The following notices provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the Legal Notice section of this website.
GenoEasy stores all your genograms and working data exclusively on your own device. Genogram content, client data and health information are never transmitted to our servers or to cloud services. We do not process this local data; it only leaves your device if you export or share it yourself. The technical data the app exchanges with our servers and service providers regardless of this is described in the following sections.
When you activate your licence, the app transmits to our licence server:
Of these technical characteristics we permanently store only the browser identifier, operating system and screen resolution — and only in our security log and our own access statistics (see section 5). The device list for your licence contains only the device value, the device type and the times of activation and of the last check. This value is not anonymous: via the licence it is attributable to your purchase (pseudonymous data).
Genogram content, client data and health information are not transmitted. After activation you can work with GenoEasy without an internet connection. The app only initiates a connection on its own in these cases: periodically at start-up to check the licence status (licence key and device value), to check for program updates, for usage statistics (can be switched off) and — on some platforms — for error reports. These three processes are described below.
Purpose: verifying the licence and limiting the number of simultaneously activated devices. Legal basis: Art. 6(1)(b) GDPR (performance of the licence contract). Recipient: our hosting provider one.com A/S, Denmark (see section 3). Retention: for the term of your licence; access statistics entries are deleted after 90 days.
To limit the free 14-day trial to one device, the app generates a random identifier on first launch, stores it locally on your device (on Android additionally as a file in the app storage; in the desktop app additionally, together with the trial start, outside the program folder, where it survives uninstallation) and transmits a short value derived from it to our server — at start-up and periodically during the trial. The identifier does not describe your device; it merely names it. Only if the app's local storage is unavailable is a value calculated from technical characteristics of your system instead (browser identifier, language, operating system, colour depth, time zone, CPU cores, memory, canvas and WebGL rendering). On our server we store this value in plain text together with the start and the last check of the trial; without the identifier held on your device it cannot be attributed to any person.
If you accept the offer of email guidance during the trial, we attach your email address and the chosen language to the same record. From that point on the device value is attributable to you. Sign-up uses double opt-in via our own mail server: only after you click the link in the confirmation email do we add your address to our contact list and send the accompanying emails (welcome, tips after one week, reminder before expiry, request for feedback after the trial ends).
Whether your sign-up has been confirmed is checked exclusively in our own database: the confirmation link in our email records a marker there, and we read only that marker. No data is transmitted to third parties for this check.
Purpose: enforcing the 14-day limit; where an email address is given, also the guidance during the trial that you requested. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in preventing repeated trials on the same device) for the device value; Art. 6(1)(a) GDPR (consent) for the email address. Recipients: our hosting and email provider one.com A/S, Denmark. Retention: the device value remains stored until you request erasure. We delete the email address and language when you request erasure or withdraw your consent, and at the latest 12 months after you signed up, provided you have not acquired a licence by then. Withdrawal and objection: you may withdraw your consent to the trial emails at any time informally to support@genoeasy.de; we then delete the address. What remains is solely the record that you consented and when; we need it in order to demonstrate, in the event of a dispute, that we did not contact you without your consent (Art. 17(3)(e) GDPR). It is no longer used for sending. You may object under Art. 21 GDPR to the processing of the device value based on our legitimate interest.
The installed app (Windows, macOS, iOS, Android) checks at start-up — at most every four hours — whether a newer version is available. To do so it retrieves a version file from GitHub's servers. As with any request to an internet address, your IP address is transmitted to GitHub; we send no further information. The browser versions of GenoEasy do not perform this check. The automatic check cannot currently be switched off in the app.
Purpose: providing security and feature updates. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in up-to-date, secure software). Recipient: GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA; GitHub is certified under the EU-US Data Privacy Framework. Retention: we store nothing ourselves.
If an unexpected error occurs in the app, it transmits a technical error report to our error-monitoring provider. A report contains the error message, the point in the program where it occurred, the program version, the platform and browser and operating system details; when it is transmitted, the provider also receives your IP address for technical reasons. We do not record sessions. Error reports are active in the web version, the demo version and the macOS and iOS apps; the Windows and Android apps send none.
We do not filter error reports by content before sending; we therefore cannot rule out that a report may in individual cases contain values from the program flow. Please let us know if you notice anything of this kind — we will then delete the report immediately.
Purpose: detecting and fixing program errors. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in functioning, secure software). Recipient: Functional Software, Inc. ("Sentry"), 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA. Reports are processed on Sentry servers in the European Union (EU data region); in addition, the EU Standard Contractual Clauses in the data processing agreement with Sentry apply. Retention: 90 days at the provider, then automatic deletion. Objection: you may object to this processing at any time under Art. 21 GDPR informally to support@genoeasy.de; there is currently no switch in the app.
This website and our licence server are hosted by one.com A/S, Kalvebod Brygge 24, 1560 Copenhagen, Denmark (data centre Copenhagen). All personal data collected on this website or via the app is stored on this provider's servers; our emails are also sent through it. one.com processes the data on our instructions as a processor (DPA pursuant to its terms, available at one.com/de-de/legal/dpa/; sub-processor for system monitoring: One.com India Pvt. Ltd., India — third-country transfer based on the EU Standard Contractual Clauses). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing our services securely and efficiently) and Art. 6(1)(b) GDPR where processing serves the performance of a contract.
When you follow a link we share on social networks (e.g. LinkedIn, Facebook), we redirect you to the target page via an internal redirect. In doing so, we only count anonymously how often a link was clicked and via which source. No personal data is stored — in particular no IP address and no identifier that would allow conclusions to be drawn about your person. The count serves solely to measure the reach of our content. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring reach).
The responsible party for data processing on this website is:
Dag Zippel
Systemische Praxis
Breite Straße 8
13187 Berlin
Telefon: +49 30 91689756
E-Mail: support@genoeasy.de
The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
We keep personal data only for as long as necessary for the respective purpose. The following periods currently apply:
Where no period is stated above, your data remains with us until the purpose of the processing ceases to apply. If you make a justified request for erasure or withdraw consent, we delete your data unless a statutory retention obligation applies or we exceptionally need it for the establishment or defence of legal claims (Art. 17(3)(e) GDPR). In practice this concerns above all the record of a consent given: address, time and confirmation event are retained so that we can demonstrate that we did not contact you without your consent. These details are no longer used for sending. This record too is deleted once no claims can be asserted any longer: three years after the end of the year in which we last contacted you or in which you requested erasure (standard limitation period, sections 195, 199 of the German Civil Code). The claims meant here are those turning on the lawfulness of your consent — for example demands for injunctive relief or damages for allegedly unsolicited advertising.
Many data processing operations are only possible with your express consent. You may revoke any consent already given at any time. The legality of the data processing carried out prior to the revocation remains unaffected by the revocation.
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for Berlin is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
www.datenschutz-berlin.de
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a commonly used, machine-readable format.
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing, and, if applicable, a right to rectification or deletion of this data.
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
This data is not merged with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f GDPR.
In addition to the host's log files, we keep our own security log for security-relevant events — such as licence activations, rejected or excessive requests and login attempts in the administration area. An entry contains the time, the type of event, your IP address, your browser identifier and a short description of the event (for activations: the first characters of the licence key plus browser identifier, operating system and screen resolution; for trial sign-ups: the first characters of the email address). Purpose: detecting and preventing misuse and attacks. Legal basis: Art. 6(1)(f) GDPR. Retention: the log file is rotated daily; entries are deleted after 90 days at the latest.
Cookies are small text files that your browser stores on your device. We ourselves only set cookies that are necessary for operating the website: if you switch the website language, the cookie "genoeasy_lang" remembers your choice for 30 days. During the purchase process we set a session cookie ("PHPSESSID") that holds the order together until payment is confirmed and expires when you close your browser. Legal basis: Section 25(2) no. 2 TDDDG (strictly necessary) in conjunction with Art. 6(1)(f) or (b) GDPR; no consent is required for this.
During the purchase process our page also embeds PayPal's payment component. Your browser then connects to PayPal, and PayPal may set its own cookies (see section 6).
When certain pages of our website are opened — home, pricing, purchase, "Request an invoice", the three comparison pages, the HIPAA page and "Best genogram software" —, for individual actions on the website (such as download or feedback), and for individual actions in the app, we store an entry in our own statistics. From the app only an event name (such as "session started", "PDF exported", "GEDCOM imported") and the program version are transmitted per action — no content. Since 19 September 2026 we no longer store any identifier with these entries: neither a check value derived from your IP address, nor your browser identifier, the previously visited page, or a session identifier. Before that it was different; the existing records are being cleared.
Activities around license activation are an exception. There we additionally store a check value derived from your IP address and the current month, because malicious activation attempts could not otherwise be detected. These entries are pseudonymous, not anonymous: we cannot readily identify you from them, but it is not technically impossible. After 90 days we delete the individual entries; afterwards only daily totals per event type without personal reference remain.
Purpose: understanding which pages and features are used, and — for the activation activities — detecting misuse. Legal basis for the activation activities: Art. 6(1)(f) GDPR (legitimate interest in protecting against misuse of licenses). Recipient: our hosting provider one.com A/S; no disclosure to third parties. Objection: in the app you can switch transmission off under Settings → Usage statistics; it is on by default. This switch affects the usage events. The entries for license activation are created server-side when a license is activated and cannot be switched off — without them, misuse could not be detected. For the website an informal message to support@genoeasy.de is sufficient (Art. 21 GDPR).
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service is loaded only after you have clicked “Accept” in the notice window. As long as you neither agree nor decline, no Google script is loaded and no data is transmitted to Google.
Data processed: shortened IP address, date and time of the visit, pages viewed, time spent, browser type and version, operating system, device type, approximate location at city level, and the previously visited page. Google sets identifiers in your browser storage. We have not enabled Google Signals; no cross-device linking to your Google account takes place. Nor do we share data with Google for advertising purposes.
Purpose: to learn which content is read, in order to improve what we offer. Legal basis: your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Recipients: Google Ireland Limited and Google LLC, 1600 Amphitheatre Parkway, Mountain View, USA. Transfer to the USA: Google LLC is certified under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023); a data processing agreement with Google is also in place. Retention: event data 2 months, user-level data 14 months. Withdrawal: you may withdraw your consent at any time via “Cookie settings” in the page footer, with effect for the future; the lawfulness of processing carried out beforehand remains unaffected.
For Google Analytics, Google sets its own identifiers. They are created only after you agree. If you decline or withdraw, the service is not loaded; we store your decision itself in your browser so that we do not have to ask again on every visit.
If you contact us by email, your inquiry including all personal data provided (name, inquiry) will be stored by us for the purpose of processing your request and in case of follow-up questions. We will not share this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures.
When you visit a PDF template page in our academy, we only store the template identifier, the page language and the timestamp — fully anonymised. No IP address, no user agent, no personal data. Legal basis: legitimate interest under Art. 6 (1) (f) GDPR.
You can request PDF templates free of charge by email. We process your email address solely for delivery purposes. The process uses double opt-in: after your explicit consent (checkbox in the form), we send a confirmation link. Only after clicking this link will you receive the template as a PDF attachment.
Data processed:
Retention: Unconfirmed tokens expire automatically after 24 hours. Confirmed records (including email address) are automatically deleted after 30 days. Storage is solely for documenting the consent given.
Legal basis: Art. 6 (1) (a) GDPR (explicit consent, documented by double opt-in).
Processors for email dispatch: one.com A/S, Kalvebod Brygge 24, 1560 Copenhagen, Denmark (hosting and email dispatch, processing location: data centre Copenhagen; DPA pursuant to Terms of Service, available at one.com/de-de/legal/dpa/; sub-processor for system monitoring: One.com India Pvt. Ltd., India – third-country transfer based on EU Standard Contractual Clauses).
If you additionally checked the newsletter box, we trigger an independent newsletter sign-up with its own separate double opt-in: you receive a separate confirmation email, and only after clicking the link inside it do we add your email address to our monthly GenoEasy newsletter list. This consent is entirely independent of the template download — the download works without signing up for the newsletter. You can withdraw consent at any time (unsubscribe link in every newsletter email or by emailing support@genoeasy.de). Dispatch is handled via our own email infrastructure; the same processors named above apply (one.com). Legal basis: Art. 6 (1) (a) GDPR (separate, voluntary consent). Newsletter emails contain open and click tracking (see the section "Measuring the performance of our emails").
We sometimes write to professionals and organisations in counselling, therapy, social work and teaching who have not contacted us beforehand. We do not collect their professional contact details from them directly; we take them from publicly accessible sources such as your organisation’s website or professional directories, partly via the business contact data provider Apollo.io (Art. 14 GDPR). The data processed are name, professional email address, position or specialism, organisation, field of work, the organisation’s website, town and country, and the language of our emails derived from these; for some entries also the business telephone number and postal address.
Purpose: to inform you about GenoEasy as a tool for your professional work. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in informing professionals about GenoEasy). Every one of these emails contains a short notice on the source and purpose and an unsubscribe link. Recipient: our hosting and email provider one.com A/S (see section 3). Retention: 24 months after the last email if you have not responded to any; if we never wrote to you, 24 months after you were last added to the mailing list; after you unsubscribe, only your email address remains on our suppression list (details under “Data Retention Period” in section 4). Objection: you can object to the use of your address for such emails at any time (Art. 21(2) GDPR) — via the unsubscribe link in every email or informally to support@genoeasy.de. We will then no longer write to you; your address remains only on our suppression list so that it stays that way.
Emails we send through our campaign system — the GenoEasy newsletter, information emails to customers and trial users, and information campaigns to professional contact addresses — contain a small invisible image and links routed via our server. This tells us whether and when an email was opened and which link was clicked. Confirmation, guidance and transactional emails (e.g. licence keys, invoices, trial guidance) contain no such measurement.
Data processed per contact: time of first opening, number of openings, time of first click, number of clicks and, for each click, the address clicked and the time — each linked to your contact record (name, email address and, where applicable, organisation and location). We do not store IP addresses or browser identifiers. Purpose: judging which content is read and improving our emails. Legal basis: for the newsletter, your consent (Art. 6(1)(a) GDPR); for information emails to customers, trial users and professional contacts, our legitimate interest in informing about GenoEasy (Art. 6(1)(f) GDPR). Recipient: our hosting and email provider one.com A/S. Retention: until you withdraw or object.
Withdrawal and objection: at any time via the unsubscribe link in every one of these emails or to support@genoeasy.de. After unsubscribing, your email address remains on a suppression list so that we do not contact you again. If you wish to keep receiving our emails but without open tracking, switch off the automatic loading of images in your email program.
If you purchase a licence using a discount code for association members — for example as a member of the DGSF — you must provide your membership number. We use it solely to check whether the reduced price applies and whether that number has already claimed the discount: each membership number can redeem it exactly once.
Data processed:
How it is stored: to check one-time redemption we store only the checksum, together with the licence key, email address and time. The number itself forms part of the order data of your purchase, which we store in plain text because the checksum is only created when payment is confirmed. You may request at any time that we remove the number from the order data.
We do not verify the number with the association and do not pass it on to them. The association does not learn from us who claimed the discount.
Legal basis: Art. 6 (1) (b) GDPR — the check is necessary in order to grant you the agreed member price. Additionally Art. 6 (1) (f) GDPR (legitimate interest in ensuring one-time redemption).
Retention: after twelve months we separate the checksum from the licence key and email address; three months after the end of the discount campaign we delete it completely. We remove the plain-text membership number from the order data of the purchase after 90 days at the latest (details in section 6); we keep the remaining order data until you request erasure (see section 4); the associated invoice records are subject to the statutory retention periods. Independently of this, you may request access and erasure at any time.
If you purchase a licence, the payment is processed via PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. The data required for the payment is transmitted to PayPal — product, amount and currency, an order reference and your email address. Which data PayPal collects during the payment process itself is governed by PayPal's privacy policy, which applies in addition. PayPal's payment component is embedded directly on our purchase page (see "Cookies").
For the invoice and the licence we process the details from the order form: salutation, name, email address and, where applicable, company, address, country, telephone number and VAT identification number, as well as any discount code redeemed. We also store the payment confirmed by PayPal (transaction reference, amount, time) and link the licence to it. The order data of the purchase — including invoice details and, where applicable, the membership number — is stored in our database. If an order is not paid, we delete it after 30 days. For a paid order we remove the telephone number and membership number after 90 days; the remaining details stay stored (see Retention, section 4). For older orders on which receipt of payment has not yet been recorded, we only remove the telephone number and membership number after 90 days.
Purpose: handling your purchase, issuing the invoice and meeting our tax obligations. Legal basis: Art. 6(1)(b) GDPR (performance of contract); for the retention of invoice records, Art. 6(1)(c) GDPR in conjunction with Section 147 of the German Fiscal Code and Section 257 of the German Commercial Code. Recipients: PayPal (Europe) S.à r.l. et Cie, S.C.A. and our hosting provider one.com A/S. Retention: invoice records for the statutory retention periods (currently ten years); other details are deleted once the purpose ceases to apply. Your rights: access and erasure via support@genoeasy.de, unless a statutory retention obligation applies.
At the end of the trial period we invite you to give brief feedback on the software; when ending the trial we optionally ask for your reason. Participation is voluntary in both cases — you may skip it without any disadvantage.
For feedback: your ratings (scale 1–5), your free-text comment and the selected language. For the closing survey: the reason you select. In both cases additionally your email address, but only if you enter it yourself — it is used solely to reply to your feedback.
With the feedback itself we store no device identifier and no IP address. Without the voluntary entry of your email address the feedback cannot be attributed to any person, and it is not linked to your licence or trial access. Independently of this, submitting any form causes the server to log the usual access data including your IP address for technical reasons — see section 5 ("Server log files").
We use this information solely to improve GenoEasy. The legal basis is our legitimate interest in developing the software (Art. 6(1)(f) GDPR). You may object to processing on this basis at any time (Art. 21 GDPR, see below). For the email address it is your consent (Art. 6(1)(a) GDPR): you enter the address voluntarily, the purpose is stated directly at the input field, and you may withdraw your consent at any time.
Where we process your feedback on the basis of our legitimate interest, you may object to this processing at any time (Art. 21 GDPR). An informal message to support@genoeasy.de is sufficient; we will then delete the feedback. Your further rights are set out in section 4.
Feedback is automatically deleted after 12 months. The recipient is our hosting and email provider, which stores the data on our instructions and delivers any reply to you (see section 3). No further disclosure takes place; the data is neither sold nor used for advertising.
The free-text fields are intended for feedback about the software. Please do not enter names, diagnoses or any other details about your clients. Responsibility for your professional confidentiality remains with you — we do not scan the texts automatically. Should such information nevertheless come to our attention, we delete it immediately; a brief note to support@genoeasy.de is enough.
Last updated: 10 October 2026