Website Privacy Policy
Last updated: September 7, 2026 · applies to www.formwandel.app
This English version is provided for convenience. In case of discrepancies, the German version prevails. This policy covers the website www.formwandel.app; the iOS app “Formwandel” has its own privacy policy.
1. Privacy at a glance
General information
The following notes give you a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
Data collection on this website
Who is responsible for collecting data?
Data processing on this website is carried out by the website operator. Their contact details are given below in the section “Information about the controller”.
How do we collect your data?
We collect your data when you tell it to us — for example when you write to us about the app. Other data is generated technically at the host when you visit the website.
What do we use your data for?
Only to provide the website free of errors and to answer your enquiry. Your user behaviour is not analysed: this website sets no cookies, uses no analytics service and embeds nothing from external servers. That is why there is no cookie banner — there is nothing to consent to.
What rights do you have?
You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have a right to correction or deletion of this data as well as a right to lodge a complaint with the competent supervisory authority.
2. Hosting
External hosting
This website is hosted externally. Personal data that arises when this website is accessed is processed on the servers of the host. This may in particular be IP addresses as well as meta and communication data.
Hosting takes place for the purpose of fulfilling contracts with our potential and existing users (Art. 6(1)(b) GDPR) and in the interest of secure, fast and efficient provision of this offering by a professional provider (Art. 6(1)(f) GDPR). Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG; consent can be withdrawn at any time.
Our host is:
Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany
The server is located in a data centre in Germany. No data processing takes place outside the EU.
No access logs are stored; your IP address is not logged as a matter of course. There is therefore no record of who accessed which page of this website and when. Only in the event of an error does the web server keep an error log which may contain an IP address; it is not evaluated, not combined with other data and is deleted automatically after 14 days.
Data processing agreement
We have concluded a data processing agreement (DPA) for the use of the above service. This is a contract required by data protection law which ensures that the host processes the personal data of visitors to this website only in accordance with our instructions and in compliance with the GDPR.
3. General information and mandatory disclosures
Data protection
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
We would like to point out that data transmission over the internet (e. g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.
Information about the controller
The controller responsible for data processing on this website is:
Mohamadreza Khostevan
Miroo Media
Stettiner Str. 9
28870 Ottersberg
Germany
Phone: +49 4205 6354726
E-mail: formwandel@miroo-media.de
The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
Storage period
Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for processing it no longer applies. If you assert a justified request for deletion or withdraw your consent, your data will be deleted unless we have other legally permissible reasons for storing it (e. g. retention periods under tax or commercial law); in the latter case, deletion takes place once those reasons cease to apply.
General information on the legal bases for data processing
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR. In the case of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your device, data processing is additionally carried out on the basis of § 25(1) TDDDG. Consent can be withdrawn at any time. If your data is required for the performance of a contract or for pre-contractual measures, we process it on the basis of Art. 6(1)(b) GDPR. We also process data where necessary to comply with a legal obligation on the basis of Art. 6(1)(c) GDPR. Finally, data processing may be carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.
Recipients of personal data
We only pass on personal data to external parties where this is necessary for the performance of a contract, where we are legally obliged to do so (e. g. passing on data to tax authorities), where we have a legitimate interest pursuant to Art. 6(1)(f) GDPR in doing so, or where another legal basis permits the transfer. When using processors, we pass on our customers’ personal data only on the basis of a valid data processing agreement.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The legality of the data processing carried out until the withdrawal remains unaffected.
Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
If data processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (objection pursuant to Art. 21(1) GDPR).
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is connected with such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or place of the alleged infringement. This right applies without prejudice to any other administrative or judicial remedies. The authority responsible for us is the State Commissioner for Data Protection of Lower Saxony.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place insofar as it is technically feasible.
Information, correction and deletion
Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correction or deletion of this data. You can contact us at any time regarding this and any other questions about personal data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time to do so. The right to restriction of processing exists in the following cases:
- If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of processing.
- If the processing of your personal data was or is unlawful, you can request the restriction of data processing instead of deletion.
- If we no longer need your personal data but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of processing instead of deletion.
- If you have lodged an objection pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not been determined whose interests prevail, you have the right to request the restriction of processing.
If you have restricted the processing of your personal data, this data — apart from being stored — may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.
4. Data collection on this website
Cookies, analytics and embeds
This website sets no cookies, stores nothing on your device and uses no analytics service. There are no advertising networks, no maps, no videos and no social media buttons. The page loads no JavaScript from external servers; its own scripts control the header menu, the screenshot gallery and the demo chart, and they run exclusively in your browser.
Fonts
The fonts used (Sora, Instrument Sans) are downloaded when the site is built and are located on the same server as the website. When you access the page there is no connection to Google Fonts or any other font provider; no data is transmitted to third parties in the process. The same applies to all images and screenshots.
Enquiry by e-mail or telephone
If you contact us by e-mail or telephone, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent. There is no contact form on this website — it only states an address, and you write from your own mail program.
This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this was requested; consent can be withdrawn at any time.
The data you send us remains with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e. g. after your request has been dealt with). Mandatory statutory provisions — in particular statutory retention periods — remain unaffected.
App Store
The app is downloaded via the Apple App Store. As soon as you click the badge or an App Store link you leave this website; Apple is responsible for the purchase, billing and any reviews (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland). In App Store Connect we only see aggregated, non-personal statistics (e. g. the number of downloads).
5. External links
This website contains links to third-party websites (e. g. apps.apple.com, apple.com and miroo-media.de). When you click on such links you leave this website; the privacy policies and terms of use of the respective provider apply on the linked pages. We have no influence on their content or data processing.
Changes
We adapt this policy when the website or the legal situation changes. The current version can always be found at this address; the date is stated above.