Privacy

1. Controller

Oats&Co GmbH (brand Kran-App), Moserhofgasse 49, 8010 Graz, Austria. Privacy requests: privacy@kran-app.com. General contact: lukijan@kran-app.com.

2. Scope

This notice covers www.kran-app.com and app.kran-app.com, including real accounts for Austrian companies.

3. Hosting

Bluehost, Frankfurt, Germany (EU). Application and site servers are in the EU (Frankfurt).

4. What we process

Enquiry forms, account data, company/project/workforce/warehouse/payroll/documentation data needed to run the service, and optional analytics/marketing after consent.

5. Recipients

May include Bluehost, Stripe, Twilio, Firebase/Google, email transport, OpenStreetMap/Leaflet (and optionally Google Maps), OpenWeather, and AI helpers (DeepSeek / related). No EU representative is appointed yet.

6. Retention

Written 25 July 2026: analytics up to 14 months; inactive accounts up to 24 months after last meaningful activity; login/app logs up to 12 months; privacy export files short TTL; hosting backups typically up to 90 days; payroll/accounting/contract records are not auto-deleted until counsel confirms statutory retention.

7. Your rights

Access, rectification, erasure, restriction, portability, objection, and consent withdrawal via privacy@kran-app.com or the Privacy Centre. Supervisory authority: AzLP BiH; people in Austria may also contact the Austrian DSB.