Privacy Policy

This Privacy Policy explains how Lively Apps GmbH processes personal data when you visit our website livelyapps.com, subscribe to our newsletter, contact us, or apply for a job. Processing is carried out in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection law. For how we handle data within our Atlassian apps, please also see our Data Security Statement and Data Processing Addendum.

1. Controller

The controller responsible for data processing on this website is:

Lively Apps GmbH
Säntisstraße 43a
D-81825 München
Germany
Phone: +49 155 65274278
Email: info@livelyapps.com
Website: https://www.livelyapps.com/

2. Data Protection Officer

You can reach our Data Protection Officer at:

Christoph Köberle
Säntisstraße 43a
D-81825 München
Email: privacy@livelyapps.com

3. Hosting and server log files

This website is a static site hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA (“GitHub”), a subsidiary of Microsoft Corporation. When you access our website, GitHub as the operator of the serving infrastructure automatically processes the information your browser transmits, in server log files. This typically includes the browser type and version, the operating system, the referrer URL, the requested page, the date and time of access, and the IP address.

These log files are generated and controlled by GitHub as the hosting provider. We do not receive access to them, and we therefore cannot influence their content or retention period. GitHub describes this processing in its privacy statement and specifically for GitHub Pages in its GitHub Pages documentation.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and cost-effective provision of our website. GitHub processes data in the United States; this transfer is safeguarded by the EU standard contractual clauses agreed under the GitHub Data Protection Agreement (see also section 13 below).

4. Cookies and consent management

Our website uses cookies and comparable technologies (e.g. local storage). Strictly necessary cookies that are required to operate the website are used on the basis of our legitimate interest (Art. 6(1)(f) GDPR). All other cookies — in particular analytics and marketing cookies — are only set with your prior consent (Art. 6(1)(a) GDPR).

We manage these consents using the consent management platform CookieYes. When you first visit the website, CookieYes displays a banner in which you can accept or decline the individual categories. You can change or withdraw your selection at any time with effect for the future via the consent settings on the website. CookieYes stores your consent decision so that it can be honoured on future visits.

5. Web analytics — Google Analytics 4

Subject to your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies to analyse how visitors use our website (e.g. pages viewed, approximate region, device and browser information). IP addresses are truncated/anonymised. We use this information to understand and improve the use of our website.

Legal basis: Art. 6(1)(a) GDPR (consent), which you give via our CookieYes banner and can withdraw at any time. Google may process data in the United States; such transfers are safeguarded by Google’s certification under the EU-U.S. Data Privacy Framework and, as a fallback, the EU standard contractual clauses. Google’s privacy policy is available here.

6. Newsletter

You can subscribe to our newsletter to receive regular information about our products, offers and events. We use the double opt-in procedure: after registering, you receive a confirmation email and are only added to the distribution list once you confirm. We process the email address you provide and the confirmation metadata.

To send our newsletter we use Mailchimp, a service of Intuit Inc. (Rocket Science Group LLC), USA. Mailchimp processes the subscriber data on our behalf and also helps us analyse newsletter performance (e.g. whether an email was opened). Data may be processed in the United States, safeguarded by Mailchimp’s certification under the EU-U.S. Data Privacy Framework and the EU standard contractual clauses.

Legal basis: Art. 6(1)(a) GDPR (consent). You can unsubscribe and thereby withdraw your consent at any time, for example via the unsubscribe link in every newsletter. The Mailchimp privacy notice is available here.

We also use Mailchimp to send the licence-related and product emails described in section 7 below. Those emails are not based on consent; the applicable legal bases are set out there.

7. Customer and contact data received via the Atlassian Marketplace

We distribute our apps through the Atlassian Marketplace. When you purchase, evaluate or renew one of our apps, Atlassian provides us with the data attached to that licence. We do not receive this data from you directly, which is why we inform you about it here in accordance with Art. 14 GDPR. In respect of this data we act as an independent controller.

Categories of data we receive from Atlassian:

  • name and email address of the technical, billing and sales contacts;
  • organisation, and postal address where provided;
  • licence information such as the Service Entitlement Number (SEN), product, licence type, tier, and start and end dates.

We process this data for the following purposes:

  • administering and validating licences and handling the contractual relationship;
  • providing customer support (see also our Data Processing Addendum);
  • sending transactional emails about a licence, for example evaluation, renewal or expiry notices;
  • sending occasional product information about apps you already use or are evaluating.

Legal basis: Art. 6(1)(b) GDPR where the processing is necessary to perform or prepare a contract, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in administering our licences, supporting our customers and providing information about our own similar products to existing customers (see also Section 7(3) UWG). You may object to processing based on our legitimate interests at any time under Art. 21 GDPR, and you can opt out of product emails via the unsubscribe link in every such email.

Retention: we retain licence and contact data for the duration of the licence relationship and thereafter for the statutory retention periods under German commercial and tax law (Section 257 HGB, Section 147 AO), which may be up to ten years for commercially relevant records. Data not subject to a retention obligation is deleted once the purpose ceases to apply.

8. Contacting us

If you contact us by email or via a contact form, we process the data you provide (e.g. name, email address, message content) in order to handle your request. Legal basis: Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries). We delete this data once your request has been dealt with and no statutory retention obligations apply.

Our business email, calendar and file storage run on Google Workspace, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google acts as our processor for this correspondence on the basis of the Google Cloud Data Processing Addendum. Where Google processes data outside the EEA, the transfer is safeguarded as described in section 13.

Support requests concerning our apps are handled in Jira Service Management, a service of Atlassian, which acts as our processor for that purpose. Further detail is set out in our Data Processing Addendum.

9. Job applications

If you apply for a position with us, we process the data contained in your application (e.g. contact details, CV, references) for the purpose of the application procedure. Legal basis: Art. 6(1)(b) GDPR in conjunction with Section 26 BDSG. If we do not enter into an employment relationship with you, your application documents are erased at the latest six months after we notify you of our decision, unless a longer retention period is justified (e.g. to defend against claims under the German General Equal Treatment Act, AGG), or you have consented to longer storage in our talent pool.

Applications sent to us by email are received and stored in Google Workspace (see section 8). Access is restricted to the persons involved in the respective recruitment decision.

10. Embedded third-party content — YouTube

On some pages (in particular blog posts) we embed videos from YouTube, a service of Google Ireland Limited. We use YouTube’s extended data protection mode where available. When you play an embedded video, YouTube receives the information that you have accessed the relevant page and may process data as described in Google’s privacy policy. Where this involves cookies or comparable technologies that are not strictly necessary, we load such content only with your consent (Art. 6(1)(a) GDPR). Google’s privacy policy is available here.

11. Link shortening and click measurement — Bitly

In our blog posts, newsletters and social media posts we use shortened links, in particular under our own short domain go.livelyapps.com and under bit.ly. These links are operated by Bitly, Inc., 139 Fifth Avenue, 5th Floor, New York, NY 10010, USA, and its European affiliate Bitly Europe GmbH.

When you click such a link, you are first directed to Bitly’s servers and then forwarded to the target page. In that process Bitly processes your IP address, the time of the click, the referring page, and information about your device and browser, and derives an approximate location. This allows us to measure, in aggregate, which content is being read. We do not use this data to identify individual persons.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in measuring the reach and effectiveness of our content. You can object at any time under Art. 21 GDPR; you can also avoid this processing by not using the shortened link and navigating to the target page directly. Where a shortened link is contained in our newsletter, the measurement takes place on the basis of your consent under Art. 6(1)(a) GDPR (see section 6).

Bitly may process data in the United States. Such transfers are safeguarded by Bitly’s certification under the EU-U.S. Data Privacy Framework and by the EU standard contractual clauses (see section 13). Bitly’s privacy notice is available here.

12. Your rights

Under the GDPR you have the following rights in relation to your personal data:

  • the right of access (Art. 15 GDPR);
  • the right to rectification (Art. 16 GDPR);
  • the right to erasure (Art. 17 GDPR);
  • the right to restriction of processing (Art. 18 GDPR);
  • the right to data portability (Art. 20 GDPR);
  • the right to object to processing based on legitimate interests (Art. 21 GDPR); and
  • the right to withdraw consent at any time with effect for the future, where processing is based on your consent (Art. 7(3) GDPR).

To exercise these rights, please contact privacy@livelyapps.com. You also have the right to lodge a complaint with a data protection supervisory authority. The authority competent for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

13. International data transfers

Some of the service providers we use are located in, or process data in, third countries (in particular the United States). In such cases we ensure an adequate level of protection through appropriate safeguards, in particular the service provider’s certification under the EU-U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795) and/or the EU standard contractual clauses (Commission Implementing Decision (EU) 2021/914).

14. Automated decision-making

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).

15. Version and amendments

This Privacy Policy is current as of July 2026. We may amend it to reflect changes to our services or to legal requirements. The current version is always available on this page.