Last updated: November 2026
The controller responsible for personal data processing on this website under the General Data Protection Regulation (GDPR) is:
Xaver Ott
Schillerstr. 6
94032 Passau
Germany
Email: Xaver.ott@icloud.com
No data protection officer has been appointed, as the statutory requirements do not apply.
Our hosting provider processes technically necessary information, including IP addresses, access times, requested pages and browser information, to deliver this website securely and reliably. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in secure operation. Logs are deleted after a short period. A data processing agreement under Article 28 GDPR applies.
When you join the waitlist, we store your email address, selected product interest, campaign parameters from the link (UTM), an internal test variant and the signup time. We use this information to notify you by email about the SideEffect product launch.
The legal basis is your consent under Article 6(1)(a) GDPR. You can withdraw consent at any time, without giving a reason, by emailing Xaver.ott@icloud.com. Withdrawal does not affect the lawfulness of earlier processing. We delete your data after withdrawal, or no later than 12 months after the product launch or when the purpose no longer applies.
The information is stored in our service provider’s database on servers in the EU.
We count page views and waitlist button clicks using a random session ID, without third-party cookies or directly identifying you. The legal basis is Article 6(1)(f) GDPR, our interest in understanding demand. The random session ID and test variant are stored locally in your browser. We rely on Section 25(2) TDDDG for storage necessary to provide the requested service.
Only with your consent in the banner do we load Meta pixels (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland) and TikTok pixels (TikTok Technology Ltd., 10 Earlsfort Terrace, Dublin, Ireland) to measure our advertising. Information such as IP addresses, device details and visited pages may be transferred to the USA or other countries outside the EU. Meta is certified under the EU-US Data Privacy Framework; EU standard contractual clauses apply where relevant.
The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw it through “Cookie settings” at the bottom of the homepage. No advertising pixel loads without consent.
You have the right to access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection to processing based on legitimate interests (Article 21 GDPR). Contact Xaver.ott@icloud.com to exercise your rights.
You may also complain to a data protection supervisory authority, including the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.