Privacy notice

Last updated: 2 September 2026

1. Controller

DLAZ GmbH, Dalbenstraße 17, 26135 Oldenburg, Germany. BaFin-ID 10123506.

2. Data collected

• Order data: name, email, billing address, chosen extension.
• Payment data: SEPA mandate reference or masked card token, processed by our payment service provider.
• Support data: any content sent to support@schoolsfi.com.de.
• Cookie preference (see Cookies).

3. Data NOT collected

Extensions read the Schoolsfi app data locally on the customer's device. Your transaction feed, balances and account numbers are not transmitted to our servers.

4. Legal basis

Art. 6(1)(b) GDPR (contract) for order and billing; Art. 6(1)(c) GDPR for legal retention; Art. 6(1)(a) for cookie consent.

5. Retention

Order records for 10 years under German Handelsgesetzbuch. Support emails 24 months.

6. Your rights

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Email support@schoolsfi.com.de to exercise these.

7. Supervisory authority

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf.