Privacy notice
Information for the Money Lab withdrawal function, dated 8 September 2026. This function receives withdrawal declarations and provides their requested acknowledgements.
Responsible provider
Tim Schmittmann-schubert
Comeniusstraße 81
01309 Dresden
Deutschland
Email: aitechcodertim@gmail.com · Full provider details and telephone
What we process and why
We process your name, email address, contract reference or description, withdrawal declaration, receipt identifier and original receipt time. We retain the acknowledgement text and delivery evidence to handle your request and document the relevant contractual and legal obligations (GDPR Article 6(1)(b) and (c), including § 356a BGB where applicable).
Your IP address and connection data are used temporarily to deliver this website and limit abusive requests, on the basis of our legitimate interest in a secure, usable service (Article 6(1)(f)). Our withdrawal web proxy and application do not keep request/access logs. Application rate-limit counters use one-minute windows and are held only in process memory; the hosting provider may process network information under its own service arrangements.
The function asks only for information needed to identify your declaration and send its receipt. Without an electronic contact address we cannot send the email acknowledgement through this form. You can also withdraw by a clear statement to the provider by email or post. Do not include payment credentials, identity documents, unrelated sensitive information or product files.
Hosting and email
The website and primary withdrawal records use the provider's existing IONOS server in Spain. Hosting is covered by the provider's agreement on processing on its behalf. IONOS processing terms.
The domain's DNS is administered through Cloudflare. This withdrawal route uses a direct encrypted connection to the IONOS server. Its form contents are not routed through a Cloudflare HTTP proxy or stored in a Cloudflare application database. DNS queries involve domain lookup information.
Contact messages and acknowledgement emails use Google Ireland Limited's consumer Gmail service. Google handles mail under its privacy policy. Google states that it does not act as a data processor for consumer Gmail and does not offer a data-processing agreement for it; see its consumer-service guidance. Our responsibility for handling your withdrawal remains with the provider named above.
Google operates internationally and may process mail outside the European Economic Area. Its transfer information describes its applicable adequacy arrangements, EU–US Data Privacy Framework participation and contractual safeguards. You can contact us for further information about the safeguards relevant to your request. Your chosen recipient email provider also processes the acknowledgement delivered to your address.
This function does not initiate a payment or refund. An acknowledgement records receipt of a declaration; it does not decide your entitlement or confirm a refund.
Retention, restrictions and recovery
We keep information only while needed to handle the declaration, meet applicable record-keeping duties or address unresolved claims. Necessary business correspondence is generally retained for six years from the end of the year in which it was received or sent (§ 147 AO). Other statutory categories or unresolved tax and legal matters can require a different period. We assess the actual record category; this does not mean every message is an invoice.
Information that is clearly unrelated to our service or no longer needed is assessed for deletion rather than kept indefinitely. You can ask for erasure or restriction at any time. We assess the applicable legal duties and explain any reason that prevents deletion. Corrections are recorded alongside the original declaration so its content and receipt time are not silently rewritten.
Recovery copies are restricted to recovery use. Current deletion and restriction decisions must be checked and reapplied before a restored copy is returned to service. Email copies and other relevant copies are included in the assessment; restoring a backup must not undo an approved deletion or restriction.
Your rights
You may request access, correction, erasure, restriction and, where applicable, portability. You may object to processing based on legitimate interests. If we rely on consent for a separate purpose, you may withdraw it for the future. Contact the provider above. We normally respond within one month; if an extension is permitted, we explain it within that period. You may complain to the Saxon data protection authority or another competent supervisory authority.
Your browser and automation
These pages use no analytics, advertising trackers, marketing cookies or externally loaded fonts. Form details stay in the page until you confirm submission. An optional recovery download contains your declaration and email address; keep that file privately. It is not proof that we received the declaration.
Software records declarations and prepares acknowledgements. It does not use personal profiling to decide a withdrawal or refund. The business uses AI-assisted operation, but customer declarations, contact details and files are kept out of model prompts. The named provider remains the contact for reviewing your request or challenging an automated result.