This is a translation for your convenience. The German version is legally binding.
Für den Anwalt: Vorrang der deutschen Fassung und die englische Übersetzung prüfen.
This policy applies to the website triphar.com. It
describes what data is processed when you visit this site, when you join the
waitlist and on the event page (triphar.com/e/…).
Last updated: ENTER DATE
If you just open the site, your browser connects only to our web server at Hostinger (see below). A page only loads software packages from Google when you join the waitlist there.
| What data | Your email address, the time you signed up and where the visit came from (a short code from the link or for the page you sign up on, e.g. “web” or “web-creator”). If you sign up on an English page (triphar.com/en/…), this code starts with “en-” (e.g. “en-web”), so that we send you the launch email in English. If you request early access on the page for businesses and guides, also: whether you are a business or a guide, the name of the business or your name, the city and a link (website or Instagram). If you sign up as an Original Creator on the page for creators, also: your name or creator name, the city you live in, a link to your profile (Instagram, TikTok or YouTube) and your short description of what you do. |
|---|---|
| What for | To notify you once, as soon as TripHar is available. For early access and as an Original Creator, also to invite you personally by email to test before launch (with a link to TestFlight, Apple’s app for testing; we do not give your address to Apple for this). As an Original Creator, also to check whether we invite you as an Original Creator; for this we look at your profile behind the link. No newsletter, no advertising, no sharing. |
| Legal basis | Your consent, Art. 6(1)(a) GDPR — given by submitting the form. |
| How long | Until the launch email. After that we delete the entry within 30 days, at the latest 24 months after you signed up (as in the privacy policy of the app). |
| Withdrawal | At any time, informally, by email to privacy@triphar.com. We then delete the entry immediately; this does not affect the lawfulness of the processing carried out up to that point. |
The addresses are not sold and not passed on. The following are technically involved:
gstatic.com and connect to Google servers
(googleapis.com, google.com); in doing so, it transmits
its IP address, as is technically necessary. A transfer to
the USA is possible; it is based on the European Commission’s standard
contractual clauses. Conclude the data processing agreement in the Firebase console
If someone shares an event from the app, the link leads to this page. It shows what is public on the event anyway (title, time, place, description, image, how many people are coming). When you open it, the following happens:
gstatic.com
and requests the event from our server function (Google Cloud Functions, Frankfurt).
What is transmitted is the event identifier from the link and,
as is technically necessary, your IP address. We don’t store anything about you;
Google records the request in its server logs
RETENTION PERIOD AS IN THE APP: CHECK (CONSOLE).Legal basis: our legitimate interest in showing you the event that you opened via the link (Art. 6(1)(f) GDPR).
This site sets no cookies, uses no analytics tools and loads no external fonts. That is why there is no consent banner here either.
There is a technical entry in the browser only if you join the waitlist or open an event page: the Firebase package then creates “firebase-heartbeat-database” in the browser storage (IndexedDB), containing the day of the visit and the versions of the package (checked on 19 October 2026). Firebase sends this information along with requests to Google (probably). No link to your person, no identifier across several sites. You can delete it via your browser’s site data. TKG § 165 (AUSTRIAN TELECOMMUNICATIONS ACT): PERMISSIBLE WITHOUT CONSENT? — LAWYER (L4 A16)
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. An informal email to privacy@triphar.com is enough. We respond within one month (Art. 12(3) GDPR).
If you believe that the processing of your data infringes the GDPR, you can lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) (Barichgasse 40–42, 1030 Vienna, dsb.gv.at).
This policy applies to the website. The TripHar app processes further data (account, trips, location for check-ins, tripHARRY). For that there is a separate privacy policy of the app.