Legal Notice
PianoMe
Disclosures as per § 5 TMG
REH
Commerce UG (haftungsbeschränkt)
Ittenbachstr. 3
45147 Essen
Managing Director: Rasim Azad Oglu Heydarov
Contact:
Telephone: +49 176 477 99 640
Email: admin@piano.me
Registration office: Amtsgericht Essen
Registration number: HRB 30291
VAT identification number in accordance with Section 27a of the Sales Tax Act: DE 325670951
Tax Identification No.: 112/5962/1377
Dispute Resolution
The European Commission provides a platform for online dispute resolution (OS): https://ec.europa.eu/consumers/odr Our email address can be found above in the Legal Notice.
We are not prepared or obliged to participate in dispute settlement procedures before a consumer protection body.
Disclaimer
Liability for content
As a service provider, we are responsible for our own content on these pages in accordance with the general laws of Section 7 paragraph 1 TMG. However, according to Section 8 to 10 of the TMG, we as service provider are not obliged to monitor any transmitted or stored foreign information or to carry out research into circumstances which indicate an illegal activity. This is without prejudice to obligations to remove or block the use of information under the general laws. However, liability in this respect is only possible from the moment of knowledge of a specific infringement. We will immediately remove this content if we become aware of such infringements.
Liability for Links
Our offer contains links to external websites of third parties, on whose contents we have no influence. Therefore, we cannot assume any liability for these third-party contents. The respective provider or operator of the sites is always responsible for the contents of the linked sites. The linked pages were checked for possible legal violations at the time of linking. Illegal content was not visible at the time of linking. However, a permanent control of the content of the linked pages is not reasonable without concrete evidence of an infringement of the law. We will immediately remove such links if an infringement becomes known.
Copyright
The contents and works on these pages created by the website owners are subject to German copyright law. The reproduction, processing, distribution and any form of exploitation outside the limits of copyright law require the written consent of the respective author or producers. Downloads and copies of this page are only permitted for private, non-commercial use. If the contents on this page are not created by the operator, the copyrights of third parties will be respected. In particular, the contents of third parties are marked as such. Should you nevertheless become aware of a copyright infringement, we would ask you to provide us with this information. We will immediately remove such content when infringements become known.
General Data Privacy Policy
Content:
1. Name and contact details of the responsible body
2. Collection and storage of personal data; nature, purpose and use
3. Transfer of data to third parties
4. Your rights as data subject
5.Your right to appeal
6. Contact details for exercising rights
7. Data processing via our website
1. Name and contact details of the responsible body
This Data Privacy Policy applies to us,
REH
Commerce UG (haftungsbeschränkt)
Ittenbachstr. 3
45147 Essen
Telephone: +49 176 477 99 640
Email: admin@piano.me
as the responsible body.
2. Collection and storage of personal data; nature, purpose and use
If you use our platform as a registered customer to book music practice rooms, the following information is collected:
- email address
- given name, surname
- completed bookings
- location
- payment data
as well as any other information necessary for the fulfilment of the contract with you.
When you provide music practice rooms on our platform, the following data will be collected:
- email address
- given name, surname
- optionally, company name
- completed bookings
- location
- payment data
as well as any other information necessary for the fulfilment of the contract with you.
Personal data shall be collected:
- to identify you as a customer;
- to give you appropriate advice;
- in order to fulfil our contractual obligations towards you;
- in order to meet our legal obligations;
- to correspond with you
- for the issuing of invoices or, where appropriate, within the framework of the order, for payment,
- to assert any claims made against you.
The processing of the personal data is carried out by us upon your request and for the purposes stated above, for the appropriate processing of your order and for the fulfilment of obligations under the underlying contract referred to in Art. 6 paragraph 1 sentence 1 (b) GDPR.
On the basis of our justified interest in personalised direct advertising, we reserve the right to store the data in accordance with Article 6 section 1 (f) GDPR for sending interesting offers and information about our services.
The personal data collected are stored until the end of the legal obligated period for merchants (6, 8 or 10 years after the end of the calendar year in which the contractual relationship was terminated) and subsequently deleted. As an exception, this does not apply if we are obligated to store data for longer due to tax or commercial obligations (in accordance with HGB, StGB or AO) (Article 6 paragraph 1 sentence 1 (c) GDPR) or if you have consented to excess storage according to Article 6 paragraph 1 sentence 1 GDPR.
3. Transfer of data to third parties
Your personal data will not be transmitted to third parties.
Exceptions to this, however, apply as far as this is necessary for the settlement of contractual relations with you. This includes in particular the transfer to service providers (so-called processors) or other third parties whose activities are necessary for the performance of the contract.
As we connect bookers and providers together, we pass on the data referred to in paragraph 1 to the other contractual partner when necessary.
Your payment details will be sent to the relevant payment service provider or our in-house bank, depending on the means of payment chosen by you. The payment service provider is responsible for your payment data. Particular information, on the responsible body of the payment service providers, the contact details of the payment service providers' data protection officers and the categories of personal data; which are processed by payment service providers, you will find at the following Internet address:
For payments made via Paypal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxemburg): https://www.paypal.com/de/webapps/mpp/ua/privacy-full
For payments made via Stripe (Stripe Payments Europe, Ltd. C/O A&L Goodbody, Ifsc, North Wall Quay, Dublin, Ireland): https://stripe.com/de/legal
The legal basis for this is Article 6 paragraph 1 sentence 1 (b) GDPR.
If you use the chat function, the content of the chat as well as your username is visible to the other chat partner. The chat history is stored on our server. We are entitled to evaluate these in order to detect possible breaches of the terms and conditions, such as a circumvention of the platform. The chat history will be deleted by us as soon as the content is no longer required for its intended purpose and the deletion is not contrary to legal retention obligations.
4. Your rights as data subject
You, as a data subject, have different rights:
- Right to withdrawal in accordance with Article 7 (3) of the GDPR: You may revoke any consent given by you to us at any time. The processing of data, which is based on the revoked consent, may then no longer be processed going into the future.
- Right to access in accordance with Article 15 of the GDPR: You can request information about your personal data processed by us. This applies in particular to the purposes of data processing, the categories of personal data, where applicable: the categories of recipients, the origin of your data, for the existence of automated decision-making including profiling and meaningful information on its details.
- Right to rectification in accordance with Article 16 of the GDPR: You may request the rectification of inaccurate or completion of your personal date stored with us.
- Right to deletion in accordance with Article 17 of the GDPR: You may request the deletion of your personal data stored with us, insofar as their processing is not intended to exercise the right to freedom of expression and information, to fulfil a legal obligation, is necessary for reasons of public interest or to assert, exercise or defend legal claims.
- Right to restrict processing in accordance with Article 18 of the GDPR: You may request the limitation of the processing of your personal data, provided what the correctness of the data is contested by you, the processing in unlawful but you refuse deletion. You are also entitles to this right if we no longer need the data, but you need if for the assertion, exercise or defence of legal claims. You also have this right if you object to the processing of your personal data.
- Right to data transferability in accordance with Article 20 of the GDPR: You may request that we provide you with your personal data in a structured, common and machine-readable format. Alternatively, you may request the direct transmission of the personal data provided by you to another controller, as far as this is possible.
- Right to appeal in accordance with Article 77 of the GDPR: You can complain to the supervisory authority responsible for us, for example, if you believe that we are processing your personal data in an illegitimate manner. The competent authority responsible for us is:
National Data Protection and Information Commissioner
Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Tel.: 0211/38424-0
Fax: 0211/38424-10
Email: poststelle@ldi.nrw.de
https://www.ldi.nrw.de/metanavi_Kontakt/index.php
5. Your right to appeal
In the case of processing of personal data for the purpose of carrying out tasks of public interest (Article 6 (1) sentence 1 (e) GDPR) or for the purpose of exercising legitimate interests (Article 6 (1) sentence 1 (f) GDPR), you may object to the processing of the personal data concerning you at any time with effect for the future. In the event of an objection, we shall refrain from any further processing of your data for the above purposes unless:
– there are compelling, justifiable reasons for processing that outweigh your interests, rights, and freedoms, or
– Processing is required to assert, exercise or defend legal claims.
You may object to the use of your data for the purpose of direct marketing at any time with effect for the future; this also applies to profiling in so far as it is related to direct marketing. In the event of disagreement, we shall refrain from any further processing of your data for the purpose of direct marketing.
6. Contact details for exercising rights
All requests for information, questions, revocations or contradictions for data processing should be addressed to the contact details mentioned in Section 1. Fo more information, please refer to the full text of the GDPR, which is available on the internet at https://gdpr-info.eu/ .
7. Data processing via our website
The processing of certain personal data, including the IP address of the website visitors, also takes place via our Internet pages, for example https://piano.me/ . You will therefore find additional data protection notices for visiting our homepage online on our respective website. You can always access the additional data protection notices by clicking on the “Privacy Policy” item.
Data Protection Policy
§ 1 Information on the collection of personal data
(1) In the following we inform about the collection of personal data when using our website. Personal data is all data that can be obtained personally from you, such as name, address, e-mail addresses, user behaviour.
(2) Responsible in accordance with Article 4 (7) EU Data Protection Basic Regulation (GDPR) is REH Commerce UG (haftungsbeschränkt), Ittenbachstr. 3, 45147 Essen, phone: +49 176 477 99 640, e-mail: admin@piano.me (see our Legal Notice).
(3) When you contact us via e-mail or a contact form, the data you provide (your e-mail address, if applicable, your name and telephone number) will be stored by us to answer your questions. We delete the data arising from this connection after storage is no longer necessary or restrict processing if there are legal storage obligations. The legal basis for this is our legitimate interest within the meaning of Article 6 (1) (f) GDPR to reply to your enquiry and, if your enquiry is to conclude a contract, Article 6 (1) (b) GDPR.
(4) If we would like to use our service provider for individual functions or use your data for advertising purposes, we will inform you in detail about the respective processes below. We also mention the criteria laid down for the storage period.
§ 2 Your rights
(1) You have the following rights in relation to us, with regard to the personal data concerning you:
- Right to information (Article 15 GDPR)
- Right to rectification (Article 16 GDPR) or deletion (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to revocation of consent given (Article 7 (3) GDPR)
- Right to object to processing (see paragraph 3)
- Right to information (Article 19 GDPR)
- Right to data portability (Article 20 GDPR)
(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us (Article 77 GDPR). A list of data protection supervisors and their contact details can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
(3) In the case of processing of personal data in order to carry out tasks of public interest (Article 6 (1) Sentence 1 (e) GDPR) or in the pursuit of legitimate interests (Article 6 (1) sentence 1 (f) GDPR) you may object to the processing of the personal data concerning you at any time with future effect. In the event of an objection, we shall refrain from any further processing of your data for the above purposes unless:
– there are compelling, justifiable reasons for processing that outweigh your interests, rights, and freedoms, or
– processing is required to assert, exercise or defend legal claims.
You may object to the use of your data for the purpose of direct marketing at any time with effect for the future; this also applies to profiling in so far as it is related to direct marketing. In the event of disagreement, we shall refrain from any further processing of your data for the purpose of direct marketing.
(4) In order to exercise your rights (except for the right to complain to a Data Protection Supervisor), please refer to § 1 (2).
§ 3 Collection of personal data when visiting our website
When using the website for information only, that is, if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we will collect the following data which is necessary for us on a technical level to show you our website and to ensure stability and security (The legal basis is Article 6 (1) sentence 1 (f) GDPR):
- IP address
- Date and time of request
- Time difference in relation to Greenwich Mean Time (GMT)
- Content of request (concrete page)
- Access status/http status code
- Amount of data transferred
- Website from which the request comes
- Browser
- Operating systems and its interface
- Language and version of the browser software
§ 4 Use of cookies
(1) In addition to the data mentioned in § 3 above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in an associated manner with your browser and through which certain information flows to the site that sets the cookie (here through us); if information is also provided to third parties, that is partner companies, we will inform you in this privacy statement at the appropriate place.
(2) Application of cookies:
a) This website uses the following types of cookies, the scope and functioning of which are explained below:
- Transient cookies (b)
- Persistent cookies (c)
b) Transient cookies are automatically deleted when you close the browser, including session cookies. These store a “session ID”, with which different requests from your browser can be assigned to the joint session. This allows your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.
c) Persistent cookies are automatically deleted after a predetermined duration which can vary depending on the cookie. You can delete the cookies in your browser’s security settings at any time and also view the duration of each respective cookie storage.
d) You can configure your browser setting according to your wishes, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the features of this website.
e) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise you would have to log in again for each visit.
The cookies we use are for different purposes. Provided that the cookies are used to simplify the use of our site (for example, to simplify the ordering process by storing settings) and to the extent that these also process personal data, processing is carried out in accordance with Article 6 (1) (b) GDPR for the implementation of the contract or Article 6 (1) (a) GDPR On the basis of your consent given – revoked at any time - or Article 6 (1) (f) GDPR in order to safeguard our legitimate interests in the functionality of the website as well as a customer-friendly and effective design thereof.
If we use third-party cookies, that is partner companies, we will inform you accordingly in this privacy statement. The use of these cookies is made on the basis of Article 6 (1) (a) of the GDPR, with your informed consent, which can be revoked at any time.
(4) In your browser you will find various settings for using cookies. You can set the browser to refuse the acceptance of cookies in general or in particular only for our site. You can also delete cookies placed in your browser via your browsers settings at any time. More details can be found in the respective help menu of your browser, which can also be found here for current browsers:
Internet Explorer:
https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14
Opera: https://help.opera.com/de/latest/web-preferences/#cookies
(5) The non-acceptance of cookies or the deletion of cookies can limit the functionality of our website.
§ 5 Use of our platform
(1) If you wish to use our platform as a registered user, you must register beforehand. For registration we use the “Double-opt-in procedure”, that is, your registration will not be completed until you have confirmed your registration by clicking on the link contained within a confirmation email sent to you for this purpose.
(2) If you use our platform as a registered user, we will save your data required to fulfil your contract until you finally delete your access. If you book or rent music practice rooms on our platform, we will also store your payment details and address. The legal basis for this is Article 6 (1) sentence 1 (b) GDPR. Your payment data will also be transmitted to the corresponding payment service provider on this basis, depending on the means of payment you select. The payment service provider is responsible for your payment data. Information, in particular on the responsible body of the payment service providers, the contact details of the payment service providers' data protection officers and the categories of personal data; which are processed by payment service providers, you will find at the following Internet address:
For payments made via Paypal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxemburg): https://www.paypal.com/de/webapps/mpp/ua/privacy-full
For payments made via Stripe (Stripe Payments Europe, Ltd. C/O A&L Goodbody,Ifsc,North Wall Quay,Dublin, Ireland): https://stripe.com/de/legal
Furthermore, we will save the volunteered data you provide for the time of your use of the portal, unless you delete it first. You can manage and modify all information in the protected customer area. In accordance with Article 6 (1) sentence 1 (f) GDPR.
(3) If you use the rating function of our platform, your user name will be displayed publicly. The legal basis for the feedback function is in accordance with Article 6 (1) sentence 1 (f) GDPR.
(4) To prevent unauthorised access of third parties to your personal data, especially financial data, the connection is encrypted using SSL technology.
(5) Our portal is based on a solution of the supplier Sharetribe, that is to say, paragraph 1 and 2 data are processed by the Finnish company Sharetribe Oy, Business ID (Finland): 2432359-2, with the address Bulevardi 14 A, 00120 Helsinki, Finland.
Further information on Sharetribe privacy can be found at: https://www.sharetribe.com/privacypolicy.html
The use is based on Article 6 (1) (b) GDPR.
§ 6 Use of Google Analylics
(1) This website uses Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland (“Google”). Google Analytics uses so-called. “Cookies,” text files that are stored on your computer and allow you to analyse the use of the website. The information generated by the cookies about your use of this website is usually transferred to and stored on a Google server in the USA. However, if IP anonymization is activated on this website, your IP address will be reduced by Google beforehand within Member States of the European Union or in other States who are Parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a server of Google in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports about the website activities and to share further information with the website to provide the use and use of Internet related services to the website operator
(2) The IP address transmitted by your browser through Google Analytics will not be merged with other Google data.
(3) You can prevent the storage of cookies by setting your browser software accordingly; however, we inform you that: that in this case you may not be able to use all the functions of this website. You can also prevent Google from collecting the information (including your IP address) generated by the cookie and relating to your use of the Site, and the processing of that information by Google, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
You can also prevent Google Analytics by
clicking on the following link. A so-called opt-out cookie is then set which
prevents the collection of your data on our website in the future: Disable Google Analytics data collection for this site
(4) This website uses Google Analytics with the “_anonymizeIp()” extension. As a result, IP addresses are further processed in a reduced manner, and it is thus possible to rule out the possibility of a person being related. In so far as the data collected about you relates to a person, this person is immediately excluded and the personal data is thus deleted immediately.
(5) We use Google Analytics to analyse and regularly improve the use of our website. Using the statistics we have obtained, we can improve our service and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the US, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework: The use is based on your given, revocable, consent, Article 6 (1) (a) GDPR.
(6) Information from the third party provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland User Conditions: http:///www.google.com/analytics/terms/de.html, Overview on Privacy: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the Privacy Statement: http:///www.google.de/intl/de/policies/privacy. In the event of transfer of data to the US, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework
§ 7 Use of social media plug-ins
(1) We currently use the following social media plug-ins: Facebook, Twitter. This means that when you visit our site, no personal data will initially be passed on to the providers of the plug-ins. You can recognise the provider of the plug-in by marking it on the box above its initial letters or the logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only when you click on the marked field and activate it will the plug-in provider receive the information that you have accessed the corresponding website of our online service. In addition, the data referred to in point 3 of this declaration shall be provided. In the case of Facebook, according to the provider in Germany, the IP address is anonymised immediately after survey. By activating the plug-in, personal data from you will be transferred to the respective plug-in provider and stored there (in the US). Since the plug-in provider collects the data especially via cookies, we recommend that you delete all cookies via the security settings of your browser before clicking on the greyed-out box
(2) We have no influence on the data and data processing operations collected, nor are we aware of the full scope of the data collection, the purposes of the processing, the storage periods. We also do not have any information about the deletion of the collected data by the plug-in provider.
(3) The plug-in provider stores the data collected about you as usage profiles and uses them for advertising, market research and/or customized design of its website. Such an evaluation is carried out in particular (even for non-subscribed users) for the purpose of representing advertising that meets your needs and to inform other users of the social network about your activities on our website. You are entitled to object to the formation of these user profiles, and you must contact the respective plug-in provider in order to exercise this right. Through the plug-ins, we offer you the opportunity to interact with social networks and other users, so that we can improve our service and make it more interesting for you as a user. The use of the plugins is based on the consent given, consent may be withdrawn at any time, in accordance with Article 6 (1) (a) GDPR
(4) The data will be passed on regardless of whether you have an account with the plug-in provider and are logged in there. When you log in to the plug-in provider, your data collected by us will be directly assigned to your existing account with the plug-in provider. If you press the button, for example. the plugin provider also stores this information in your user account and informs your contacts publicly. We recommend that you log in regularly after using a social network, especially before activating the button, as in doing so you can avoid assigning your profile to the plug-in provider.
(5) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the following privacy statements of these providers. There you will also find further information about your rights and settings to protect your privacy.
(6) Addresses of the respective plug-in providers and URLs with their privacy notices:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; Facebook hat sich dem EU-US-Privacy-Shield unterworfen, https://www.privacyshield.gov/EU-US-Framework.
b) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter hat sich dem EU-US-Privacy-Shield unterworfen, https://www.privacyshield.gov/EU-US-Framework.
§ 8 Newsletter
(1) With your consent, you can subscribe to our newsletter, which will inform you about our current interesting offers. The advertised goods and services are indicated in the declaration of consent.
(2) In order to subscribe to our newsletter we use the Double-opt-in procedure. This means that after your registration we will send you an e-mail to the indicated e-mail address, in which we will ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
(3) All that is mandatory for the sending of the newsletter is your e-mail address. After your confirmation we will save your e-mail address for the purpose of sending the newsletter in accordance with Article 6 (1) sentence 1 (a) GDPR.
(4) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can explain the revocation by clicking on the link provided in each newsletter e-mail, by e-mail to admin@piano.me or by sending a message to the contact details given in the Legal notice.
(5) We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the emails sent include so-called web beacons or. Tracking pixels representing single pixel image files stored on our website. For the evaluations we link the data mentioned in § 3 and the web beacons with your e-mail address and an individual ID. Links received In the newsletter also contain this ID. With the data thus obtained, we create a user profile to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters, which links you click on them and deduce from them your personal interests. We link this data to actions taken by you on our website
You may object to this tracking at any time by clicking on the separate link provided in each e-mail or by informing us of any other way of contacting us. The information will be stored as long as you have subscribed to the newsletter. After logging out, we store the data purely statistically and anonymously.
(6) The newsletter is sent via the service provider Mailchimp. We have made sure through appropriate settings that Mailchimp uses the transmitted data only for sending the newsletter. We have prohibited further processing – including anonymous data. For more information on the purpose and scope of the data collection and its processing, as well as further information on your rights and settings in this respect in order to protect your privacy, visit: Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA; Privacy Policy: https://mailchimp.com/legal/privacy/ Die Rocket Science Group, LLC hat sich dem EU-US Privacy Shield unterworfen, https://www.privacyshield.gov/EU-US-Framework
§ 9 Use of Cloudflare
(1) We use the Cloudflare service. This service enables us to protect our website from third party access and optimise loading times. This constitutes a legitimate interest within the meaning of Article 6 (1) sentence 1 (f) GDPR As part of this service, all information will be transmitted to the Cloudflare server via our site. Furthermore a cookie will be set.
(2) Further information about the third party provider: Cloudflare, Inc., 665 3rd St. #200, San Francisco, CA 94107, USA Information on privacy: https://www.cloudflare.com/de-de/privacypolicy/
Cloudflare has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
§ 10 Retention period
Unless we expressly state otherwise, we shall store personal data for as long as legal retention periods exist. After the legal retention periods have expired, we will delete the data, if we no longer need the data for the fulfilment of contractual obligations towards you, or if we cannot invoke a legitimate interest for further storage.