Privacy Policy
Version 2026-09-05.1 Effective from September 5, 2026
This policy describes what personal data is processed when you use Finden24. It describes the actual state of the platform and names open points as such rather than papering over them.
Note on the legal bases
The final legal classification of each processing operation — in particular whether it rests on performance of a contract, legitimate interest or consent — is still outstanding and will be completed before launch. We first describe fully and verifiably WHAT is processed, rather than asserting a legal assessment that has not been reviewed.
Controller
The controller is the operator named in the imprint. No data protection officer has been appointed at present.
- info@finden24.net
No VAT identification number has been issued at present.
1. Account and registration
On registration we process your name, e-mail address, a password in encrypted form and, optionally, a telephone number and a location. Your IP address is also stored when the account is created.
Your acceptance of the Terms and Conditions is recorded when the account is created.
2. Sign-in, e-mail verification and two-factor authentication
Signing in establishes a session. Your e-mail address is confirmed through a link we send you. If you enable two-factor authentication, additional security features are stored in your account for that purpose.
Sign-in events are logged with a timestamp, IP address and browser identification. These logs serve the security of the account.
3. Listings, profiles and contact details
When you publish a listing we process the details you enter — in particular the title, description, price, category, town and postcode, together with the contact details you provide.
You control which of these are publicly visible in your settings. E-mail addresses and links are technically not permitted in free text.
New listings are reviewed before publication and are not publicly visible until then.
4. Images, videos and files
Uploaded images, videos and documents are stored on the platform’s storage. Image files may contain metadata that you supply yourself.
For video ads the original, a processed version and a preview image are stored separately.
5. Messages
Messages between users are stored so that both sides can find the conversation again. The content, the time and the accounts involved are processed for this purpose.
6. Saved listings
When you save a listing, the link between your account and that listing is stored. This link is not public.
7. Enquiries to trade businesses
In the job assistant and in a direct enquiry we process the description of the job, the location and the timing, together with your contact details, and make them available to the businesses you approach.
For enquiries that can be made without an account, the IP address and browser identification are additionally stored in order to confirm the enquiry.
8. Moderation, suspension and security logs
Moderation decisions — such as approving, rejecting or suspending content and accounts — are logged. These logs contain the time, the acting party, the IP address and browser identification.
They contain no passwords, no credentials and no payment data.
9. Product auctions
When an auction is created we process the details of the item and your declaration as to whether you are selling privately or commercially. That declaration is stored against the individual auction and stays attached to it permanently.
Acceptance of the Terms and Conditions is stored with the version, the language and the time, so that it remains verifiable which text was accepted.
When you take part, your registration for the auction, the bids you place and their timings are processed. Bids are shown publicly in anonymised form.
Access to auction documents is logged with the time, IP address and browser identification.
10. Construction auctions
For a construction auction we process the description of the project, the location and the timeframe, together with the offers submitted by participating businesses.
A payment authorisation is obtained for the publication fee; the consent is stored against the payment with the version, the language and the time.
11. Video ads
For a video ad we process the uploaded file, the versions produced from it and your declaration regarding the rights in the video. That declaration is stored with a version of its own.
12. Food orders
When you place an order we process the items selected, the delivery or collection details and your contact details, and make them available to the business concerned so that it can fulfil the order.
Whether delivery is available follows from the postcodes the business itself has entered.
13. Adult area (18+)
Access to this area requires age confirmation. That confirmation is stored in your browser and is not linked to you as a person.
Listings in this area come only from accounts cleared for it. Reports about individual listings are stored with the reporting account and the time.
14. Payments
Payment providers are integrated for fees and paid services. The payment itself is handled by the provider concerned; card and bank details are neither collected nor stored by the platform.
What we store is the reference to the transaction, its status and the provider’s reference.
Which providers are actually active depends on the configuration. A technical integration alone does not mean data is transmitted to that provider — a transfer takes place only for a payment actually initiated through it.
15. E-mail delivery
An e-mail delivery service is used to send confirmations, notifications and system messages. The recipient address and the content of the message concerned are transmitted for that purpose.
16. File storage
Uploaded files are stored on the platform’s storage. The application can additionally be configured to use external object storage; whether such a transfer takes place depends solely on the active configuration and is not claimed here in the abstract.
17. Sessions and cookies
Technically necessary cookies are set for signing in and for form security. An IP address and browser identification are stored against a session.
A cookie notice is shown on your first visit. No analytics, tracking or advertising services are used; accordingly, no profiles are built for advertising purposes.
18. Fonts
The typeface used on the platform is loaded through the Bunny Fonts service (bunny.net). When a page is opened, your IP address is transmitted to that service, because it is technically required in order to deliver the font files to your browser.
No cookies are set in the process.
Your rights
You have the right to obtain information about the data stored about you, and rights to rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with a supervisory authority.
A message to the contact address given in the imprint is enough to exercise these rights.
An automatic function for downloading all of your own data is not available at present. Requests are handled manually.
Deleting your account
You can delete your account yourself in the settings. It is confirmed with your password.
Deletion removes the account. Some of the content connected to the account is deleted with it; other content remains and loses its link to your account. This applies in particular to published listings, and to records that must be kept for accounting or evidential reasons, such as payments and orders.
If you do not want listings to remain visible after your account is deleted, please delete them yourself beforehand or let us know.
Retention
Data is stored for as long as it is needed for the purpose concerned or a statutory retention obligation applies.
Specific deletion periods for security and moderation logs have not yet been set. We deliberately give no periods here that are not yet implemented technically.
Open point
This point has not been finally settled and will be completed before launch. We deliberately leave it unwritten rather than assert a rule that has not been decided.