Privacy Policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

[Clean Bubble GmbH]
[Musterstraße 12]
[80331 München, Germany]
E-Mail: privacy@clean-bubble.de

If a data protection officer has been appointed, you can reach them at [dpo@clean-bubble.de].

We process personal data only to the extent necessary to provide our service. This may include:

• Account data: name, email address, password hash, phone number.
• Order data: pickup address, time window, list of garments, special instructions.
• Payment data: transaction ID, amount, status (full card or account details are processed exclusively by our payment provider).
• Technical data: IP address, browser type, device data, access times, referrer.
• Communication data: contents of emails or support requests.

We process your data on the following legal bases:

• Art. 6 (1) (b) GDPR — performance of the cleaning and pickup contract.
• Art. 6 (1) (c) GDPR — compliance with legal obligations (e.g. commercial and tax retention).
• Art. 6 (1) (f) GDPR — legitimate interest in operating, securing, and improving the service.
• Art. 6 (1) (a) GDPR — consent, e.g. for optional cookies or newsletters.

Where necessary, we share data with the following categories of recipients:

• Cleaning partners and courier services to fulfil your order.
• Hosting and infrastructure providers (e.g. [Hosting Provider]).
• Payment service providers (e.g. [Stripe, PayPal]).
• Tax advisors, auditors, and authorities, where legally required.

We have entered into Article 28 GDPR data processing agreements with all processors.

Transfers of your data to countries outside the EEA only take place where an EU adequacy decision exists or appropriate safeguards (e.g. EU Standard Contractual Clauses) are in place.

We retain personal data only as long as necessary for the relevant purposes.

• Account data: until account deletion.
• Order and invoice data: up to 10 years (commercial and tax retention).
• Server logs: typically 14 days.

We use technically necessary cookies to provide the service (e.g. session management, login). Optional analytics or marketing cookies are only set with your consent, which you can withdraw at any time via the cookie settings.

Under Articles 15–22 GDPR you have the following rights in particular:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to withdraw consent (Art. 7(3)) with effect for the future

An informal message to privacy@clean-bubble.de is sufficient to exercise these rights.

Without prejudice to any other remedy, you have the right to lodge a complaint with a supervisory authority. The competent authority is the [Bavarian Data Protection Authority] and any other competent authority in the place of your residence or the alleged infringement.

Our service is not directed at persons under the age of 16. We do not knowingly collect personal data from minors.

We may update this Privacy Policy if our services or applicable law change. The current version is always available on this page.