Privacy Notice

In this Privacy Notice, SP Safe Profile eG, Eupener Straße 70, 50933 Cologne, +49 221 957 934 14, info@piahub.io (hereinafter “we” or “us”), informs you about how we, as the controller within the meaning of applicable data protection law, process your personal data when you visit our website at www.piahub.io, participate in a mobile marketing campaign (e.g. a prize draw) run by us or one of our partners, or sign up via one of our RCS channels or the Pia App to receive marketing messages through a channel operated by us.

Personal data means any information relating to an identifiable natural person that you provide to us, that is generated in the course of our activities, or that we collect. This includes, for example:

Usage Date

We create pseudonymous usage profiles relating to your use of our website, which allow us to understand how our website is used.

We create a separate pseudonymous usage profile relating to your use of our services. In this profile, we store your telephone number as well as the interests you have shared with us through various campaigns or similar activities.

Server Log Data

When you use our website, data relating to your visit (such as the date and time of your visit, pages accessed and files requested, the type and version of your web browser, the type and operating system of your device, and your IP address) is temporarily stored in a log file on our servers..

Contact Data

If you provide us with your telephone number, for example as part of an advertising campaign (e.g. a prize draw), we store that telephone number in a profile that we use for future advertising campaigns. Apart from your telephone number and a pseudonymised user ID that we create, the profile contains only various markers indicating your interests in advertising content. These markers are derived from your participation in prize draws, information you provide in the Pia App, or automated or AI-assisted generation.

To provide the website and our services

The processing of server log data is necessary for technical reasons to provide our websites and services and, subsequently, to ensure system security.

The legal basis for this processing is our legitimate interest in providing the website and our services pursuant to Article 6(1)(f) GDPR. This processing is strictly necessary for the use of our website. If you exercise your right to object, we can therefore demonstrate compelling legitimate grounds that permit us to continue processing the data.

The data is deleted after no more than [12] days.

Server log data may subsequently be analysed in anonymised form for statistical purposes and to improve the quality of our website. Server log data is neither linked to your personal data nor combined with other sources of personal data.

To administer prize draws

We and our partners run prize draws to acquire customers. If one of our partners runs a prize draw, please refer to that partner’s privacy notice. We also run our own prize draws. These are governed by our respective terms and conditions, which we draw to your attention separately, and this Privacy Notice. We process your telephone number to administer the relevant prize draw, in particular to determine the winner. For some prize draws run by our partners, we also process your telephone number to contact the winner, as we sometimes handle communications with you on behalf of our partner.

The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR, by which you authorise us in each case to process your telephone number for advertising purposes and to administer the prize draw. In addition, we may process your data to administer the prize draw where this is necessary for the performance of a contract pursuant to Article 6(1)(b) GDPR.

You have the right to withdraw your consent at any time with effect for the future (see Section 8 below for further details).

To send advertising by text message

If you participate in a prize draw run by us or one of our partners, or receive a promotional gift from one of our partners, we ask for your consent to store your telephone number so that we can send you advertising by text message relating to your interests in the relevant area. We then process the information you provide in this context (your telephone number and interests) to send you relevant advertising.

We or our partners also send advertising messages tailored to your interests via the respective RCS channels or the Pia App, within the scope of your consent.

The legal basis for this processing is Article 6(1)(a) GDPR (consent). You have the right to withdraw your consent at any time with effect for the future (see Section 8 below for further details).

To enrich the interests recorded in your profile

We obtain information about your interests in various ways:

• Through your participation in a campaign (a prize draw, a promotional gift from our partners, etc.).
• Through information you enter manually in the Pia App.
• Through the automated identification of likely interests based on the interests you have already shared.

We run our campaigns in cooperation with partner companies. If you participate in a campaign, we assume that you are interested in that partner company’s content and therefore record these interests in your profile. We use these interests to send you targeted advertising messages tailored to your interests.

You can view and manually edit your interests in the Pia App. This allows us to ensure that you only receive advertising messages that interest you.

Finally, we generate additional interests that we consider likely based on the interests already stored in your profile (see below for further details).

The legal basis for processing personal data relating to your interests is Article 6(1)(a) GDPR (consent). You have the right to withdraw your consent at any time with effect for the future (see Section 8 below for further details).

To determine your location

With your consent, we may query your mobile network operator to check whether you are near one of our partner companies offering location-based campaigns. This enables you to receive exclusive offers when you are near one of our partner companies. In response to a query, the relevant mobile network operators only tell us whether you are at the specified location. We do not receive any additional personal data from which we could infer your location.

You will be informed of our location query via the Pia App or our RCS channel in accordance with Section 13(1), sentences 2 and 5, of the German Telecommunications Digital Services Data Protection Act (TDDDG). You will also be informed if the location check was unsuccessful. This is the case if, at the time of the location check, you are not near any of our partners for whom you have given advertising consent.

The legal basis for processing the personal data relating to your location described above is Article 6(1)(a) GDPR and Section 13(1) TDDDG (consent). You have the right to withdraw your consent at any time with effect for the future (see Section 8 below for further details).

Disclosure of data to processors

In some cases, we engage service providers as processors in accordance with the applicable legal requirements, i.e. under a contract requiring them to act on our behalf, in accordance with our instructions and under our control.

These processors include, in particular:

• Technical service providers that we use to provide the website, such as providers of software maintenance, data centre operations and hosting services.
• Technical service providers that we use to provide functionality, such as technically necessary cookies.
• Service providers that implement advertising and marketing activities, such as providers of email delivery services and analytics cookies.

In these cases, we remain responsible for the processing of your data. The disclosure of personal data to our processors and its processing by them are based on the legal basis that permits us to process the data in each case. No separate legal basis is required.

International data transfers

The business partners mentioned above may include entities located abroad. Where these entities are located in countries outside the European Economic Area that are not covered by a European Commission adequacy decision, we ensure the protection of your personal data and the enforceability of your rights through appropriate safeguards, for example standard data protection clauses adopted or approved by the European Commission. Please contact us (see below) if you would like further information or a copy of these safeguards.

What are cookies?

We and our partners use cookies to make our websites as user-friendly as possible and to increase the relevance of our advertising to visitors to our websites. Cookies are small files stored on a visitor’s hard drive. They allow information to be retained for a certain period and the visitor’s computer to be identified. This may also involve the use of tracking pixels, which are not stored on a visitor’s hard drive but can help identify the computer in a similar way to cookies. In the following, the term “cookie” covers cookies in the technical sense, tracking pixels and similar technical methods.

When you visit our websites for the first time, a privacy notice containing the cookie consent text is displayed on the page you first access. If you then continue to use the websites without objecting to the use of cookies, this consent is stored in your browser so that we do not have to display the notice again on every page. If this record is no longer present in your browser, for example because you have cleared your browsing history, the notice will be displayed again the next time you visit our websites.

We use a consent management tool to obtain the consent required under Section 25(1) TDDDG. Through a cookie banner, the website therefore allows you to decide separately, according to your preferences, which cookies may be placed when you use the website. You can change your decision at any time, give your consent at a later date or withdraw it with effect for the future. To do so, you can access the settings and adjust your cookie preferences. The consent management tool provides detailed information about the individual cookies that require consent.

Which cookies do we use, on what legal basis and for how long?

We use technically necessary cookies, without which the functionality of our websites would be limited, as well as optional analytics cookies.

Technically necessary cookies

Technically necessary cookies are essential to enable you to navigate our websites and use their features. They are required for you to use our websites and take full advantage of their functionality. They store an identifier that allows consent already given through other campaigns to be recognised, so that you do not have to be asked for it again. For longer-running campaigns, your current progress is also saved, allowing returning users to continue seamlessly from where they left off on their next visit.

These cookies do not collect information about you intended for marketing purposes or record where you have been on the internet. Disabling this category of cookies would restrict the functionality of all or parts of the websites.

Web analytics (Matomo)

We use the open-source web analytics software Matomo (www.matomo.org) to analyse and improve our website. Matomo is hosted on our own servers, and the data collected is processed exclusively by us.

Matomo is configured so that no tracking cookies are used. No cookies are stored on your device for analytics purposes.

During your visit, technical information may be processed for statistical purposes, including:

• The pages visited.
• The date and time of access.
• Your browser and operating system.
• Your device type.
• The referring website, where available.
• An anonymised IP address, where configured.

The data is used exclusively to evaluate the use of our website, improve its functionality and ensure the stability and security of our services. The data is not used to personally identify visitors and is not disclosed to third parties unless required by law.

Analytics cookies collect information about how visitors use a website overall, for example which pages they visit most frequently and whether they receive error messages from web pages. These cookies do not collect data that can be used to identify visitors. All information collected through these cookies is used exclusively to understand and improve the website’s functionality and services.

AdForm

Cookies from AdForm A/S (Wildersgade 10B, 1, 1408 Copenhagen K, Denmark) are placed to deliver interest-based advertising. For this purpose, information such as the operating system, browser version, anonymised IP addresses, geographical location and number of clicks or views is stored in pseudonymous usage profiles. The cookie placed by AdForm has a lifespan of 12 months. This data is used for the following purposes:

• Recording the number of visitors to www.piahub.io.
• Recording the order in which visitors access the different pages of www.piahub.io.
• Optimising the website.

Adform uses this information to deliver more targeted online advertising based on usage behaviour. To enable the use of advertising space on other websites, cookies are synchronised with the following platforms: Google, Doubleclick, Appnexus, DataXu, Mediamath, TURN, TheTradeDesk, Active Agent and TheAdex.

We use links to our other online presences on third-party websites and services, for example on social media channels such as Facebook, X or YouTube. These third-party service providers are solely responsible for data processing on their websites, and their respective privacy notices apply.

We and our service providers implement technical and organisational security measures to protect the personal data we manage against accidental or deliberate manipulation, loss, destruction or access by unauthorised persons. We continuously improve our data processing and security measures in line with technological developments.

Your personal data is encrypted using Secure Socket Layer (SSL) when transmitted to us. Personal data exchanged between you and us or other companies involved is generally transmitted over encrypted connections that meet current technological standards.

Our employees and the service providers we engage are bound by confidentiality obligations.

Every natural person whose personal data we process generally has the following rights against us, subject to the applicable conditions:

• If you have questions about our processing of your personal data, we will be happy to provide you, at any time and free of charge, with information about the data we hold about you (Article 15 GDPR).
• You have the right to have inaccurate data rectified and incomplete data completed (Article 16 GDPR).
• You have the right to have your personal data blocked, its processing restricted or the data erased where it is no longer required or is retained to comply with legal obligations (Articles 17 and 18 GDPR).
• You have the right to data portability in a structured, commonly used and machine-readable format where you have provided the data to us on the basis of consent or a contract between you and us (Article 20 GDPR).
• You have the right to object at any time to the processing of your data for direct marketing purposes (see also Section 2.6 and Article 21(2) and (3) GDPR).
• You have the right to object to processing based on a legitimate interest, in which case we may demonstrate compelling legitimate grounds for the processing (Article 21(1) GDPR). We have indicated above when this right applies.
• If you have given consent to data processing, you may withdraw it at any time with effect for the future. This means that the lawfulness of processing carried out before the withdrawal remains unaffected. After withdrawing your consent, you may no longer be able to use our services.

Please submit your request in writing, marked “Data Protection”, or by email using the contact details provided above. We reserve the right to verify your identity to ensure that your personal data is not disclosed to unauthorised persons.

From time to time, it is necessary to update the content of this Privacy Notice. We therefore reserve the right to amend it at any time. We will also publish the amended version of the Privacy Notice here. You should therefore read the Privacy Notice again when you next visit our website.

Stand: Juli 2026