1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is sesl GbR, Dammer Weg 31, 63773 Goldbach, Germany, represented by Stephanie Selmer. You can reach us at contact@calendarbutler.com or by phone at +49 152 33875099.

We have not appointed a data protection officer because the law does not require one for us. Please direct any questions about data protection to the address above.

2. The short version

  • The website sets no cookies and stores nothing on your device.
  • There is no tracking, no web analytics, no advertising networks and no social media plugins.
  • The fonts (Bricolage Grotesque and Inter) are hosted on our own server. Loading a page does not open a connection to Google Fonts or any other font service.
  • Videos and other third-party content are not embedded. A connection to another provider is only made when you click a link yourself.
  • The calculators and the article search work entirely in your browser. What you enter there is not transmitted to us.

3. Visiting this website and hosting

When you open the website, our hosting provider processes technically necessary connection data in server log files: your IP address, the date and time of the request, the page or file requested, the status code, the amount of data transferred, the previously visited page (referrer) and information about your browser and operating system. We need this data to deliver the page, keep operations stable and defend against attacks. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest in secure and functional operation. The data is not combined with other data and not evaluated for marketing purposes. The log files are deleted as soon as they are no longer needed for operation and security.

Our hosting provider is ALL-INKL.COM, Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. We have a data processing agreement with the provider under Art. 28 GDPR.

4. Cookies and browser storage

The website itself sets no cookies and does not access the storage of your device. A consent prompt (cookie banner) is therefore not required.

Only in the customer area, a session cookie may be set after you log in. It recognizes nothing but your logged-in session and expires when the session ends. It is technically necessary for the customer area to work (Section 25 (2) No. 2 TDDDG) and is used neither for analytics nor for advertising.

5. Calculators and search

The cost calculators, the price calculator and the article search calculate and filter entirely in your browser. Your input does not leave your device and is not stored by us or by third parties.

6. Contacting us

If you contact us by email or phone, we process your details (for example name, email address, phone number and the content of your message) to answer your request. The legal basis is Art. 6 (1) (b) GDPR where your request relates to a contract or its preparation, otherwise Art. 6 (1) (f) GDPR, our legitimate interest in answering inquiries. We delete the data once your request has been dealt with and no statutory retention obligations apply. Our mailboxes are hosted by ALL-INKL.COM.

7. Contact forms "Become a partner" and "Recommend a partner"

On the Partner Program and Partner Agreement pages, the "Become a partner" and "Recommend a partner" buttons open a contact form as a pop-up. If you use it, we process the data you enter. For "Become a partner" this is your name, email address, organization, freelancer community (optional) and your message (optional). For "Recommend a partner" this is your name, your email address, the name of the agency, a contact person at the agency (optional) and your message (optional). The page you sent the form from is added to the email. The message is sent to us by email to contact@calendarbutler.com from this server and is not stored in a database or as a file on the website. We use the data only to process your request or recommendation. The legal basis is your consent (Art. 6 (1) (a) GDPR), which you give with the checkbox in the form, and the implementation of pre-contractual measures at your request (Art. 6 (1) (b) GDPR). Name, email address and organization or agency are required. The data is processed on the server and mail system of the hosting provider named above and is not passed on to other third parties. If no partnership results, we delete the correspondence when your request is settled and no statutory retention obligation applies. You can withdraw your consent at any time with effect for the future by email to contact@calendarbutler.com, and we will then delete the data.

If you recommend an agency, please provide only business contact details of third parties and only if you are authorized to do so. We use these details solely to contact the agency in connection with your recommendation, and we inform the contact person of the processing of their data when we first contact them (Art. 14 GDPR).

8. Cancellation form

You can cancel your subscription on the "Cancel subscription" page. We process the email address with which you took out the subscription, optionally your name, the type of termination and a desired date, and the time the cancellation was received. The form is available without logging in. The details are sent to us by email to contact@calendarbutler.com from this server, and you receive a confirmation of receipt with the time of receipt at the email address you give. On the confirmation page you can save the confirmation as a PDF using your browser's print dialog. The details are not stored in a database or as a file on the website. The legal basis is the performance of the contract (Art. 6 (1) (b) GDPR) and, where required by law, compliance with a legal obligation (Art. 6 (1) (c) GDPR). We keep the cancellation for as long as statutory retention obligations apply. The data is processed on the server and mail system of the hosting provider named above and is not passed on to other third parties.

The website links, among other things, to our YouTube channel, to Stripe payment pages and to the TidyCal booking page. This content is not embedded. Only when you click a link does your browser leave our website, and the respective provider receives the usual connection data such as your IP address. Everything beyond that is governed by the provider's privacy notices.

10. Booking appointments with TidyCal

If you click "Book a demo" or "Try free for 30 days", you are taken to a TidyCal booking page. Only from that click onward is data transmitted to TidyCal, for example your IP address and whatever you enter there, usually your name, email address and the chosen appointment. We receive these details to hold the appointment with you. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures). TidyCal is a service of a provider based in the USA. The processing on the booking page is governed by TidyCal's privacy notices, over which we have no influence.

11. Subscription and payment

The purchase buttons for the single user plan lead to a Stripe payment page (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). You enter your payment details directly with Stripe, we see neither card numbers nor account details. Stripe is independently responsible for processing the payment, and Stripe's privacy notices apply. Stripe may also process data in the USA, and Stripe describes the safeguards for this in its privacy notices.

From Stripe we receive the details we need to perform the contract: your email address, the Stripe customer number, the plan booked, the amount and the status of your subscription. The legal basis is Art. 6 (1) (b) GDPR. We retain billing data for as long as commercial and tax law require (Art. 6 (1) (c) GDPR).

For every new subscription we also receive an internal push notification. For this we transmit the email address, plan and amount to OneSignal, Inc. (USA), which delivers the notification on our behalf. OneSignal is certified under the EU-U.S. Data Privacy Framework, and the transfer relies on the European Commission's adequacy decision (Art. 45 GDPR). The legal basis is Art. 6 (1) (f) GDPR, our interest in noticing new subscriptions promptly.

12. Using Calendar Butler

Customer account and login

If you have an account, we store your account data: name, email address, chosen plan, the calendar addresses you have registered and, if you use the dashboard, the hourly rate you entered for the profitability calculation. For logging in we also process a login link or one-time code, the data stored for two-factor authentication if you have enabled it, and the times of your logins. The legal basis is Art. 6 (1) (b) GDPR, and for securing the login Art. 6 (1) (f) GDPR. We store this data for the duration of the contract and delete it afterwards unless statutory retention obligations apply.

Processing calendar invitations

Calendar Butler is invited to appointments like a participant. Incoming invitations are processed automatically and sent as anonymous blocks to the calendar addresses of the respective user, without exposing any client data. Only the technically required details are stored: the start and end of the appointment, the recurrence rule for series, a technical appointment ID and the sender's domain. Subject, description, names and addresses of other participants and attachments are not stored. The invitation received is deleted after processing. If a message reaches us that is not a calendar invitation, we reply to the sender with a short notice and do not forward the message.

For this processing our users are the controllers and we act as processor under a contract pursuant to Art. 28 GDPR. If you are affected as an inviting person and wish to exercise your rights, please contact the user who invited you. You may also contact us directly, and we will then support the user in answering.

Sending email

All emails that Calendar Butler sends, that is login links, appointment blocks and system messages, are sent through Twilio SendGrid (Twilio Inc., USA). The recipient address and the content of the respective message are processed in the process. The transfer to the USA relies on the European Commission's standard contractual clauses (Art. 46 (2) (c) GDPR). We have a data processing agreement with the provider.

Servers and databases

The processing of invitations and the appointment database run on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in Germany. Accounts, settings and the mailbox that receives invitations are hosted by ALL-INKL.COM. We have data processing agreements with both providers under Art. 28 GDPR.

13. Transfers to third countries

Data only reaches the USA if you use a service of Stripe or TidyCal, or if we send emails through Twilio SendGrid or have the internal push notification delivered through OneSignal. We state the respective basis for each service above. Everything else, that is the website, accounts, databases and mailboxes, is hosted by providers in Germany.

14. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21) against us as the controller. Where we base processing on your consent, you can withdraw it at any time with effect for the future (Art. 7 (3)).

You may object at any time, on grounds relating to your particular situation, to processing of your data that we base on legitimate interests (Art. 6 (1) (f) GDPR). We will then stop processing the data unless we can demonstrate compelling legitimate grounds.

There is no automated decision-making, including profiling, under Art. 22 GDPR.

To exercise your rights, a message to contact@calendarbutler.com is enough.

15. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de. You can also contact the supervisory authority at your place of residence or work.

16. Updates

We update this policy when our service or the legal situation changes. Last updated: October 31, 2026.