Deutsch English Español Français

Privacy Policy

Preamble

With the following privacy policy, we would like to inform you about the types of personal data (hereinafter also referred to as “data”) we process, for what purposes, and to what extent in the context of providing our application.

The terms used are not gender-specific.

As of: October 13, 2025

Table of Contents

  • Preamble
  • Controller
  • Overview of Processing
  • Relevant Legal Bases
  • General Information on Data Storage and Deletion
  • Data Security
  • Rights of Data Subjects
  • Data Storage of Your Content Created in the App
  • Contact and Inquiry Management
  • Push Notifications
  • Analysis and App Improvement
  • Ensuring Technical Stability (Crash Reporting)
  • Affiliate Programs and Affiliate Links
  • Customer Reviews and Rating Procedures
  • Definition of Terms

Controller

Nils Egbers
Schoelerpark 14
10715 Berlin, Germany

Email address: bagpacker.app@gmail.com
Legal Notice (Imprint): https://bagpackerapp.github.io/bagpacker.app-legal/impressum.html

Overview of Processing

The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.

Types of Data Processed

  • Inventory data.
  • Contact data.
  • Content data.
  • Contract data.
  • Usage data.
  • Meta, communication, and procedural data.

Categories of Data Subjects

  • Service recipients and clients.
  • Prospective customers.
  • Communication partners.
  • Users.

Purposes of Processing

  • Communication.
  • Affiliate tracking.
  • Organizational and administrative procedures.
  • Feedback.
  • Marketing.
  • Provision of our online services and user-friendliness.

Relevant Legal Bases

Relevant legal bases according to the GDPR: Below you will find an overview of the legal bases of the GDPR on which we process personal data. Please note that in addition to the regulations of the GDPR, national data protection regulations may apply in your or our country of residence or registered office.

  • Consent (Art. 6(1)(a) GDPR) - The data subject has given consent to the processing of their personal data for one or more specific purposes.
  • Performance of a contract and prior requests (Art. 6(1)(b) GDPR) - Processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract.
  • Legitimate Interests (Art. 6(1)(f) GDPR) - Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

General Information on Data Storage and Deletion

We delete personal data that we process in accordance with legal requirements as soon as the underlying consents are revoked or there are no other legal bases for processing. This applies to cases where the original purpose of processing no longer exists or the data is no longer required. Exceptions to this rule exist if legal obligations or special interests require longer storage or archiving of the data.

Specifically, data that must be retained for commercial or tax law reasons or whose storage is necessary for legal prosecution or to protect the rights of other natural or legal persons must be archived accordingly.

Data Security

In accordance with legal requirements, we take appropriate technical and organizational measures to ensure a level of protection for your data appropriate to the risk. If data is transferred to servers (e.g., as part of optional premium features), the communication between our app and the servers is generally encrypted (SSL/TLS technology).

Rights of Data Subjects

Rights of data subjects under the GDPR: As a data subject, you have various rights under the GDPR, which arise in particular from Articles 15 to 21 GDPR:

  • Right to object: You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR; this also applies to profiling based on those provisions. Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
  • Right to withdraw consent: You have the right to withdraw your consent at any time.
  • Right of access: You have the right to obtain confirmation as to whether or not data concerning you is being processed, and to access this data and to further information and a copy of the data in accordance with legal requirements.
  • Right to rectification: You have the right, in accordance with legal requirements, to request the completion of data concerning you or the rectification of inaccurate data concerning you.
  • Right to erasure and restriction of processing: You have the right, in accordance with legal requirements, to demand that data concerning you be erased immediately, or alternatively, to demand a restriction of the processing of the data in accordance with legal requirements.
  • Right to data portability: You have the right to receive the data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to request its transmission to another controller.
  • Complaint to a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

Data Storage of Your Content Created in the App

The content you create in the app, such as your packing lists, is stored differently depending on the scope of functionality.

  • Local Storage (Standard): In the basic use of the app, all content you create is stored exclusively locally on your own device. We as the operator have no access to this data. If you uninstall the app from your device, this data will be permanently deleted.
  • Server Storage (Optional Premium Features): If we offer optional premium features in the future (e.g., for synchronization between multiple devices) that require storing your data on a server, we will inform you separately before you use this function. The use of such functions is voluntary. To provide these services, your data will be stored on servers commissioned by us within the European Union (EU). The processing of this data serves exclusively to provide the premium function you have selected. The legal basis for this processing is the performance of the contract for the premium function (Art. 6(1)(b) GDPR).

Contact and Inquiry Management

When you contact us (e.g., by email or contact form), the information of the inquiring persons is processed to the extent necessary to respond to the contact inquiries and any requested measures.

Push Notifications

If you give us your consent, we may send "push notifications" to your device. These are messages that are displayed on your screen, even if our app is not currently being actively used. To subscribe to push notifications, you must confirm the corresponding query from your operating system. This consent process is managed and documented by your operating system.

We distinguish between two types of push notifications:

  • Functional Notifications: These are directly related to the use of the app, such as reminders about an open packing list. The sending of these messages is necessary for the performance of our contractual service (providing the app's features). The legal basis for this is Art. 6(1)(b) GDPR.
  • Information and Marketing: This may include, for example, general travel tips or information about new features or partner offers. You will only receive these messages if you have given us separate, voluntary consent. The legal basis for this is Art. 6(1)(a) GDPR.

Withdrawal and Settings: You can withdraw your consent to receive push notifications at any time by changing the settings for our app in your device's operating system.

Analysis and App Improvement

To continuously improve the usability, stability, and functionality of our app, we plan to use analysis services in the future. A service we may use is Google Analytics for Firebase, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The collection and processing of analysis data will only occur with your explicit and voluntary consent, which we will request via a dialog within the app. No analysis data will be collected without your consent. If you consent, usage data (e.g., accessed areas, interactions, anonymized IP address, device identifiers) may be transferred to Google. You can withdraw your consent at any time in the app's settings.

Legal Basis: Consent (Art. 6(1)(a) GDPR).

Ensuring Technical Stability (Crash Reporting)

To ensure the technical stability of our app and to quickly identify and fix errors ("crashes"), we plan to use crash reporting services in the future. A service we may use is Firebase Crashlytics, provided by Google Ireland Limited.

If the app crashes, anonymized and pseudonymized information is sent to the service provider. These reports contain technical data about the state of the app and your device at the time of the crash (e.g., device type, OS version) but none of your personal content like your packing list entries. This processing helps us to analyze errors and improve the app for all users.

Legal Basis: Legitimate Interests (Art. 6(1)(f) GDPR).

Affiliate Programs and Affiliate Links

We include so-called affiliate links or other references to the offers and services of third-party providers in our online offering. If users follow the affiliate links and subsequently take advantage of the offers, we may receive a commission or other benefits from these third-party providers. To track whether users have taken advantage of the offers of an affiliate link used by us, it is necessary for the respective third-party providers to know that the users have followed an affiliate link used within our online offering.

Services and Service Providers Used:

  • Amazon Partner Program: Affiliate partner program; Service provider: Amazon EU S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg; Website: https://www.amazon.com; Privacy Policy: https://www.amazon.com/gp/help/customer/display.html?nodeId=201909010.

Customer Reviews and Rating Procedures

We are pleased when you review our app. Within our app, we offer you the option to go directly to the review function of the respective app store (Apple App Store or Google Play Store). We only redirect you to the corresponding page of the store. We do not transmit any personal data from you to the store operators. Submitting a review is voluntary and is subject to the terms of use and privacy policies of the respective store operator (Apple Inc. or Google LLC).

Definition of Terms

This section provides you with an overview of the terms used in this privacy policy.

  • Personal Data: "Personal data" means any information relating to an identified or identifiable natural person ('data subject').
  • Processing: "Processing" means any operation or set of operations which is performed on personal data, whether or not by automated means.
  • Controller: "Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.