This Privacy Policy explains what personal data CommonLend collects on this waitlist site, the legal basis for processing it, and the rights you have under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The final policy will be reviewed by counsel before any regulated launch.
1. Data controller
Responsible for processing is the legal entity identified in our Impressum. Privacy enquiries: support@commonlend.com.
2. What we collect
- Your email address.
- Your country of residence.
- Whether you indicated interest in lending or borrowing.
- Your preferred language at the moment of signup.
- An optional referrer code if you arrived via a tracked link.
- Standard server-side request metadata (IP, user agent, timestamp).
- If you grant analytics consent: pseudonymous usage events from our self-hosted Umami instance (page URL, referrer, device class, country derived from a truncated IP). No cookies are set; no cross-site identifiers are created.
3. Legal basis
- Waitlist signup and email confirmation: Art. 6(1)(b) GDPR — performance of a pre-contractual measure you requested.
- Server request logs: Art. 6(1)(f) GDPR — our legitimate interest in defending the service against abuse. Retention: 14 days.
- Analytics: Art. 6(1)(a) GDPR — your explicit consent, granted in the cookie banner and revocable at any time via the "Cookie settings" link in the footer.
4. Retention
- Waitlist record: until you unsubscribe or until launch + 90 days.
- Server access logs: 14 days, then automatically purged.
- Analytics events: 12 months, aggregated and anonymous.
5. Recipients and international transfers
Personal data is processed on EU infrastructure (IONOS, Germany). We do not transfer your data to third countries. The Umami analytics instance is self-hosted at analytics.commonlend.com on the same EU server; it does not share data with third parties.
6. Your rights
Under Articles 15–22 GDPR you have the right to access your data, to rectification, to erasure ("right to be forgotten"), to restriction of processing, to data portability, and to object to processing based on legitimate interests. To exercise these rights write to support@commonlend.com.
You may withdraw analytics consent at any time via the "Cookie settings" link in the footer. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
7. Right to lodge a complaint
You may complain to a supervisory authority. In Germany the lead authority depends on the controller's registered seat; the federal authority is the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI), www.bfdi.bund.de.
8. Automated decision-making
We do not use automated decision-making, including profiling, on this waitlist site.
9. Removing yourself
Every confirmation email includes an unsubscribe link that hard-deletes your row. You can also email support@commonlend.com and we will remove your record within one business day.