Legal
Privacy
What this site collects, on what legal basis, how long it is kept and who processes it on our behalf. If you join the early-access list we store your email address, the language you chose, the product, and the time and IP address of both your signup and your confirmation — the latter as evidence of your consent. Without a confirmation the entry is deleted after 14 days.
Draft — not reviewed by a lawyer, and not yet complete: some of the provider details are still missing. This notice disappears by itself once none of them are.
Controller
The controller for the processing described here, within the meaning of Art. 4 (7) GDPR, is: [FIRMIERUNG EINSCHLIESSLICH RECHTSFORM], Fahlenkampsweg 4b, 23562 Lübeck, Deutschland.
You can reach us at eike@swat.de.
We have not appointed a data protection officer. We are not required to: fewer than twenty people here are permanently engaged in automated processing, and processing personal data is not what this business does — it is what running a service for its customers involves.
Early-access list
Purpose. If you enter your address in the early-access form, we add it to a list in order to notify you once, when Lithic opens for sign-ups.
Legal basis. Your consent, Art. 6(1)(a) GDPR. The consent takes effect only when you click the link in our confirmation email (double opt-in). Without that confirmation we do not write to you.
What we store. Your email address; the language you chose on the site; which product you signed up for; the time of your signup and of your confirmation; and the IP address used for each.
Why the IP addresses. Art. 7(1) GDPR requires us to be able to demonstrate that consent was given. The time and IP address of your confirmation are that evidence. They are used for nothing else — in particular not for analytics and not to determine your location.
How long. If you do not confirm, we delete the entry including the IP address no later than 14 days after your signup. Once confirmed, we keep it until you withdraw your consent or the purpose no longer applies.
Withdrawal. You can withdraw your consent at any time, through the link in every message we send or by writing to the address above. We then delete the entire entry, including the stored IP addresses. This does not affect the lawfulness of the processing carried out before the withdrawal.
Recipients. The data is stored on servers we operate at netcup GmbH, Emmy-Noether-Straße 10, D-76131 Karlsruhe. We use netcup GmbH, Emmy-Noether-Straße 10, D-76131 Karlsruhe as a processor for sending the messages, under a data processing agreement pursuant to Art. 28 GDPR. The list is not passed on beyond that — none of it reaches the further recipients set out under "Recipients" below.
Not a condition. Joining the list is voluntary and is not a condition of using this website.
Hosting and server logs
This site is served from netcup GmbH, Emmy-Noether-Straße 10, D-76131 Karlsruhe, which processes personal data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.
Every request is written to a log: the requesting IP address, the time, the page requested, the HTTP status, the amount of data sent, and the browser and operating system your device reports.
Legal basis and purpose. Art. 6(1)(f) GDPR. Our legitimate interest is operating the site securely and being able to investigate a fault or an attack afterwards. Without these entries an outage cannot be diagnosed and abuse cannot be traced.
How long. 7 Tage, after which the entries are deleted or the addresses in them shortened.
No cookies, no third parties
This site sets no cookies and loads nothing from third-party servers. Fonts are delivered from this site, not from a font service, so visiting these pages does not disclose your address to anybody else.
The one thing stored in your browser is which colour theme you chose. It never leaves your device and is not personal data in any sense that reaches us.
There is no analytics, no tracking pixel and no advertising network on any page here. That is also why you were not asked to consent to anything.
Recipients
What is written above still holds for this website: it loads nothing from third-party servers. The recipients below receive data out of Lithic itself — out of what happens in your account once you have signed up.
Operation and delivery. Everything you store in the service is held on servers we operate at netcup GmbH, Emmy-Noether-Straße 10, D-76131 Karlsruhe. For the messages the service sends we use netcup GmbH, Emmy-Noether-Straße 10, D-76131 Karlsruhe. Both process the data on our behalf, under a data processing agreement pursuant to Art. 28 GDPR. This applies to every use of the service and cannot be switched off: without servers and without mail there is no service.
Payment. Only if you take out a paid subscription. The payment then runs through the payment provider Stripe ([VERTRAGSPARTNERIN DES ZAHLUNGSDIENSTLEISTERS MIT ANSCHRIFT]). We pass on the billing details you entered yourself — name, billing address and billing email address — together with the plan you chose, the product you bought, the number of seats being billed, and an internal identifier of your workspace, so that the payment can be matched to the right account. The payment details themselves you enter on the payment provider's own page: card numbers and bank details never reach us and are not stored here. As long as you buy nothing, nothing is sent there at all.
Calendars. Only if you switch it on. You can connect your account to a calendar: to Google, to Microsoft, or to any CalDAV server whose address you supply. Each person decides this for their own account, and anybody who connects nothing sends nothing. With Google and Microsoft you sign in at the provider itself; with a CalDAV server you leave the credentials with us.
What goes out is deliberately the minimum. When you publish a scheduled entry to a connected calendar, we send the text of that line as the title, its start and end as clock times, the time zone chosen for it, and a technical key so the same entry cannot land in the calendar twice. No description, no location, no attendees, and no link back to the document. If you move or rename a meeting that is already in that calendar from here, only the new time or the new title goes out. If you delete it here, it is deleted there.
In the other direction we read the calendars you selected and store their events here so that your planner can show them. The provider you connect is yours, not ours: it processes on its own responsibility and under its own terms. You can disconnect at any time in the settings, after which nothing further goes out.
There are no other recipients for the processing described here. We do not sell data, and we use neither analytics services nor advertising networks.
Your rights
You have the right to obtain confirmation of whether we process data about you and to receive a copy of it (Art. 15), to have inaccurate data corrected (Art. 16), to have data erased (Art. 17), to have processing restricted (Art. 18), and to receive the data you gave us in a machine-readable format (Art. 20).
Where we process on the basis of a legitimate interest, you have the right to object at any time on grounds relating to your particular situation (Art. 21). Where we process on the basis of your consent, you can withdraw it at any time, with effect for the future.
Write to eike@swat.de for any of these. We answer within a month; if a request is complicated enough to need longer, we will say so and why.
Complaints
You can complain to a supervisory authority about how we handle your data, without asking us first (Art. 77 GDPR). The one responsible for us is: [ZUSTÄNDIGE DATENSCHUTZ-AUFSICHTSBEHÖRDE]. You may also approach the authority where you live or work.