Data Protection Statement
- beisammen! is a family service: relatives set up a tablet for an elderly person and stay in touch through it. We only process what is necessary for this.
- No tracking, no ads, no analytics services, no data sales — neither on the website nor in the apps.
- The data is stored on servers in Frankfurt (EU); backups are in Falkenstein (Germany). Video calls are encrypted and not recorded.
- You can request information at any time, correct or delete data, and disable individual functions.
- Responsible Person
- Whose data we process
- Website
- Access and master data
- The Features in Detail
- Recipient and Processor
- Storage duration
- Your Rights
- Security
- Changes
1. Responsible Person
Weinstraße 20
69231 Rauenberg
Germany
E-mail: mail@habermeier.com · Service: service@beisammen.online
A data protection officer does not need to be appointed according to Art. 37 GDPR. Please direct data protection inquiries to one of the two addresses.
2. Whose data we process
At beisammen!, we process the data of three groups of people:
- Website visitors — Anyone who visits beisammen.online or uses the contact or inquiry form.
- Relatives — Anyone who logs into the family portal, uses the web app or mobile app, sets up the tablet, and calls, writes, or sends photos via beisammen!.
- The person at the tablet — usually an older person for whom relatives have set up the tablet. The tablet does not have its own login; relatives decide which functions are activated, and they can delete all data again. Whoever sets up a tablet should inform the person using it.
3. Website beisammen.online
Server logs
When accessing the website, our hosting provider technically processes the IP address, timestamp, page accessed, browser, and operating system. These logs are used for operation and defense against attacks and are deleted after a short time. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in secure operation).
Cookies
The website only uses technically necessary cookies: one for login (session) and one for the selected language. There are no tracking, advertising, or analytical cookies — therefore, no cookie banner.
Contact and tablet request
If you use the contact form or 'Request Tablet', we collect your name, email address, address, and message. We use this information solely to respond to your request and set up a tablet. To verify the address, we check with an open address service in the EU; only the address is sent, not the name. Legal basis: Art. 6 para. 1 lit. b GDPR (Preparation of a contract).
4. Access and master data
For relatives, we store: Email address (which is the login name), first name or display name, password (hashed only), language, last login time, and — for the mobile app — a device ID for push notifications.
For the person on the tablet, we store: first or nickname, language, tablet settings, and device technical data (model, app version, battery status, connection).
Legal basis: Art. 6 para. 1 lit. b GDPR (Provision of the service) — for the person on the tablet in connection with the setup by their relatives.
5. The Features in Detail
All features can be turned on and off individually. What is turned off does not process any data.
Video calls
Calls run through a video relay service with servers located in the EU. Audio and video are transmitted encrypted between devices (DTLS-SRTP) and are not recorded by us. We store a technical timeline for each call (started, ringing, answered, ended) and an audio check (whether the microphone and speakers worked) for 30 days to trace disturbances. When sharing your screen during a call or selecting another camera, only that image is transmitted to the other side — nothing else.
Messages and voice messages
Messages are stored on our server to appear on all family devices. Dictated messages are sent to a speech recognition service (USA) for conversion to text; recordings are not stored permanently there. When the paid automatic translation is enabled, message texts for translation are sent to an AI service (USA). Both options can be turned off.
Photos
Photos sent by relatives are stored on our server and displayed on the tablet — also in frame mode when it’s turned on. Photos can be deleted individually or as a collection at any time.
Calendar, tasks, reminders
Appointments, tasks, and reminders are stored on our server. Those integrating the calendar via CalDAV on iPhone or Mac transmit appointments through an encrypted connection; Apple then processes them like any other calendar.
Medication plan
The medication plan contains health data (Art. 9 GDPR): name of the medication, times, whether ‘Taken’ was pressed. We only process this when relatives consciously activate the function and create the plan — this is consent (Art. 9 para. 2 lit. a GDPR). The function can be disabled and the plan deleted at any time. The optional description of a medication is generated by an AI service (USA); only the medication name is transmitted, no person's name.
Voice assistant (optional)
When the voice assistant is activated, spoken words are sent to a voice AI service (USA) after the wake word and are responded to there. Questions to the assistant can be forwarded to a second AI service (USA). No names, contacts, or family messages are sent.
Weather, Radio, Media Library, Audiobooks, News
For weather information, we send the locations entered by relatives to a weather service in the EU (no personal data). The tablet retrieves radio, media library, audiobooks, and news directly from the respective providers (public broadcasters, LibriVox, SVT, etc.); the provider sees the tablet's IP address just like any internet access. We obtain program information from a film database (USA).
TV (DLNA)
When sending pictures or videos to a TV, it’s done via your home network. The tablet transmits the content directly; our server is not involved.
Tracking the Tablet
At the request of relatives (‘Where is the tablet?’), the tablet sends its current location to our server, which relatives can see on a map. We only store the last known position, no history. The tablet uses Google Play location services if available; the map in the mobile app loads map tiles from OpenStreetMap.
Email Account (optional)
Relatives can register an email account so the tablet can receive and read emails. We store the access data securely; we only read the emails for display and do not analyze them.
Push notifications
For the mobile app to ring during a call, we send a notification via Google (Android) or Apple (iOS) push services. This transmits the technical device identifier and the reason (‘Call from …’) — no conversation content.
Care, remote control, and self-diagnosis
In case of a malfunction, the operation can switch to the family portal — only if allowed by relatives — or view and control the tablet remotely. Every access is logged and clearly visible in the portal. For troubleshooting, the system additionally logs technical events (connections, calls without sound, errors) without conversation or message content. Legal basis: Art. 6 para. 1 lit. b and f GDPR.
Permissions of the mobile app
Camera and microphone (only during a call), notifications (ringing), photos (only those you consciously select and send), additionally on Android Bluetooth (headset) and screen sharing (only when you start it during a call). The app does not read contacts, location, or other apps.
6. Recipient and Processor
We only share data with service providers necessary for operation — as contract processors with agreements. These are categorized as:
- Hosting of server and database (Frankfurt, EU) and daily backups (Germany)
- Facilitating video calls (EU)
- Push services from Google and Apple for the mobile app's ringing
- Voice recognition for dictated messages (USA)
- AI services for optional translation, optional voice assistant, and medication explanation (USA)
- Weather, address, and map services, as well as a film database — without personal data
Transfers to the USA rely on the EU-US Data Privacy Framework or EU Standard Contractual Clauses. The complete list of company names and locations is shown to registered relatives in the service area: Recipients and data processors (after sign-in).
Radio, media library, and audiobook providers are not processors: The tablet accesses their content directly, like a browser.
7. Storage duration
- Access, master data, photos, messages, calendar, tasks, medication plan: as long as the tablet is in use or until you delete them.
- Call timelines and audio checks: 30 days.
- Technical self-diagnosis events and access logs: 90 days.
- Backups: 3 days rotating; after that, overwritten.
- Server logs from the hosting provider: a few days.
- Requests via the website: until processed, up to 12 months.
If a tablet is reset or access is deleted, the associated data is deleted immediately and will also disappear from backups during the next rotation.
8. Your Rights
You have the right to information (Art. 15 GDPR), correction (Art. 16), deletion (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21) against us. You can withdraw your consent at any time with future effect (Art. 7 para. 3).
You can handle many things yourself — see Data Protection Options. For anything else, just send an email to mail@habermeier.com. We respond within a month.
You can also file a complaint with a supervisory authority. Responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart. baden-wuerttemberg.datenschutz.de.
9. Security
All connections are TLS-encrypted, passwords are stored only as hashes, and any email accounts are encrypted. Access by the operation is logged and protected with two-factor authentication. The tablet is a closed device without an app store, browser, or ads.
10. Changes
When new features are added, we will update this statement and note the date above. We will announce significant changes in the relatives' portal.
← Back to homepage