Privacy Policy
- together! is a family service: relatives set up a tablet for an elderly person and stay in touch through it. We only process what is necessary.
- No tracking, no ads, no analytics services, no data sale — neither on the website nor in the apps.
- Data is stored on servers in Frankfurt (EU); backups in Falkenstein (Germany). Video calls are encrypted and not recorded.
- You can request information at any time, have data corrected or deleted, and disable individual functions.
- Responsible
- Whose data we process
- Website
- Access and Master Data
- Features in Detail
- Recipients & Processors
- Storage Duration
- Your Rights
- Safety
- Changes
1. Responsible
Weinstraße 20
69231 Rauenberg
Germany
E-Mail: mail@habermeier.com · Service: service@beisammen.online
No data protection officer is required under Article 37 GDPR. Please direct any inquiries about data protection to one of the two addresses.
2. Whose data we process
At beisammen!, we process data for three groups of people:
- Visitors to the website — anyone who visits beisammen.online or uses the contact or inquiry form.
- Relatives — anyone who logs into the relatives' portal, the web app, or the mobile app, sets up the tablet, and calls, writes, or sends photos through beisammen!
- The Person at the Tablet — mostly an older person, whose relatives set up the tablet. The tablet has no personal login; relatives decide which features are enabled and can delete all data.
3. Website beisammen.online
Server Logs
When accessing the website, our hosting provider technically processes the IP address, time, accessed page, browser, and operating system. These logs are used for operation and defense against attacks and are deleted after a short time. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in secure operation).
Cookies
The website only uses technically necessary cookies: one for login (session) and one for the chosen language. There are no tracking, advertising, or analytics cookies — therefore no cookie banner.
Contact and tablet request
Anyone using the contact form or 'Request Tablet' submits name, email address, address, and message. We use this information solely to respond to the request and set up a tablet. To verify the address, we query an open address service in the EU; only the address is transmitted, not the name. Legal basis: Art. 6 para. 1 lit. b GDPR (Contract initiation).
4. Access and Master Data
For relatives, we save: email address (which serves as the username), first name or display name, password (hashed only), language, last login time, and — for the mobile app — a technical device ID for push notifications.
For the person on the tablet, we save: first or nickname, language, tablet settings, and the device's technical data (model, app version, battery status, connection).
Legal basis: Art. 6 para. 1 lit. b GDPR (Service provision) — for the person on the tablet in connection with setup by family members.
5. Features in Detail
All features can be toggled on and off individually. Features that are off do not process any data.
Video Calls
Calls go through a video mediation service with servers in the EU. Audio and video are transmitted securely between devices (DTLS-SRTP) and are not recorded by us. We store a technical timeline for each call (started, ringing, answered, ended) and an audio check (whether the microphone and speakers worked) for 30 days to troubleshoot issues. Anyone sharing the screen during a call or choosing another camera transmits exactly that image to the other side — nothing else.
Messages & Voice Messages
Messages are stored on our server to appear on all family devices. Dictated messages are sent to a speech recognition service (USA) for text conversion; recordings are not permanently stored there. If the paid automatic translation is activated, message texts for translation are sent to an AI service (USA). Both can be turned off.
Photos
Photos sent by relatives are stored on our server and displayed on the tablet — even in frame mode when it is turned on. Photos can be deleted individually or as a collection at any time.
Calendar, tasks, reminders
Appointments, tasks, and reminders are stored on our server. If you integrate the calendar via CalDAV in iPhone or Mac, appointments are transmitted over an encrypted connection; Apple then processes them like any other calendar.
Medication Plan
The medication plan contains health data (Art. 9 GDPR): medication name, times, whether 'Taken' was pressed. We only process this if relatives consciously activate the function and create the plan — that is the consent (Art. 9 para. 2 lit. a GDPR). The function can be turned off and the plan deleted at any time. The optional description of a medication is generated by an AI service (USA); only the medication name is transmitted, no person's name.
Voice Assistant
If the voice assistant is activated, spoken words are transmitted to an AI voice service (USA) after the wake word and answered there. Questions to the assistant may be forwarded to a second AI service (USA). No names, contacts, or family messages are sent.
Weather, Radio, Media Library, Audiobooks, News
For the weather, we send the locations entered by relatives to a weather service in the EU (no personal data). The tablet accesses radio, media library, audiobooks, and news directly from the respective providers (public broadcasters, LibriVox, SVT, etc.); the provider sees the tablet's IP address like any other internet call. We obtain program information from a film database (USA).
TV (DLNA)
Anyone sending images or videos to a TV does so within their own home network. The tablet transmits the content itself; our server is not involved in this.
Locate Tablet
At the request of relatives ('Where is the tablet?'), the tablet sends its current location to our server, and relatives can see it on a map. We only store the last position, no history. To determine the location, the tablet uses Google Play services if available; the map in the mobile app loads tiles from OpenStreetMap.
E-Mail Account
Relatives can set up an email account so the tablet can receive and read emails. We store access data encrypted; we only read the emails for display and do not analyze them.
Push Notifications
To make the mobile app ring during a call, we send a notification via the push services of Google (Android) or Apple (iOS). The technical device ID and the reason ('Call from...') are transmitted — no conversation content.
Care, remote control, and self-diagnosis
The operator can switch to the family portal or view and control the tablet remotely during a disruption — only if relatives allow it. Each access is logged and clearly visible in the portal. For troubleshooting, the system also logs technical events (connection, silent calls, errors) without conversation or message content. Legal basis: Art. 6 para. 1 lit. b and f GDPR.
Permissions of the mobile app
Camera and microphone (only during a call), notifications (ringing), photos (only those you consciously select and send), on Android also Bluetooth (headset) and screen sharing (only if you start it during the call). The app does not read contacts, location, or other apps.
6. Recipients & Processors
We only share data with service providers necessary for operation — as processors with a contract. These are, by category:
- Hosting of server and database (Frankfurt, EU) and daily backups (Germany)
- Video Call Promotion (EU)
- Push services from Google and Apple for the app notifications
- Speech recognition for dictated messages (USA)
- AI services for optional translation, optional voice assistant, and medication explanation (USA)
- Weather, address, and map services as well as a movie database — without personal data
Transmissions to the USA are based on the EU-US Data Privacy Framework or EU Standard Contractual Clauses. We show the complete list of company names and locations to logged-in relatives in the service area: Recipients & Processors (after login).
Radio, media library, and audiobook providers are not data processors: The tablet accesses their content directly, like a browser.
7. Storage Duration
- Access, Master Data, Photos, Messages, Calendar, Tasks, Medication Plan: as long as the tablet is operational or until you delete them.
- Call timelines and sound checks: 30 days.
- Technical self-diagnosis events and access logs: 90 days.
- Backups: 3 days rolling; then overwritten.
- Server logs from the hosting provider: few days.
- Requests via the website: up to processing, at most 12 months.
If a tablet is reset or an access is deleted, the associated data is immediately deleted and will also disappear from backups with the next rotation.
8. Your Rights
You have the right to information (Art. 15 GDPR), correction (Art. 16), deletion (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21) against us. You can revoke any consent given at any time for the future (Art. 7, para. 3).
You can handle many things yourself — see Privacy Options. For anything else, just send an email to mail@habermeier.com. We respond within a month.
You can also file a complaint with a supervisory authority. The responsible authority for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart. baden-wuerttemberg.datenschutz.de.
9. Safety
All connections are TLS-encrypted, passwords are stored only as hashes, and registered email accounts are encrypted. Access by the company is logged and protected with two-factor authentication. The tablet is a closed device without an app store, browser, or ads.
10. Changes
If new features are added, we will update this statement and note the date above. Significant changes will be announced in the relative portal.
← Back to the homepage