Privacy

Privacy Policy

This privacy policy informs about the processing of personal data when using our website and web app Adstatis (adstatis.com). The offer is exclusively directed at businesses (B2B).

Effective: January 10, 2026

Use of Meta Marketing API

Interface to the Ads Manager

1. Ad Account Access

We read the user's ad accounts so they can select which account the ads should be placed on. The selected account ID is stored in our system.

2. Campaigns and Pixels

We read existing campaigns and pixels so the user can place new ads within existing campaign structures.

3. Facebook Pages

We read the user's pages to use them as the sender of the ads. The selected page ID is stored in our system.

4. Ad Creation

The user creates ad creatives in our tool. These are then published as ads in the user's ad account via the Marketing API.

5. Performance Data

We display the performance of the user's ads (impressions, clicks, spend) so they can track campaign success.

6. Access Token

We store the user's access token encrypted in our database to avoid repeated logins.

Disconnect & Delete Data

The user can disconnect at any time. All stored platform data (tokens, IDs) will be irrevocably deleted. Disconnecting the Meta account is done easily via the Settings page.

1. Controller

Company

Fa. Lastowiecki

Owner: Nina Lastowiecki

Address

Römlinghovener Strasse 77

53639 Königswinter
Germany

02223/7878870

2. Terms and Legal Bases

We process personal data based on the following legal bases of the GDPR in particular:

Art. 6(1)(b)

Contract Performance

e.g. account creation, provision of the app, billing

Art. 6(1)(c)

Legal Obligation

e.g. commercial and tax law retention requirements

Art. 6(1)(f)

Legitimate Interest

e.g. IT security, abuse prevention, error analysis

Art. 6(1)(a)

Consent

specifically for non-essential cookies/tracking/marketing

3. Server Logs Upon Visit

When visiting our pages, our system processes technically necessary data (server log files):

IP AddressReferrerBrowser/OSTimeRequested URLStatus Code

Purpose

Delivery of website/app, stability, security, error diagnosis.

Legal basis: Art. 6(1)(f) GDPR

4. Hosting, CDN & Infrastructure

Vercel

Hosting/Deployment/Edge

Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA

Privacy

Cloudflare

CDN, WAF/Security, DNS

Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA

Privacy

Google Cloud

Cloud-Infrastruktur

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

Privacy

5. Cookies & Consent Management

We use a cookie banner to obtain and document consent for non-essential technologies.

Essential Cookies

Without consent

Login, security, site functionality

Art. 6 Abs. 1 lit. f

Analytics/Statistics

With consent

Reach measurement, product improvement

Art. 6 Abs. 1 lit. a

Marketing

With consent

Conversion measurement, retargeting

Art. 6 Abs. 1 lit. a

6. Tag Management, Analytics & Tracking

Google Tag Manager (GTM)

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

Privacy

Google Analytics (GA4)

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

Privacy

Vercel Analytics

Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA

Privacy

7. Advertising, Conversion Measurement & Retargeting

If you consent, we use technologies for conversion measurement and (where applicable) retargeting. Cookie IDs, device IDs, IP address, and event data may be transmitted to the respective platform.

Meta (Facebook/Instagram)

Meta Platforms Ireland Limited, Dublin 4, Irland

Privacy

TikTok

TikTok Technology Ltd., Dublin, Irland

Privacy

LinkedIn

LinkedIn Ireland Unlimited Company, Dublin 2, Irland

Privacy

Google Ads

Google Ireland Limited, Dublin 4, Irland

Privacy

8. User Account & Authentication

Clerk

User-Management/Authentifizierung

Clerk, Inc., 660 King Street, Unit 345, San Francisco, CA 94107, USA

Privacy

Purposes: Login, session management, security features, account management.

9. Communication, Support & Emails

Resend

Transaktions-E-Mails

Plus Five Five, Inc., San Francisco, CA, USA

Privacy

Intercom

Support/Chat

Intercom, Inc., San Francisco, CA, USA

Privacy

10. Payment Processing

For paid services, we process billing and payment data. Payment data is processed directly by the payment service provider.

Stripe

Stripe Payments Europe, Limited, Dublin 2, Irland

Privacy

PayPal

PayPal (Europe) S.à r.l., Luxembourg

Privacy

11. Databases, Storage & Technical Services

Neon

Datenbank-Hosting

Neon Inc., San Francisco, CA, USA

Privacy

Upstash

Cache/Rate-Limiting

Upstash, Inc., USA

Privacy

12. AI-Powered Features

For certain features (e.g. generation/optimization of texts, images), we may use external AI service providers. Input and result data may be transmitted to these providers.

OpenAI

OpenAI, LLC, San Francisco, CA, USA

Privacy

fal (Features & Labels Inc.)

Features & Labels Inc., San Francisco, CA, USA

Privacy

13. Data Retention

We store personal data only as long as necessary for the purposes or as required by statutory obligations:

Contract/Account Data

For the duration of the contract and a reasonable time thereafter

Billing Data

According to commercial/tax law, typically up to 10 years

Log/Security Data

As short as possible, depending on security needs

14. Your Rights (Data Subject Rights)

Right of Access

Art. 15 GDPR

Right of Rectification

Art. 16 GDPR

Right of Erasure

Art. 17 GDPR

Restriction

Art. 18 GDPR

Data Portability

Art. 20 GDPR

Right to Object

Art. 21 GDPR

Withdrawal of granted consent (Art. 7(3)) is possible at any time with effect for the future.