Privacy policy
Status: March 2026
1. Controller
Oezer Software
Owner: Murat Özer
Pfaffenbrunnenstraße 16c
63456 Hanau
Germany
Phone: +49 6181 1808522
Email: kontakt@turnoly.com
2. General information on data processing
This privacy policy explains the type, scope, and purpose of processing personal data in connection with the website and the SaaS application.
Personal data is processed exclusively for providing and operating the software as well as for communication with prospects and customers.
Our offering is aimed primarily at businesses.
3. Website and application access
When the website or application is accessed, the hosting provider automatically processes technical information. This may include in particular:
- IP address
- Date and time of access
- Browser type and version
- Operating system used
- Referrer URL
- Pages accessed
This processing is used for the technical provision, security, and stability of the website and application.
The legal basis is Article 6(1)(f) GDPR.
4. Hosting
Website hosting
The website is hosted by the following provider:
ALL-INKL.COM – Neue Medien Münnich
Hauptstraße 68
02742 Friedersdorf
Germany
Application / SaaS hosting
The application is provided via Vercel Inc.
Provider:
Vercel Inc.
440 N Barranca Ave #4133
Covina, CA 91723
USA
More information: https://vercel.com/legal/privacy-policy
5. Database and backend
Supabase is used for backend functions and database services.
Provider:
Supabase Inc.
970 Toa Payoh North
#07-04
Singapore 318992
In particular, the following data may be processed and stored via Supabase:
- User accounts
- Login data
- Employee data
- Working hours
- Absences
- Roles and permissions
- Planning data
Processing takes place exclusively to provide the software functions.
The legal basis is Article 6(1)(b) GDPR.
More information: https://supabase.com/privacy
6. User accounts and authentication
Creating a user account is required to use the application.
This may involve processing the following data in particular:
- Name
- Email address
- Password
- Roles and permissions
Registration takes place via email and password. Confirmation emails may be sent to verify the email address.
The legal basis is Article 6(1)(b) GDPR.
7. Processing inside the application
When using the software, companies may process personal data of their employees. This may include in particular:
- Name
- Address
- Date of birth
- Phone number
- Email address
- Working hours
- Absences
- Work areas
- Roles and permissions
Processing takes place exclusively for shift planning, time tracking, and team organization.
Responsibility for the data entered into the application lies with the respective company using it.
8. Email delivery
Resend is used to send transactional emails.
Provider:
Resend, Inc.
2261 Market Street #5039
San Francisco, CA 94114
USA
In particular, Resend may send the following emails:
- Registration confirmations
- Password reset emails
- System notifications
Personal data such as name and email address may be processed in this context.
More information: https://resend.com/privacy
9. Appointment booking via Calendly
Calendly is used for booking live demos or consultation appointments.
Provider:
Calendly LLC
271 17th St NW
Atlanta, GA 30363
USA
In particular, the following data may be processed when booking an appointment:
- Name
- Email address
- Selected appointment
Video conferencing services such as Google Meet or Microsoft Teams may be used as part of appointment coordination.
More information: https://calendly.com/privacy
10. Payment processing
Stripe is used for payment processing and subscription management.
Provider:
Stripe Payments Europe Ltd.
1 Grand Canal Street Lower
Grand Canal Dock
Dublin
Ireland
The following data may be processed in particular during payment processing:
- Name
- Billing address
- Payment information
- Email address
- Transaction data
Payment data is processed directly by Stripe. We do not store complete payment data on our servers.
More information: https://stripe.com/privacy
11. Contact requests
If you contact us by email, the transmitted data will be processed exclusively to handle your request.
The legal basis is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.
12. Cookies and technical storage
The application uses technically necessary cookies and similar technologies required for operation, login, and security.
Marketing or advertising tracking is not currently used.
13. Rights of data subjects
Within the scope of the statutory provisions, you have the following rights in particular:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object to processing
To exercise your rights, simply send an email to: kontakt@turnoly.com
14. Changes to this privacy policy
We reserve the right to update this privacy policy if technical, legal, or organizational changes make this necessary.