Privacy Policy

Effective date

17 March 2026

1. Controller (who is responsible)

The controller for data processing on this Platform is:

Mamello GmbH Sankt-Wendel-Str. 46, 81379 Munich, Germany Email: [email protected] Website: www.freebord.com Commercial Register: HRB 256798, Amtsgericht München VAT ID (USt-IdNr.) according to § 27a UStG: DE331162502

This Privacy Policy applies to our services offered under FREEBORD / Freebord Journey across multiple domains (including community.freebord.com), unless a service provides a separate privacy notice.

2. What this Privacy Policy covers

This Privacy Policy explains:

  • what personal data we collect
  • why we process it and on which legal basis
  • how long we store it
  • who we share it with
  • your rights under the GDPR

3. Personal data we process

Depending on how you use the Platform, we may process:

  • Account data: name, username, email address, password hash, account settings
  • Profile and community data: profile info you add, posts, comments, messages, uploaded content
  • Purchase and subscription data: billing details, subscription status, invoices/receipts (payment details are typically handled by payment providers)
  • Bookings data: session bookings, availability, location/city info, communication related to bookings
  • Support communications: emails and messages you send us
  • Technical data: IP address, device/browser information, log files, timestamps
  • Usage and analytics data: how you interact with the Platform (pages viewed, clicks, session duration)

4. Purposes and legal bases (GDPR)

We process personal data for the following purposes:

PurposeExamplesLegal basis
Provide the Platform and create your Accountlogin, community access, account managementArt. 6(1)(b) GDPR (contract)
Provide paid servicessubscriptions, bookings, invoicingArt. 6(1)(b) GDPR
Customer supportanswering questions, troubleshootingArt. 6(1)(b) and/or Art. 6(1)(f) GDPR
Security and abuse preventionfraud prevention, rate limiting, moderationArt. 6(1)(f) GDPR (legitimate interests)
Legal compliancetax/accounting retention, responding to authoritiesArt. 6(1)(c) GDPR
Marketing communications (if applicable)newsletters, product updatesArt. 6(1)(a) GDPR (consent) or Art. 6(1)(f) where permitted
Analytics and performanceunderstanding what works, improving UXArt. 6(1)(a) GDPR (consent) where required

5. Cookies and analytics (Google Analytics)

We use cookies and similar technologies to:

  • keep you logged in
  • remember preferences
  • protect the Platform
  • measure and improve performance

We use Google Analytics to understand how users interact with the Platform and to improve performance.

Where required by law, we ask for your consent before placing non-essential cookies (for example analytics/marketing cookies, including Google Analytics). You can change your cookie preferences at any time via our cookie settings (if available) or through your browser settings.

6. Payment providers (Stripe and PayPal)

If you purchase subscriptions or book paid services, payments are processed by third-party payment providers such as Stripe and PayPal.

We receive confirmation of payment status and transaction references, but we do not typically store full payment card details.

The payment providers process your data under their own privacy policies.

7. Sharing data with processors and third parties

We may share personal data with trusted service providers (processors) who help us operate the Platform, such as:

  • hosting and infrastructure providers
  • email delivery and customer support tools
  • analytics providers (including Google Analytics)
  • payment providers (including Stripe and PayPal)

We only share what is necessary, and we require appropriate data protection safeguards.

8. International data transfers

Some of our service providers may process data outside the European Economic Area (EEA). Where this happens, we use appropriate safeguards (for example EU Standard Contractual Clauses) and take additional measures where required.

9. Data retention

We keep personal data only as long as necessary for the purposes described above, including:

  • as long as your Account is active
  • as needed to provide services you purchased
  • as required by legal retention obligations (for example accounting/tax)

You can request deletion of your Account (see Section 12). Some data may be retained where legally required or where necessary to establish, exercise, or defend legal claims.

10. Community content and visibility

If you post content in the Community, it may be visible to other users depending on your settings and the feature you use. Please avoid sharing sensitive personal data publicly.

11. Security

We use appropriate technical and organizational measures to protect personal data. However, no system is 100% secure.

12. Your rights (GDPR)

You have the right to:

  • access your personal data
  • correct inaccurate data
  • request deletion (“right to be forgotten”)
  • restrict processing
  • data portability
  • object to processing based on legitimate interests
  • withdraw consent at any time (where processing is based on consent)

To exercise your rights, contact us at [email protected].

13. Complaints

You also have the right to lodge a complaint with a supervisory authority. In Germany, you can contact your local data protection authority.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide reasonable notice on the Platform.

15. Contact

Questions about privacy: [email protected]