The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Bekommste.net GmbH
Hamburger Straße 68
24568 Kaltenkirchen
Germany
Represented by: Johannes von Allwörden
Email: hello@gadsby.io
We process personal data of our visitors only to the extent necessary to provide a functional website and our content. The legal bases are Art. 6 (1) (a) GDPR (consent), (b) (contract or pre-contractual measures) and (f) (legitimate interest).
When you visit this website, the hosting provider automatically collects information in so-called server log files that your browser transmits automatically: IP address, date and time of the request, page accessed, browser type and version, operating system and referrer URL. This data cannot be attributed to specific individuals and is not merged with other data sources. Processing is based on Art. 6 (1) (f) GDPR, arising from our legitimate interest in the secure and stable operation of the website. Log files are automatically deleted after a short period.
We store your language choice (German/English) in your browser's local storage when you use the language switcher. In addition, the web analytics service Google Analytics described below uses cookies or comparable technologies. You can delete stored entries at any time via your browser settings.
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies that enable an analysis of your use of the website. Information about your use of this website (e.g. pages visited, time spent, clicks on links, approximate location, device type) is generally transmitted to and processed on Google servers; a transfer to the USA cannot be ruled out. Google bases transfers to the USA on the adequacy decision of the EU Commission (EU-US Data Privacy Framework). By default, Google Analytics 4 does not store IP addresses and truncates them before processing.
Processing is based on Art. 6 (1) (f) GDPR, arising from our legitimate interest in analysing and improving our online offering. You can object to the collection by installing the browser add-on for deactivating Google Analytics: https://tools.google.com/dlpage/gaoptout. Further information can be found in Google's privacy policy: https://policies.google.com/privacy.
This website uses the TikTok Pixel and the TikTok Events API provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok"). This allows us to measure the effectiveness of our TikTok advertising and to record conversions (e.g. clicks on the link to the application). In doing so, information about your use of this website (e.g. pages visited, button clicks, IP address, device information and, where applicable, cookie identifiers such as the TikTok click ID) is transmitted to and processed by TikTok; a transfer to third countries (including the USA and Singapore) cannot be ruled out.
Processing is based on Art. 6 (1) (f) GDPR, arising from our legitimate interest in measuring and optimising our advertising campaigns. Further information can be found in TikTok's privacy policy: https://www.tiktok.com/legal/privacy-policy.
For the uniform display of typefaces, this website uses so-called web fonts provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you access a page, your browser loads the required fonts from Google servers; in doing so, your IP address is transmitted to Google. This use is based on Art. 6 (1) (f) GDPR, arising from our legitimate interest in a uniform and appealing presentation. Further information can be found in Google's privacy policy: https://policies.google.com/privacy.
If you contact us by email or via the contact form, the data you provide (name, email address, content of the message) will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. The legal basis is Art. 6 (1) (b) GDPR if your inquiry is related to the initiation of a contract, otherwise Art. 6 (1) (f) GDPR. We do not pass this data on without your consent and delete it as soon as it is no longer required for processing and no statutory retention obligations apply.
The following supplementary information applies to the use of the application at app.gadsby.io. Sign-in takes place via your Google account (OAuth 2.0); in addition, you connect your Google Ads account to the application. Gadsby.io never receives your Google password; you can revoke granted access rights at any time in your Google account settings at https://myaccount.google.com/permissions.
Gadsby.io collects and accesses only the following Google user data. To do so, the application requests the following Google OAuth permissions (scopes):
openid, https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/userinfo.profile): your name, your email address and your profile picture.https://www.googleapis.com/auth/adwords): see, edit, create and delete your Google Ads accounts and data. This includes in particular your campaigns, ad groups, keywords, ads, ad extensions, budgets, settings and performance metrics (e.g. impressions, clicks, cost, conversions, quality scores and search terms) of the Google Ads accounts connected to the application.Beyond this, the application does not collect any other Google user data and does not access any other Google services (in particular not Gmail, Google Drive, Google Calendar or Google Contacts).
Gadsby.io uses the Google user data it collects exclusively to provide the application's core functionality to you, as follows:
Google user data is not used for any purposes other than those stated above – in particular not for our own advertising, for building advertising profiles, for creditworthiness assessments or for any other purposes unrelated to the application.
We do not sell Google user data and, as a rule, do not share it with third parties. We do not use Google user data to train generalized or standalone AI or ML models – neither our own nor those of third parties. The only exception to non-sharing: to generate campaign concepts and optimisation suggestions, relevant campaign data is transmitted to our AI service provider Anthropic (Claude) acting as a processor, where it is used solely to process your specific request; no AI models are trained on your data in the process. Beyond this, Google user data is only disclosed to third parties where required by law or where you expressly consent.
OAuth access tokens and retrieved account data are transmitted in encrypted form (TLS) and stored on servers within the European Union. Access is limited to the users who connected the respective Google Ads account within the application. We store Google user data only for as long as necessary to provide the functionality described in section 9.2. You can disconnect your Google Ads account in the application at any time or revoke access in your Google account settings; stored tokens become invalid as a result. On request, we will completely delete your user account and all associated stored Google user data – please contact hello@gadsby.io.
Gadsby.io's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You have the following rights vis-à-vis us with regard to the personal data concerning you:
You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent authority is the Independent State Centre for Data Protection Schleswig-Holstein (ULD).
If processing is based on your consent, you may withdraw it at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
This privacy policy is dated July 2026. Due to the further development of our website or changed legal requirements, an adjustment may become necessary; the current version can always be found on this page.
This English version is provided for convenience only. The German version (Datenschutzerklärung) is legally binding.