← Home

Privacy Policy for the app “Vollholz”

Last updated: 11 September 2026

1. Controller

Christian Klöcker
Stegge, 5b
46325 Borken
Germany

Electronic contact: via our contact form (no public email address is published on this website).

The app is primarily aimed at users in Germany. It may also be used from other EEA countries (e.g. Netherlands, Belgium, France). This policy describes processing under the EU GDPR and, where applicable, the German Federal Data Protection Act (BDSG).

2. What the app does

Vollholz helps bowling-style clubs manage members, evenings, throws, rules, and related data. Clubs may optionally store payment-related details (e.g. PayPal identifier, IBAN, account holder).

3. Personal data we process

3.1 Account and sign-in

• Email/password: email, password (handled by Firebase Authentication; not stored in plain text by us), display name if provided, unique user ID.
• Google sign-in: data provided in the Google sign-in flow (e.g. email, profile details, depending on your account and consent).
• Sign in with Apple: data provided in Apple’s sign-in flow.

3.2 Club and usage data

• Club names, settings, memberships.
• Member names, game/evening data, fines, statistics, and similar content you enter.
• Optional uploaded images (e.g. profile or club images).

3.3 Optional payment/bank details

Voluntary fields such as IBAN, bank name, account holder, PayPal handle, or phone numbers for payment services. Only enter what is necessary and lawful for your club.

3.4 Push notifications

A device token may be stored to send club-related notifications when you use that feature.

3.5 Local storage and technical data

• Data may be cached on the device for performance and offline behaviour.
• Our cloud provider processes technical data (e.g. IP address, timestamps) for operation and security.

As of the date above, the app does not integrate Firebase Analytics or Crashlytics. If that changes, we will update this policy and obtain consent where required.

3.6 Website contact form

If you use the form at vollholz.app/contact.html, we process your name (if provided), email address, topic/subject, and message text in order to reply. Legal bases: Art. 6(1)(b) GDPR (pre-contractual / contractual enquiries) and/or Art. 6(1)(f) GDPR (legitimate interest in handling privacy and support requests). Limited technical data (e.g. a short-lived hashed IP check) may be stored to prevent abuse. Delivery uses our processors (Firebase Cloud Functions and, where configured, an email delivery provider).

4. Purposes and legal bases (GDPR)

• Providing the app: Art. 6(1)(b) GDPR.
• Security and abuse prevention: Art. 6(1)(f) GDPR.
• Push notifications: Art. 6(1)(a) and/or (f) GDPR, in line with platform rules and your settings.
• Legal obligations: Art. 6(1)(c) GDPR.

You may object to processing based on legitimate interests where GDPR allows (Art. 21 GDPR).

5. Processors / recipients

We use Google Firebase, including:

• Firebase Authentication
• Cloud Firestore
• Firebase Storage
• Firebase Cloud Messaging
• Cloud Functions (region: europe-west1)

Google may process data as a processor under Firebase / Google Cloud terms. Google and Apple also process data under their own policies when you use Google or Apple sign-in.

6. Transfers outside the EEA

Processing may occur outside the EEA (e.g. USA). We rely on appropriate safeguards under Chapter V GDPR (e.g. Standard Contractual Clauses as implemented in Google’s terms).

7. Retention

For as long as your account exists and clubs retain related data, unless a shorter period is required by law or you exercise erasure rights subject to legal limits.

8. Your rights

Access, rectification, erasure, restriction, portability, and objection to certain processing. You may lodge a complaint with a supervisory authority (Art. 77 GDPR), e.g. in Germany the authority responsible for us or the authority where you live.

9. Security

We use appropriate technical and organisational measures (including encryption in transit and provider access controls). Please protect your device and credentials.

10. Children

The app is not directed at children under 16 (or the applicable age in your country). Contact us if you believe we process a minor’s data without a proper legal basis.

11. Changes

We will update this page and the “Last updated” date when our practices change.

12. Contact

For privacy and other requests, please use the contact form.