As of August 2026
The controller responsible for the processing of personal data on this platform under the General Data Protection Regulation (GDPR) is:
Stadtliste, Owner: Babu Marie
c/o brigk
Schloßlände 26
85049 Ingolstadt
Email: kontakt@stadtliste.de
This privacy policy applies to our entire platform, including stadtliste.de and stadt.me. Our customers' business pages are served from stadt.me; data arising there is processed as described in this section.
When you access our platform, technical information is automatically transmitted to our server and temporarily stored in server log files. The following data is collected:
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the platform).
Retention period: Server log files are deleted after a maximum of 30 days.
When you contact us via our contact forms or by email, we collect the information you provide, typically name, email address, phone number (optional), and your message. When using our forms, we also record your IP address to prevent abuse.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures or contract fulfilment) and Art. 6(1)(f) GDPR (legitimate interest in preventing abuse).
Retention period: Enquiries are stored for as long as necessary to process them, up to a maximum of 3 years after the last contact.
When you submit a business via our "Submit Business" form, we collect:
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest).
Retention period: Business data is retained for as long as the business remains listed in the directory. Rejected submissions are deleted after 6 months.
To measure the use of business pages, we record page views and clicks on contact elements (e.g. call, book appointment). Your IP address and browser type are stored to prevent duplicate counts. No third-party analytics services are used.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in statistical analysis).
Retention period: IP address and browser information are automatically erased after 30 days; only anonymous, non-personal count data remains.
Some of the business listings in our directory are created by us from publicly available sources, for example publicly accessible company websites, trade and online directories, and public registers. These listings were not submitted by the business itself.
In doing so, we process only business-related data that is already publicly accessible. For sole proprietors and freelancers, this information may constitute personal data.
Categories of personal data (Art. 14(1)(d) GDPR): name (for sole proprietors/freelancers), industry/category, business address, and public business contact details (phone, email, website).
Source of the data (Art. 14(2)(f) GDPR): publicly available sources (see above).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in providing a complete and useful regional directory of professional service providers; we process only data that is already public and business-related, so the impact on the data subject is minimal.
Retention period: until you object or request deletion, at the latest for as long as the listing remains in the directory.
This privacy policy also serves as the information notice for data subjects under Art. 14 GDPR. You may object to the processing at any time under Art. 21 GDPR and request erasure under Art. 17 GDPR (see Section 5). Upon receiving your objection or erasure request, we will take the listing offline without undue delay and delete the data. A short message to kontakt@stadtliste.de is sufficient.
For a Pro business page, and for the Done-for-You setup, you send us your content by email — typically photos, opening hours, services and descriptive text. The same applies to later changes, since we maintain the page for you. Where those photos show identifiable people (for example members of staff), we process their personal data too.
Important: you confirm that you hold the necessary rights to the material you send us, and that anyone identifiable in it has agreed to publication. We use the content solely to build and maintain your business page.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Retention period: Published content is retained for as long as your business page exists; once your subscription ends it is deleted within 90 days. The source files you send us and the related email correspondence are deleted 90 days after the page goes live or the change is applied — that window exists purely for corrections and follow-up questions.
Statutory retention: where individual messages qualify as commercial or business letters, or contain tax-relevant records, we keep those for the statutory periods (§ 257 HGB, § 147 AO) and delete them only afterwards. Photos and page content are not affected by this.
Our platform uses only technically necessary cookies. We do not use tracking cookies, analytics cookies, or cookies for advertising or social media purposes.
The technical cookies we use serve platform security and session management. They are deleted automatically at the end of your browser session or after a short time.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technical functionality of the platform).
We do not share your personal data with third parties for advertising or marketing purposes. Data is transferred to processors only in the following cases:
Data processing agreements under Art. 28 GDPR are in place with all processors. Transfers to third countries occur solely via Cloudflare Inc. (USA) and Zoho Corporation (India), on the basis of Standard Contractual Clauses under Art. 46(2)(c) GDPR.
Under the GDPR, you have the following rights regarding your personal data:
To exercise your rights, please contact kontakt@stadtliste.de.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority in Germany is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) or the authority in your place of residence.
We implement appropriate technical and organisational measures in accordance with Art. 32 GDPR to protect your personal data against unauthorised access, loss, or misuse.
We reserve the right to update this Privacy Policy as needed to comply with legal requirements or to reflect changes to our platform. The date of the last update is always shown at the top of this page.
For questions about the collection, processing, or use of your personal data, or to exercise your rights, please contact:
Stadtliste, Owner: Babu Marie
c/o brigk
Schloßlände 26
85049 Ingolstadt
Email: kontakt@stadtliste.de
