Privacy policy

Last updated: October 2026

This privacy policy explains which personal data we process when you visit our website teamkarte.com and when you use our Teamkarte service, for what purposes, and which rights you have. In case of doubt, the German version applies.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Michael Schilling (sole proprietorship)
Bachstr. 6
52134 Herzogenrath, Germany
E-mail: hey@teamkarte.de

Please send any questions about data protection to: datenschutz@teamkarte.de

2. Your rights

You have the following rights at any time:

  • access to your data stored by us and its processing (Art. 15 GDPR),
  • rectification of inaccurate personal data (Art. 16 GDPR),
  • erasure of your data stored by us (Art. 17 GDPR),
  • restriction of processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
  • objection to the processing of your data (Art. 21 GDPR) and
  • data portability if you have consented to the processing or concluded a contract with us (Art. 20 GDPR).

You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). You can change your consent to cookies and similar technologies at any time via the “Cookie settings” link in the footer of every page.

You have the right to lodge a complaint with a data protection supervisory authority, e.g. the authority of your place of residence or the authority responsible for us, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Germany).

3. Server log files

When you visit our website, your browser automatically transmits information that is stored in server log files:

  • IP address,
  • date and time of access,
  • requested page or file and amount of data transferred,
  • referrer URL (the previously visited page),
  • browser type and version as well as operating system.

We process this data to deliver the website, to ensure its stable and secure operation and to defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a secure and functioning website. The log files are deleted as soon as they are no longer required for these purposes, unless they are needed to investigate a specific security incident.

The fonts used on our website are stored locally on our server. No connection to Google Fonts or other font providers is established.

4. SSL/TLS encryption

For security reasons, our website uses SSL/TLS encryption (recognizable by “https://” in the address bar). Data you transmit to us cannot be read by third parties.

We do not use our own cookies on our website. For the following purposes, however, we store information in your browser’s storage (local storage or session storage):

Name Purpose Retention Legal basis
tk_consent_v1 (local storage) Stores your choice in the cookie banner so that we do not ask you again on every visit until you delete it in your browser or change your choice Section 25(2) no. 2 TTDSG/TDDDG, Art. 6(1)(c) GDPR
tk_utm_source (session storage) Remembers the campaign source (“utm_source” parameter) to pass it on when you switch to our web app until the browser tab is closed only with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR)

If you visit our website via a link containing the “utm_source” parameter (e.g. from a newsletter or an ad), we append this parameter to links to our web app app.teamkarte.de so that we can see which campaign led to a team card being created. Without your consent, this only happens on the page you landed on and nothing is stored.

We only load marketing services (section 8) after you have consented in the cookie banner. Without consent, no marketing cookies are set.

6. Contact form and e-mail

If you contact us via the contact form or by e-mail, we process the data you provide (name, e-mail address, message) as well as the page from which you sent the form in order to answer your request. The form is sent as an e-mail to hey@teamkarte.de via our web server; the data is not stored in a database of the website. To protect against spam, we check a field that is invisible to humans and the time between loading the page and submitting the form.

The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering requests). We need the mandatory fields to process your request.

We delete your request once it has been dealt with and no statutory retention obligations apply (e.g. up to 6 years for business correspondence).

7. Registration and use of Teamkarte (app.teamkarte.de)

Our web app is available at app.teamkarte.de.

Creating a team card and registration

To create a team card, we need your name and e-mail address so that you can manage and send the team card. People who write an entry provide their name and message and can add images, GIFs or videos. This content is displayed on the team card and delivered to the recipient.

The legal basis is Art. 6(1)(b) GDPR (performance of the user agreement). We use uploaded images and videos exclusively for display on the respective team card. When a team card is deleted, we remove all associated entries and files from our servers.

GIF search (KLIPY)

To search for animated GIFs while writing an entry, we use the API of KLIPY, operated by Kikliko, Inc., 505 Montgomery St. Ste 1100, San Francisco, CA 94111, USA. Its representative in the EU is Rickert Rechtsanwaltsgesellschaft mbH, Colmantstraße 15, 53115 Bonn, Germany. When you use the GIF search, your search term and IP address are transmitted to KLIPY; selected GIFs are loaded from KLIPY’s servers.

The legal basis is Art. 6(1)(b) GDPR, as the GIF search is a feature of the service you use. Data is transferred to the USA. More information: https://klipy.com/support/privacy-policy

For upgrades and credit packages, we additionally process billing and payment data. Depending on the payment method you choose, we transmit the data required for the payment (e.g. name, e-mail address, amount, order number) to:

  • PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg – privacy policy
  • Stripe (e.g. credit card, Apple Pay, Google Pay): Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland – privacy policy
  • Klarna: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden – privacy policy

The payment providers partly process your payment data (e.g. bank details, card data) under their own responsibility; we only receive confirmation of the payment and the information needed for accounting. The legal basis is Art. 6(1)(b) GDPR. We store billing data until the statutory retention periods have expired (generally 6 or 10 years under German commercial and tax law).

We only use the following services if you consent to the “Marketing” category in the cookie banner. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via “Cookie settings”.

Some providers transfer data to the USA. The providers listed are certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR); in addition, standard contractual clauses apply (Art. 46(2)(c) GDPR).

Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The Tag Manager itself does not create user profiles but loads the marketing services listed below. When it is loaded, your IP address is transmitted to Google. We use Google’s “Consent Mode”: before you consent, all storage and advertising features are disabled and the Tag Manager is not loaded at all.

More information: https://policies.google.com/privacy

We use Google Ads by Google to measure the success of our ads. If you reach our website via a Google ad, a cookie is set that allows Google and us to recognize that someone clicked on an ad and then, for example, created a team card (conversion). We only receive statistical evaluations, not information that identifies you personally.

Cookie retention: usually up to 90 days. More information: https://policies.google.com/technologies/ads

Microsoft Advertising (UET)

We use the “Universal Event Tracking” (UET) conversion tracking of Microsoft Advertising, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. If you reach our website via an ad in Bing search, a cookie is set to measure whether you subsequently create a team card, for example.

Cookie retention: up to 13 months. More information: https://privacy.microsoft.com/en-us/privacystatement

Pinterest Tag

We use the Pinterest Tag provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland, to measure the success of our ads on Pinterest and to build audiences for ads. Information about your visit (e.g. pages viewed, clicks) and device data is transmitted to Pinterest.

Cookie retention: up to 1 year. More information: https://policy.pinterest.com/en/privacy-policy

Our website contains links to external offers, e.g. payment providers or partners. The respective provider is responsible for data processing on those websites. Merely displaying a link does not transmit any data to the linked provider.

10. Information about your right to object under Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(f) GDPR (processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4 no. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

The objection can be made informally and should preferably be addressed to: datenschutz@teamkarte.de

11. Changes to this privacy policy

We update this privacy policy when our website, our service or the legal requirements change. The version published at the time of your visit applies.