Privacy Notice
Your privacy matters to us. Learn how we collect, use, and protect your personal data with full transparency and GDPR compliance.
- GDPR Compliant
- Servers in the EU
- SSL Encrypted
Last updated: October 2026
Key Privacy Points
Your data protection at a glance
Table of Contents
This privacy notice for Run4Dev (doing business as Crew Active), ("Crew Active", "we", "us" or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services (the "Services"), such as when you:
- Visit our website at https://www.crew-active.de, or any website of ours that links to this privacy notice
- Download and use our mobile application (Crew Active) or any other application of ours that links to this privacy notice
- Engage with us in other related ways, including any sales, marketing, or events
Questions or concerns?
Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us through our contact form.
1. What Information Do We Collect?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
- Names
- Phone numbers
- Email addresses
- Mailing addresses
- Passwords
- Billing addresses
Health data on behalf of our customers. When a business uses Crew Active, we store its employees' absences for it, including sick days, and sick notes uploaded as a photo or file. These are health data under Art. 9 GDPR. We process them only on behalf of that business, which is the controller (processing on behalf under Art. 28 GDPR). The business's legal basis is Art. 9(2)(b) GDPR (rights and obligations under employment law).
Contact and demo forms. When you write to us through the contact or demo form, we store your details (name, email address, phone number, company, industry, company size and, if given, your message) in our database to answer your request and, where relevant, arrange a demo. Our team is notified by email through Brevo and by push notification in our app through Expo (USA, see section 4); the push notification contains your name, company, industry, company size and your message. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We keep your request as long as it is needed to handle it and for a possible collaboration; at your request we delete it, unless a legal retention obligation applies.
Phone calls with our AI assistant. If you call our number +49 941 94223143, or if we call you, for example about your demo request or your trial, you talk to Anastasia, our AI voice assistant. You are not talking to a human. At the start Anastasia says that she is an AI and that the call is written down (transcribed). We process your phone number, the time and length of the call, what is said in the call (live, while you talk), a written transcript of the call and a short summary with the result, for example that you would like a demo, a time for a callback, the email address you spell out, and your name and company if you give them. We do not store an audio recording of the call, only the transcript as text and the summary. We use Twilio for the phone connection and OpenAI to understand you, answer and write the summary; data may be transferred to the USA in the process (see section 4). The transcript and the summary are kept on our own computer at our office in Germany, not with a cloud or hosting provider, and are deleted automatically after 12 months. Contact details you give us in the call (name, company, email address, phone number and your request) go into our list of enquiries. We keep them as long as they are needed to handle your request and for a possible collaboration; at your request we delete them, unless a legal retention obligation applies. Anastasia makes no decisions with legal effect on you (Art. 22 GDPR): our team reads the result and takes care of the rest. Legal basis: steps taken at your request before entering into a contract, for example when you ask for a demo or for information (Art. 6(1)(b) GDPR), and our legitimate interest in answering calls efficiently and recording what was agreed (Art. 6(1)(f) GDPR). If you do not want to talk to an AI or do not want the call written down, simply hang up and write to us through our contact form instead. Your rights (access, deletion, objection and more) are set out in section 9.
Registration form. What you type into the registration form at app.crew-active.de/register is stored on our server in the EU (see section 4) while you type, even if you do not finish registering: the company name, the address you picked, your answer to "How did you hear about us?", your email address and the step of the form you were last on. We never store your password this way. It is saved shortly after each pause in typing, when you move to another step and when you leave the page. Each opening of the form gets a random form number; the same number is on the events our visitor statistics count on this page (Umami, see section 5), so we can see where a registration got stuck and what had been entered up to then. We use this only to find and fix errors and obstacles in the form. Legal basis: our legitimate interest in improving our registration (Art. 6(1)(f) GDPR). If you create the account, we delete this record at once, together with any other one that has the same email address or the same company name and address, since your account holds the same details. Otherwise it is deleted automatically 90 days after your last entry. You can object at any time and ask us to delete it by writing to us (see section 13).
Our tools in ChatGPT. If you use our tools for shift plans, working hours, timesheets, vacation plans or snow clearing logs inside ChatGPT (the "Crew Active" plugin), ChatGPT sends our server (ts.crew-active.de) the details the calculation needs, for example names of employees, personnel numbers, work sites, working times and breaks, days off for vacation or public holidays, vacation periods and entitlements, hourly wages, the company name, or the entries of a snow clearing log. We calculate the result and the Excel file from them and send both straight back. We do not store these details: they are not written to our database, and our logs do not contain them, only which tool was used, when, how long it took, whether it worked and how many rows the result has. You do not need a Crew Active account for this. The request reaches us from OpenAI's servers, not from your device. What you enter in ChatGPT is processed by OpenAI under its own privacy policy; if you download the Excel file, ChatGPT stores it with OpenAI for that. Please enter only what the calculation needs, and no reasons for absences. Legal basis: providing the tool you asked for (Art. 6(1)(b) GDPR) and, where you enter details of your employees, our legitimate interest in giving you the result (Art. 6(1)(f) GDPR).
AI chat on this website. Only you open the AI chat on www.crew-active.de, with a tap on its button. So that the button only appears when we have switched the chat on, every page with the chat asks our server at ts.crew-active.de whether it is on when it loads; the server receives your IP address in the process (server log files, see above). When you point at the button, your browser already loads the chat's program file from our website. When it opens, the chat asks our server for a session. When you write to it, we send your question, the conversation so far in this chat and the address of the page you are on, through our server, to OpenRouter (USA). OpenRouter passes it to Together AI or, if Together AI is not available, to DeepInfra (both USA), where the open AI model DeepSeek answers it. DeepSeek, the model's Chinese developer, receives no data. These providers process the data on our behalf; the transfer to the USA is covered by the EU Standard Contractual Clauses, and none of them keeps the requests or uses them for training. We store every chat in full in our database on our server at Hostinger in Lithuania (EU, see "Hosting" in section 4): your questions and the answers word for word with date and time, the language, the pages on which you used the chat, the page you came to us from (referrer), what you opened the chat with, device type, browser and operating system (from your browser's identifier), your browser's language and time zone, your IP address, which links in the chat you tap, and for each answer technical details such as model, cost, response time and errors. We use this data to answer your questions, to see what visitors want to know and where the chat could not help, and to improve the chat and our offer. Only we, the Crew Active team, have access to it. To evaluate the chats we also use AI assistants, such as Claude by Anthropic (USA); they get the chats without your IP address. We delete a chat with all of these details automatically 30 days after its last message; the backup copies of our database, which we keep only to restore it after a failure, still hold it for up to 16 days after that. We also limit the number of questions per IP address against misuse. So that the conversation is kept when you change pages, it is held in your browser's session storage (sessionStorage) after your first question and disappears when you close the tab. The chat is an AI and can make mistakes; you get binding information from us in person. Please do not enter data about your employees or health data. Legal basis: your request to us (Art. 6(1)(b) GDPR) and our legitimate interest in answering questions about our product quickly and in improving the chat and our offer from the conversations (Art. 6(1)(f) GDPR); storing the conversation in session storage is strictly necessary for the chat you asked for (§ 25(2) no. 2 TDDDG). You can object to the storage at any time and ask us to delete your chat, most easily through our contact form with the date and time of the chat. Your other rights (access, rectification, restriction and more) are set out in section 9.
Application Data. If you use our application(s), we also may collect the following information if you choose to provide us with access or permission:
- Geolocation Information. Our app reads your mobile device's location only if you allow it in the device's settings, only while the app is open and never in the background. In time tracking, we store a single location point when you tap Start, Break, Resume or Stop (also Start again), if your employer has the "GPS Required" setting on (it is on by default) and your device is online. With each point we store its time, its accuracy and the values the device supplies (altitude, heading, speed and whether the location is simulated). So that the point is ready faster, the app on Android devices already measures the location when it is opened and each time you return to it; if you tap within a minute, that reading is the point we store. If your employer has switched on "Check the company site", the app takes a fresh location point before the first Start of the day, before every Stop or before both, checks with it whether you are at the company site, and stores it. If the app refuses a Start or Stop away from the site, we receive only the distance and the accuracy, not the location. During the break itself, between clock events and after work, we store no location. The app also reads your location when you yourself tap "Set location here" on a machine or "Show my location" while entering an address: we find the address for that point and store it with the point, for a machine at once, for an address when you use it. If you wish to change our access, you may do so in your device's settings.
- Mobile Device Access. We may request access or permission to certain features from your mobile device, including your mobile device's camera, and other features. If you wish to change our access or permissions, you may do so in your device's settings.
- Mobile Device Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, hardware model Internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server).
- Push Notifications. We may request to send you push notifications regarding your account or certain features of the application(s). If you wish to opt out from receiving these types of communications, you may turn them off in your device's settings.
This information is primarily needed to maintain the security and operation of our application(s), for troubleshooting, and for our internal analytics and reporting purposes.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
Information automatically collected
In Short: Some information, such as your Internet Protocol (IP) address and/or browser and device characteristics, is collected automatically when you visit our Services.
We automatically collect certain information when you visit, use or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
Like many businesses, we also collect information through cookies and similar technologies.
The information we collect includes:
- Server log files. When you open a page of www.crew-active.de or app.crew-active.de or use our apps, our web server automatically stores your full IP address, the date and time, the address requested, the status code, the amount of data transferred, the page you came from (referrer), your browser details (user agent) and the host name requested. We use these log files to keep our services running and secure, to find errors and to fend off attacks. In addition, for browsers that visit our website more than once, we match the page views in our visitor statistics (Umami, see section 5) against the log files. In doing so we see these visitors' IP address, the name of their network (for example an internet provider or a company) and their browser details, so we can tell whether a prospective customer comes back. The log files are kept on our server in the EU (see section 4) and are deleted automatically after 15 days at the latest. In addition, our application (the interface at ts.crew-active.de, used by our apps, app.crew-active.de and the forms) logs every request with the IP address, the address requested, the status code and, for small requests, their content, with passwords and access keys made unreadable. We use these logs to find errors and fend off misuse; they are also kept on our server and are deleted after 90 days. Legal basis: our legitimate interest in operating our services securely and in analysing our website (Art. 6(1)(f) GDPR).
- Device Data. We collect device data such as information about your computer, phone, tablet or other device you use to access the Services.
- Location Data. We collect location data such as information about your device's location, which can be either precise or imprecise. You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device.
2. How Do We Process Your Information?
In Short: We process your information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent.
We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
- To facilitate account creation and authentication and otherwise manage user accounts.
- To deliver and facilitate delivery of services to the user.
- To respond to user inquiries/offer support to users.
- To send administrative information to you about our products and services, changes to our terms and policies.
- To protect our Services: for example, to prevent spam or attempts to defraud users, to debug and repair errors, to ensure the security and operation of our Services.
- To enforce our terms, conditions and policies for business purposes, to comply with legal and regulatory requirements.
- To deliver targeted advertising to you and measure its effectiveness.
- To use data analytics to improve our Services, to develop new products, services, features, and functionality.
- To process payments and provide you with the requested service.
- To request feedback and to contact you about your use of our Services.
- To protect our rights or interests, or property or safety.
- To comply with the California Consumer Privacy Act (CCPA).
3. What Legal Bases Do We Rely On To Process Your Information?
In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law.
If you are located in the EU or UK, this section applies to you.
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases:
- Consent. We may process your information if you have given us permission to use your personal information for a specific purpose. You can withdraw your consent at any time.
- Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you.
- Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests.
- Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations.
- Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party.
If you are located in Canada, this section applies to you.
We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.
4. When And With Whom Do We Share Your Personal Information?
In Short: We may share information in specific situations described in this section and/or with the following third parties.
We may need to share your personal information in the following situations:
- Hosting. Our website, our web app, the interface our apps use and the database run on a rented server from Hostinger (Hostinger International Ltd., Larnaca, Cyprus) in a data centre in Vilnius, Lithuania (EU). The server log files and our visitor statistics (Umami) are kept there too. Hostinger processes this data on our behalf.
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- Maps, address search and distances (Google Maps Platform). For maps, for finding and checking addresses and for calculating distances we use the Google Maps Platform. Maps: when the web app, or the app on an Android phone, shows a map, your browser or phone loads it directly from Google; Google receives your IP address, details of your browser or device and the map area shown. Address search: when you type an address, the characters you type go directly from your device to Google, and in the app also a reference point (the address being edited or your company's address) so that nearby results come first. From our server we send Google: addresses entered in Crew Active, to find their coordinates; a point a user taps on the map or takes over as their phone's location (for example for a machine's location), to find the address for it; for routes and distances, the coordinates of start and destination, such as the company location an employee is assigned to and the job address; and for the map in the GPS proof, the coordinates of the location points measured at clock events, with their accuracy, and those of the site. We do not send names or contact details to Google in the process. The legal basis is the performance of our contract where you are our contracting party yourself (Art. 6(1)(b) GDPR), otherwise our legitimate interest, and that of our customers, in working maps, address search and distances in Crew Active (Art. 6(1)(f) GDPR). Under its Controller-Controller Data Protection Terms, Google processes this data as an independent controller. Data may be transferred to Google LLC in the USA in the process. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023 (Art. 45 GDPR); where it does not apply, the EU Standard Contractual Clauses in Google's terms apply. More information: policies.google.com/privacy. On the iPhone and iPad, the app shows Apple Maps instead of Google maps, on the same legal basis: the device loads the map directly from Apple's servers, so Apple receives, as with any request over the internet, the device's IP address and, through the map tiles it requests, the map area shown. We send Apple no names or contact details. According to Apple's privacy policy, Apple Distribution International Limited (Ireland) is the controller for personal data from the EEA, and Apple bases transfers out of the EEA on the EU Standard Contractual Clauses. More information: Apple's privacy policy and Apple Maps & Privacy.
- When you use the AI assistant. If the AI assistant is enabled for your company and a user asks it a question, we send the question and the data needed to answer it to Anthropic (Claude API, USA). This can include names of employees and customers, jobs, working hours, addresses and absences, sick days included. If Anthropic cannot answer, the request goes to OpenRouter (USA) as a backup, which passes it to Together AI (USA) or, if Together AI is unavailable, to DeepInfra (USA). Both run the open AI model DeepSeek on their own servers in the USA; DeepSeek, the Chinese developer of the model, receives no data. All of these providers process the data as our sub-processors outside the EU, in the USA; the transfer is covered by the EU Standard Contractual Clauses. None of them uses the data to train AI models. Anthropic deletes requests and answers within 30 days; if its automated checks flag a request as a breach of its usage policy, it keeps it for up to 2 years. For the backup we only allow hosting providers that do not retain the requests. We keep the chat for 90 days after its last message, then it is deleted. If a user attaches photos to a question, we send them to the same providers too, without location or other metadata; we keep them with the chat and delete them 90 days after upload. If a user attaches files to a question (PDF, Word, Excel, CSV or text), we read their text on our server and send that text to the same providers; we do not store the file itself, we keep the extracted text with the chat and delete it with the chat 90 days after its last message. Before a user uses the AI assistant or the reading of receipts for the first time, the app asks whether they agree to their data being sent to these providers; without their agreement nothing is sent. We store the agreement with date and time on their account, and they can withdraw it at any time in the settings of the app. If a user rates an answer with thumbs up or down, we store the rating with the answer to improve the assistant. More information: Anthropic, OpenRouter, Together AI, DeepInfra.
- When a receipt is read for an expense. If the AI assistant is enabled for your company and a user photographs a receipt to record an expense, we send the photo, without location or other metadata, to OpenRouter (USA), which passes it to Together AI or DeepInfra (USA) and the open model DeepSeek, with Anthropic (Claude API, USA) as a backup, so that the AI reads from it what the money was spent on, the amount and the date. The user checks these values and can change them before saving. The same rules apply as for the AI assistant above. We keep the receipt photo with the job like every other job photo, together with the amount, what it was for, the receipt date and the values the AI read. If the AI assistant is not enabled, no receipt photo goes to an AI provider.
- Sending emails. We send the emails of our services, for example invitations for employees, password links, invoices and notices about your account, as well as the internal notification about contact and demo requests, through Brevo (Sendinblue SAS, Paris, France). For this, Brevo receives the recipient's address, name and the content of the email and processes them on our behalf. More information: Brevo.
- Push notifications. If you allow push notifications in the app, we send them through the Expo service (650 Industries, Inc., USA), which passes them to Apple or Google for delivery to your device. For this, Expo receives your device's push token and the content of the notification. Data is transferred to the USA in the process. More information: Expo.
- Video calls for demos. We hold demos by video call via Google Meet, Zoom or Microsoft Teams. The provider concerned processes the data needed for the call, for example name, email address, IP address, and picture and sound. Data may be transferred to the USA in the process. Legal basis: carrying out the demo you asked for (Art. 6(1)(b) GDPR). More information: Google, Zoom, Microsoft.
- Phone calls with our AI assistant. For calls with Anastasia (see section 1) we use two services. Twilio (Twilio Inc., San Francisco, USA) is our telephone provider: it connects the call, passes the audio through in real time and processes the connection data (phone numbers, time and length of the call). Recording is not switched on at Twilio. OpenAI (OpenAI Ireland Ltd., Dublin, Ireland) processes the audio during the call, to understand you and answer, and afterwards the transcript, to write the summary. OpenAI processes this data on our behalf. According to OpenAI, data sent through its interface (API) is not used to train its models by default. We tell OpenAI not to store the call; to detect misuse, however, OpenAI may as a rule keep the content for up to 30 days. Data may be transferred to the USA in the process: Twilio Inc. is certified under the EU-US Data Privacy Framework, and the transfer relies on it; for OpenAI the transfer is covered by the EU Standard Contractual Clauses or an adequacy decision of the European Commission. More information: Twilio, OpenAI.
5. Do We Use Cookies And Other Tracking Technologies?
In Short: We count visits to our website and the use of our web app without cookies, with a tool we run ourselves. We only use Google Analytics and measure which Google ads lead to a sign-up if you agree in the cookie banner or on the registration page. We only record your visits to our website if you agree in its cookie banner. We also load the ProvenExpert review seal only with this consent. YouTube videos load from YouTube only when you start them.
Necessary, without consent: we store your choice from the cookie banner on www.crew-active.de or from the cookie notice on app.crew-active.de/register (local storage "crew-active-cookie-consent", after "I agree" on www.crew-active.de also "crew-active-recording-consent" and "crew-active-seal-consent", and the cookie "ca_consent", 12 months), so neither site asks you again. On app.crew-active.de/register the form also keeps, for this browser tab only (session storage, gone when you close the tab), what you typed except the password ("ca-signup-draft", used for 15 minutes, so it comes back if you go back or reload the page). It is deleted when you log in or out and once your account is created.
Visitor statistics without cookies (Umami): to understand how our website and our web app are used and where we can improve them, we use the open-source tool Umami. We run it ourselves on our own server, and the data is not passed on to third parties. Umami sets no cookies and stores nothing in your browser. It records the pages you view, the website you came from, campaign details in the link (utm_*), clicks on certain buttons and links (for example "Free trial"), how far you scroll on a page and where on it you click or tap, with the size of the page and of your browser window (shown to us as heatmaps), how long a page stays open, which of its sections you see and whether you switch away and come back, how quickly the page loads and responds (loading and response times), which version of a page you saw when we compare two versions (A/B test), your browser, operating system, device type, screen size and language, and the country, region and city derived from your IP address. On the registration page app.crew-active.de/register we also count the page view, which steps of the form were reached, which fields you started to fill in, which check stopped a step (for example "email already registered"), whether you left or switched away from the page before finishing and whether you came back (with the step and roughly how long after opening the page), and whether the registration was completed, never what you type in itself. Each of these events except the page view carries the random form number under which we store what you type separately on our server (see "Registration form" in section 1). In the logged-in admin area of app.crew-active.de we also count which screens are opened (only the screen, for example the employee list or the calendar, never names, IDs or other content) and a few steps, again without any content: opening the form for a new employee, customer or job and creating one (for employees and customers, with whether it is the first one), switching tour planning on or off, re-sending a worker invitation, opening the checkout and opening the AI assistant. Each step is noted with the screen it happened on, and some also with how they were started there (for example from a notice at the top or from the menu). There we do not send your name, email address, company or any ID to Umami. Umami itself does not store your IP address. To group the page views of one visit, Umami creates a pseudonymous ID from your IP address and browser details, which changes regularly. We cannot use it to follow you across other websites. For browsers that visit more than once, we match the page views against our server log files (see "Server log files" in section 1). We delete the data after 26 months. Legal basis: our legitimate interest in measuring the use of our website and our web app in a data-saving way (Art. 6(1)(f) GDPR). You can object at any time: (this stores the note "umami.disabled" and the cookie "ca_umami_off", 2 years, in your browser, so that app.crew-active.de no longer counts you either).
Partner links: some websites that recommend Crew Active (our partners) link to us with a partner code in the link (for example "?ref=partnername"). While you browse www.crew-active.de, we add this code to our links, so it reaches the registration at app.crew-active.de. Nothing is stored in your browser for this. If you have agreed to cookies in the banner, the campaign details of a partner link (utm_source, utm_medium) are also kept in the cookie "ca_attribution" described below, and we use them to credit the partner if you come back later without the partner code. If you then create an account, we store the code from the link with your company account, so we can settle the agreed commission with the partner it belongs to. The partner only receives the sign-up date, the package and the payments from us, never your name, email address or company name. Legal basis: our legitimate interest in paying our partners correctly (Art. 6(1)(f) GDPR). We keep the code as long as your company account exists; records of commissions paid are kept as long as tax law requires. You can object at any time by writing to us.
Campaign details at registration: if the link that brings you to the registration at app.crew-active.de carries campaign details (utm_source, utm_medium, utm_campaign, for example "utm_source=chatgpt.com"), we store these three values with your company account when you create it, also without your consent in the cookie banner. If such a link brings you to www.crew-active.de, we add these three values to our links while you browse there, so they reach the registration. They only travel in the links; nothing is stored in your browser for this, and they are not sent to Google or any other third party. We use them to see which websites, campaigns and partners lead to sign-ups, and for a partner link also to credit the partner (see "Partner links" above). Legal basis: our legitimate interest in knowing how new customers find us (Art. 6(1)(f) GDPR). We keep them as long as your company account exists. You can object at any time by writing to us.
Only with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG):
- Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland): usage statistics for our website. Cookies "_ga" and "_ga_*", up to 2 years.
- Measuring Google ads: if you reach us through a Google ad or a link with campaign details, we store the ad's click ID (gclid, gbraid, wbraid), the campaign details (utm_*), the page you landed on and the time in the cookie "ca_attribution" (90 days). Google itself sets the cookie "_gcl_aw" (90 days) for the click ID. If you come from another website without such a link, for example from a Google search, we store in the same cookie only the name of that website (for example "www.google.com", never your search terms), together with the page you landed on and the time. If you go from our website to the registration at app.crew-active.de before making a choice, we pass the click ID and campaign details along in the link, so you can still agree there. Without your consent we do not send them to Google and do not evaluate them, apart from the three campaign details we store at registration (see "Campaign details at registration" above). If you then create an account at app.crew-active.de, we send the event "sign_up" to Google Analytics, which is linked to our Google Ads account, and store these details with your company account, so we can see which ad, website or partner led to the sign-up. Your email address and company name are not sent to Google. We do not use personalised advertising (remarketing).
Data may be transferred to Google LLC in the USA. More information: policies.google.com/privacy.
ProvenExpert review seal, only with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG): if you choose "I agree" in the cookie banner of www.crew-active.de, we show the seal of our ProvenExpert profile (Expert Systems AG, Quedlinburger Str. 1, 10589 Berlin, Germany) with our customer reviews at the bottom of every page. Your browser loads the seal as an image from images.provenexpert.com, so ProvenExpert receives your IP address, details of your browser and our website's address. The seal sets no cookies. Without your consent you only see a link to our profile in its place, and nothing is loaded from ProvenExpert. More information: provenexpert.com/en-us/privacy-policy.
YouTube videos, only after your click (Art. 6(1)(a) GDPR, § 25(1) TDDDG): some of our German pages show explainer films from our YouTube channel. Until you start one, you only see a preview image that we serve ourselves, and nothing is loaded from YouTube. Only your click loads the YouTube player in its privacy-enhanced mode from www.youtube-nocookie.com (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). YouTube then receives your IP address, details of your browser and the address of our page, and while the video plays it may store cookies or similar data in your browser. Data may be transferred to Google LLC in the USA. A note under every video says so and links here. More information: policies.google.com/privacy.
Session recordings, only with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG): if you choose "I agree" in the cookie banner of www.crew-active.de, our Umami also records how you use each page: its content as you see it, mouse movements, clicks, taps and scrolling. We can then play the page view back like a video and see where our website is hard to use. Whatever you type into a field is masked in your browser before anything is sent, and forms such as the demo and contact form and our shift plan tool are left out entirely. Each page is recorded for at most 5 minutes. The recordings are stored on our own server, are not passed on to third parties and are viewed only by our team. We delete them after 26 months, like the other Umami data. The recording sets no cookies and stores nothing in your browser. A browser that is no longer counted (see above) is never recorded. You can withdraw your consent at any time via "Cookie settings" (see below); from then on nothing is recorded.
Withdrawal: you can withdraw your consent at any time with effect for the future via "Cookie settings" at the bottom of every page of www.crew-active.de, also for a choice you made on app.crew-active.de. We then delete the cookies "ca_consent" and "ca_attribution" and the Google Analytics cookies in your browser, your visits are no longer recorded, and the ProvenExpert review seal is no longer loaded. For YouTube videos your click covers only that one play: leave or reload the page and nothing more is loaded from YouTube until you start a video again. What YouTube stored in your browser while it played you can delete in your browser settings (cookies and website data of youtube-nocookie.com and youtube.com).
6. How Long Do We Keep Your Information?
In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible, then we will securely store your personal information and isolate it from any further processing until deletion is possible.
7. How Do We Keep Your Information Safe?
In Short: We aim to protect your personal information through a system of organizational and technical security measures.
We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.
8. Do We Collect Information From Minors?
In Short: We do not knowingly collect data from or market to children under 18 years of age.
We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we have collected from children under age 18, please contact us through our contact form.
9. What Are Your Privacy Rights?
In Short: In some regions, such as the European Economic Area, you have rights that allow you greater access to and control over your personal information.
In some regions (like the EEA, UK, and Canada), you have certain rights under applicable data protection laws. These may include:
- The right to request access and obtain a copy of your personal information
- The right to request rectification or erasure
- The right to restrict the processing of your personal information
- If applicable, the right to data portability
- The right to object to the processing of your personal information
You can make such a request by contacting us through our contact form. We will consider and act upon any request in accordance with applicable data protection laws.
If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm
If you are located in Switzerland, the contact details for the data protection authorities are available here:
https://www.edoeb.admin.ch/
Withdrawing your consent
If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. You can withdraw your consent by contacting us through our contact form.
Account Information
If you would at any time like to review or change the information in your account or terminate your account, you can:
- Contact us using the contact information provided.
- Log in to your account settings and update your user account.
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use and/or comply with applicable legal requirements.
Cookies and similar technologies
Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. To opt out of interest-based advertising by advertisers on our Services visit https://www.aboutads.info/choices/.
10. Controls For Do-Not-Track Features
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. No uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.
11. Do California Residents Have Specific Privacy Rights?
In Short: Yes, if you are a resident of California, you are granted specific rights regarding access to your personal information.
California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.
CCPA Privacy Notice
The California Code of Regulations defines a "resident" as:
- Every individual who is in the USA for other than a temporary or transitory purpose and
- Every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose
What categories of personal information do we collect?
We have collected the following categories of personal information in the past twelve (12) months:
- Identifiers: Contact details, such as real name, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address and account name. (Collected: Yes)
- Personal information categories listed in the California Customer Records statute: A name, signature, Social Security number, physical characteristics or description, address, telephone number, etc. (Collected: No)
- Protected classification characteristics: Gender and date of birth. (Collected: No)
- Commercial information: Records of personal property, products or services purchased. (Collected: No)
- Biometric information: Fingerprints, faceprints, voiceprints, etc. (Collected: No)
- Internet or other similar network activity: Browsing history, search history. (Collected: No)
- Geolocation data: Physical location or movements. (Collected: Yes)
- Audio, electronic, visual information: Images and audio, video or call recordings. (Collected: Yes)
- Professional or employment-related information: Current or past job history. (Collected: No)
- Education information: Student records and directory information. (Collected: No)
- Inferences drawn from other personal information: Profile reflecting preferences, characteristics. (Collected: No)
Your rights with respect to your personal data
- Right to request deletion of the data: You can ask for the deletion of your personal information.
- Right to be informed: You have a right to know whether we collect and use your personal information, the categories we collect, the purposes for which it is used, and more.
- Right to Non-Discrimination: We will not discriminate against you if you exercise your privacy rights.
Run4Dev has not disclosed or sold any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. Run4Dev will not sell personal information in the future belonging to website visitors, users, and other consumers.
You can submit these requests through our contact form. We will respond to your request consistent with applicable law.
12. Do We Make Updates To This Notice?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.
13. How Can You Contact Us About This Notice?
If you have questions or comments about this notice, you may contact us through our contact form.
Run4Dev
Steinweg 4
93059 Regensburg, Germany
14. How Can You Review, Update, Or Delete The Data We Collect From You?
Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it in some circumstances. To request to review, update, or delete your personal information, please contact us through our contact form.
Last updated: October 2026
Questions About Your Privacy?
We're here to help
Run4Dev · Steinweg 4 · 93059 Regensburg, Germany