end devices.
Consent may be revoked at any time with future effect.
Further information can be found in the Google Privacy Policy.

9. External Links and Online Shop

The app may contain links to external websites, in particular the Donnerberg online shop.
When opening such a link, the privacy policy of the respective website operator applies.
For the Donnerberg online shop, privacy information can be found at www.donnerberg.net.

10. Retention Period

Personal data is only stored for as long as it is required for the purposes stated above or as long as statutory retention obligations exist.
User account data is generally processed for the duration of use of the respective account.
Data may also be retained for guest accounts for as long as the technically created account exists.
After a valid account deletion, the associated personal data will be deleted unless its further retention is required by law or for another legally permissible reason.
Technical connection and security data are only retained for as long as necessary for their respective purpose.
The retention period with third-party service providers is additionally subject to their respective technical and contractual provisions.

11. Deletion of the User Account

Users may request the deletion of their Donnerberg App user account.
This applies to both regularly registered user accounts and technically created guest accounts.
To exercise this right, users may send a request to the following address:
info@donnerberg.net
Please state that the request concerns the Donnerberg App and provide us with the information required to identify the account in question.
We process deletion requests in accordance with legal requirements.
Unless statutory retention obligations or other legally permissible reasons prevent it, the user account and the associated personal data will be deleted.

12. Rights of Data Subjects

Data subjects have, subject to statutory requirements, in particular the following rights:

• Right of access (Art. 15 GDPR): Access to information about the processing of their personal data

• Right to rectification (Art. 16 GDPR): Rectification of inaccurate data

• Right to erasure (Art. 17 GDPR): Erasure of personal data

• Right to restriction of processing (Art. 18 GDPR): Restriction of data processing

• Right to data portability (Art. 20 GDPR): Receipt or transmission of provided data
  

• Right to object (Art. 21 GDPR): Objection to processing based on legitimate interests

Where processing is based on consent, it may be revoked at any time with future effect.
Requests may be sent to info@donnerberg.net.
Furthermore, pursuant to Art. 77 GDPR, there is a right to lodge a complaint with a data protection supervisory authority.

An example of a competent supervisory authority is:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
Email: poststelle@lda.bayern.de

13. Security of Data Processing

We implement appropriate technical and organizational measures to protect personal data.
These include measures to restrict access, manage user permissions, and secure the technical provision of the app.
When using third-party service providers, we take into account their technical and organizational security measures.
However, complete protection against all risks cannot be guaranteed.

14. Changes to This Privacy Policy

We may adapt this privacy policy if the functions of the app, the service providers used, or the legal requirements change.
The current version will be published on our website.

Donnerberg – November 2026

Legal Notice · Donnerberg Website