Privacy Policy

Last updated: June 2026

This is a courtesy English translation. The legally binding version is the German one (Datenschutzerklärung).

1. Controller

The controller responsible for data processing on this website is:

Tim-Luca Bäumer

Auf dem Sauren 13, 57258 Freudenberg, Germany

2. Hosting

This website is hosted by Cloudflare. When the site is accessed, technically necessary data (e.g. IP address, date/time, requested file) is processed to enable delivery of the page. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation).

3. Requests, accounts & provider profiles

When you submit a request, register as a provider or create an account, we process the data you provide (e.g. name, email, phone, a description of your request or offer) solely to carry out the matchmaking, manage your account and contact you. Passwords are stored exclusively in encrypted (hashed) form. The legal basis is the performance of (pre-)contractual measures and our legitimate interest in the matchmaking (Art. 6(1)(b) and (f) GDPR). If you publish a profile as a provider, the information given there is publicly visible.

4. Email delivery

We send transactional emails (e.g. notifications, password resets) via the service provider Resend. Your email address and the message content are processed for this purpose. The legal basis is the performance of (pre-)contractual measures (Art. 6(1)(b) GDPR).

5. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You may also lodge a complaint with a data protection supervisory authority.

6. Cookies & consent

This website uses cookies. Technically necessary cookies are required for operation. Cookies for statistics and analytics are set only with your consent (§ 25(1) TTDSG, Art. 6(1)(a) GDPR). On your first visit you decide via the cookie banner. If you decline, no analytics cookies are set. You can reset your choice at any time (by clearing cookies/storage in your browser).

7. Web analytics (Google Analytics)

With your consent we use Google Analytics, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to analyse the use of the website. The information generated (including a shortened IP address) is transmitted to and processed by Google; this may involve a transfer to the USA. The legal basis is your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time with effect for the future. We have enabled IP anonymisation.

8. Sign-in via third parties (social login)

You can optionally sign in with an external account — currently Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), GitHub (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA), LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland) or Microsoft (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). If you use this option, the respective provider transmits to us the email address stored there (including its verification status), your name and a provider-side account identifier, so that we can create or link your sirwis account. This may involve a transfer to the USA. The legal basis is the performance of (pre-)contractual measures (Art. 6(1)(b) GDPR). Signing in with email and password remains possible at any time without third parties.

9. Location data (radius search)

For the radius search (a provider's service area) we use an offline location dataset from GeoNames, licensed under CC BY 4.0. Distances are calculated entirely on our server; no location or user data is transmitted to GeoNames in the process.

10. AI features & voice input

Our AI assistant (e. g. for drafting requests) processes the text you enter via the AI infrastructure of our hosting provider Cloudflare (Workers AI). Your inputs are processed to answer your request and are not used to train AI models. The legal basis is the performance of (pre-)contractual measures and our legitimate interest in providing the feature (Art. 6(1)(b) and (f) GDPR).

You can optionally dictate your input (voice input). Recording starts only after you click the microphone icon and grant permission in your browser. The audio is transmitted once to Cloudflare (Workers AI, speech recognition) to convert it to text; it is not stored there and we do not retain it — only the resulting text is kept, which you then use like any typed input. No speaker recognition or biometric analysis takes place. The legal basis is your active use of the feature (Art. 6(1)(b) GDPR).

11. Currency

Last updated: July 2026. We reserve the right to amend this policy.

← Back to home