BettiBox

Legal Notice & Privacy Policy

This English translation is provided for convenience only. In case of discrepancies, the German version shall prevail. This translation should be legally reviewed and approved before being used in production as binding English legal text.

Legal Notice

Information pursuant to Section 5 DDG

Christian Zagel, Bettina Westphal, Thomas Rechin and Janhavi Waghchaure
operating under BettiBox
Lichtenbergstraße 6
85748 Garching bei München
Germany
E-Mail: betti.box@gmail.com

Authorized representatives:

Christian Zagel, Bettina Westphal, Thomas Rechin and Janhavi Waghchaure


Contact:

betti.box@gmail.com

A direct contact channel is provided by e-mail. A telephone number will be added if it is legally required for the specific publication.

Responsible for content:

Christian Zagel
Lichtenbergstraße 6
85748 Garching bei München
Germany


Additional mandatory information:

Register court / registration number: none
VAT ID: none
Business ID: none
Competent supervisory authority: none known

Privacy Policy

Last updated: 28 June 2026

1. Controllers

Jointly responsible for data processing on this website are:
Christian Zagel, Bettina Westphal, Thomas Rechin and Janhavi Waghchaure
operating under BettiBox
Lichtenbergstraße 6
85748 Garching bei München
Germany
E-Mail: betti.box@gmail.com

2. Purpose of the website

This website is used exclusively to provide information about the “BettiBox” project and offers users the opportunity to express interest in a pilot/prototyping test via a linked form or to get in touch.

3. Collection and processing of personal data

We collect personal data only if you voluntarily provide it to us through the form. The following data is requested:

  • Name
  • Email address
  • planned trip, route and travel period
  • bicycle type and technical bicycle details, e.g. axle standard
  • problem and usage information
  • willingness to pay
  • optional bicycle photo
  • consent to be contacted for the pilot, an interview or a compatibility check

4. Legal basis for data processing

The data entered is processed on the basis of your consent (Art. 6(1)(a) GDPR) and for the implementation of pre-contractual measures (Art. 6(1)(b) GDPR), insofar as you register for the pilot, an interview or a compatibility check.

5. Hosting via Netlify

This website is provided as a static website via Netlify (Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA).

  • Purpose of integration: Delivery of the website, technical provision, security, error analysis, and abuse prevention.
  • Possible data transfer: IP address, date and time of access, accessed files/URLs, referrer URL, browser and device information, operating system, and technical log data.
  • Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely, stably, and efficiently.
  • Storage period: Server log data is processed in accordance with Netlify’s provisions and stored only for as long as required for operation, security, error analysis, or legal obligations.
  • Privacy policy: https://www.netlify.com/privacy/
  • Transfer to third countries: A transfer to the USA may take place. Netlify states that it uses appropriate safeguards such as standard contractual clauses where required.

6. Form provider Tally

For registrations of interest and inquiries, we link to a form provided by Tally (Tally B.V., Herenstraat 51, 1015 CB Amsterdam, Netherlands).

  • Purpose of integration: Receiving and managing voluntary form submissions concerning interest, compatibility, and contact.
  • Possible data transfer: The form content you enter, particularly name, e-mail address, and other information from the form, as well as technical data such as IP address, date, time, browser, and device information.
  • Legal basis: Art. 6(1)(a) GDPR, insofar as you voluntarily submit information; additionally Art. 6(1)(b) GDPR, insofar as the inquiry serves the implementation of pre-contractual measures. Tally may be used as a processor pursuant to Art. 28 GDPR.
  • Storage period: We store form submissions only for as long as necessary to process your inquiry, unless statutory retention periods prevent deletion. The storage period at Tally is additionally governed by the settings and privacy information provided there.
  • Privacy policy: https://tally.so/help/privacy-policy
  • Transfer to third countries: Tally is based in the EU. Depending on technical processing, transfer to sub-processors in third countries nevertheless cannot be ruled out; Tally provides information on this in its own privacy documents.

7. Google Fonts and Google Material Symbols

This website integrates fonts from Google Fonts and icon fonts from Google Material Symbols via Google servers. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; the parent company is Google LLC, USA.

  • Purpose of integration: Uniform display of fonts and symbols and a consistent visual appearance of the website.
  • Possible data transfer: IP address, requested font/icon files, browser and device information, referrer URL, and date and time of retrieval.
  • Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in a uniform, performant, and accessible presentation of the website.
  • Storage period: The storage period is governed by Google’s privacy and retention rules; font files may be cached locally in the browser.
  • Privacy policy: https://policies.google.com/privacy
  • Transfer to third countries: A transfer to Google LLC in the USA and other Google locations may take place. Google refers to appropriate safeguards for this purpose, particularly standard contractual clauses where required.

8. Tailwind CSS

To display the design, Tailwind CSS is built locally and served as a static CSS file from this website.

  • Purpose of integration: Loading the CSS framework and technical resources for styling the website.
  • Possible data transfer: No separate request to a Tailwind CDN occurs; the CSS file is delivered by the same website host as the rest of the static site.
  • Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical and visual provision of the website.
  • Storage period: The CSS file may be cached by the browser; server log data follows the Netlify rules described above.
  • Privacy policy: https://www.cloudflare.com/privacypolicy/
  • Transfer to third countries: Processing outside the EU, particularly in the USA, may take place depending on CDN routing; the provider refers to appropriate safeguards where required.

9. External links to TUM and UnternehmerTUM

The website contains external links to the Technical University of Munich and UnternehmerTUM. Merely visiting our website does not transfer any data to these providers via these links, as the logos are integrated locally. Only when you click an external link do you leave our website; the privacy information of the respective destination then applies. The legal basis for providing the links is Art. 6(1)(f) GDPR. Our legitimate interest lies in transparently presenting relevant project references.

10. Googleusercontent images

In the reviewed files index.html and impressum-datenschutz.html, no images are currently integrated via googleusercontent.com. The visible image and logo files are loaded locally from the assets/ directory. If an image from googleusercontent.com or another external image host is loaded in the future, the retrieval may transfer, in particular, the IP address, browser and device information, referrer URL, and date and time to the respective provider; this would then have to be added separately to this Privacy Policy and legally reviewed before publication.

11. Storage period

We store the data you submit via the form only for as long as necessary to process your inquiry. If no pilot contact, interview or compatibility check takes place, the data will subsequently be deleted unless statutory retention periods prevent deletion. Technical log and access data is stored only for as long as required for operation, security, error analysis, or legal obligations.

12. Data subject rights

You have the right at any time to obtain free information about your stored personal data, its origin and recipients, and the purpose of data processing (Art. 15 GDPR). You also have the right to:

  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)

13. Withdrawal of your consent

Many data processing operations are possible only with your express consent. You may withdraw consent you have already given at any time. An informal notification by e-mail to us is sufficient. The lawfulness of data processing carried out before withdrawal remains unaffected by the withdrawal.

14. Right to lodge a complaint with the competent supervisory authority

In the event of GDPR violations, data subjects have the right to lodge a complaint with a supervisory authority.

15. Disclosure of data

Your personal data is disclosed to third parties only insofar as this is necessary for the services mentioned above, you have consented, we are legally obliged to do so, or another legal basis under Art. 6 GDPR exists.

16. Cookies, tracking, and consent solution

At present, no analytics, tracking, or marketing cookie solution is integrated in the reviewed files index.html and impressum-datenschutz.html. According to the current status, the website does not set its own tracking cookies or marketing cookies and uses neither localStorage nor sessionStorage to track visitors.

When the website loads, only the external resources described above that are used for technical or design purposes are directly integrated: Tailwind CSS CDN, Google Fonts, and Google Material Symbols. Tally is accessible only via external links and is not embedded in this website as a form or script; data is therefore transferred to Tally only when you actively click the link to the form.

If services for analytics, tracking, retargeting, marketing pixels, marketing cookies, or comparable non-essential technologies are added later, they must not load immediately when the page is accessed. Before activation, a consent solution must be used that stores consent in a traceable manner and loads the service only after valid consent has been given. Before publication, this Privacy Policy must then be supplemented with providers, purposes, legal bases, storage periods, withdrawal options, and possible transfers to third countries.

17. No automated decision-making

Automated decision-making, including profiling, does not take place on this website.

18. Legal review

This Privacy Policy is a working draft and does not replace legal advice. The final Privacy Policy, in particular the information on third-party providers, transfers to third countries, legal bases, storage periods, and legal notice obligations, should be reviewed and approved by qualified legal counsel before publication.

Back to homepage