Privacy Policy

1. Privacy at a glance

The protection of your personal data matters to us. This policy explains in full which data is processed when you visit this website, for what purpose, and on what legal basis. AwardLevel is designed as a pure information-and-tools website: the calculators run entirely in your browser, and we use no tracking or analytics services that build a user profile.

2. Controller

The controller responsible for data processing on this website is:
Marco Zivkovic, Im Paradies 23, 63853 Mömlingen, Germany
Email: hello@awardlevel.com

3. Hosting

This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The servers used are located in Germany. STRATO processes the data collected via the website (in particular access data, see point 4) on our behalf. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in providing our service securely and efficiently). A data processing agreement under Art. 28 GDPR is in place with STRATO.

4. Access data / server log files

Each time the website is accessed, the host automatically records information in so-called server log files that your browser transmits. These are:

• the IP address of the requesting device,
• the date and time of access,
• the name and URL of the file retrieved,
• the volume of data transferred,
• a message indicating successful retrieval (HTTP status code),
• the browser type and operating system used,
• the previously visited page (referrer URL).

The IP address is processed on the basis of Art. 6 (1)(f) GDPR (legitimate interest in the secure and stable operation of the website), as is the remaining log data, for the purpose of technical operation, stability and security of the website. This data is not merged with other data sources, nor is it analysed for marketing purposes. The log files are deleted after 7 days at the latest, unless a security incident requires longer storage in order to investigate misuse or malfunctions.

5. Cookies

This website sets no cookies — neither tracking or marketing cookies nor any other cookies. Calculator and search input is processed locally, is not transmitted to us and is not stored persistently. Only if you use the optional expiry planner are the selected programme, manually entered balance and expiry date stored in this device's localStorage until you remove the entry. These details are not transmitted to AwardLevel or any third party.

This website stores your language and region preference in your browser's localStorage. This data remains exclusively in your browser, is never transmitted to us or any third party, and is technically necessary to provide the site in your chosen language and region. For this reason, no consent is required under § 25 (2) no. 2 TDDDG.

5a. Reach measurement (cookieless analytics)

On the website — but not in the native app — we use Plausible Analytics, a cookieless web-analytics service operated by Plausible Insights OÜ, Tartu, Estonia. Loading the site-specific script establishes a connection to plausible.io. Plausible processes the hostname and page path, permitted campaign parameters (including ref and UTM parameters), referrer, browser, operating system, device type and an approximate location derived from the IP address. The IP address and User-Agent are used only transiently to calculate a daily identifier with a salt that is deleted every 24 hours; the raw IP address and full User-Agent are not stored. Plausible sets no cookies, uses no browser storage and creates no persistent or cross-site profile. The resulting statistics are aggregated and visitor data is processed and stored in the EU.

The legal basis is Art. 6 (1)(f) GDPR (our legitimate interest in measuring and improving the usefulness of our content). Plausible acts as our processor; its data processing agreement under Art. 28 GDPR applies automatically to customers of the service. Further details are available in the Plausible data policy. No analytics or tracking service is loaded in the native AwardLevel app.

6. External services and third-party content

Apart from the Plausible web analytics described in section 5a, this website loads no external fonts (e.g. Google Fonts), external script libraries (CDNs) or embedded third-party content. External-provider and official-source pages are opened only after you deliberately follow a link.

7. Contacting us

If you contact us by email, your details (email address, name, content of the message) are stored and processed for the purpose of handling your enquiry. The legal basis is Art. 6 (1)(b) GDPR (pre-contractual measures/contract) or Art. 6 (1)(f) GDPR (legitimate interest in responding). We do not pass on this data without your consent and delete it once your enquiry has been fully handled, provided no statutory retention obligations apply.

8. Newsletter (Award Briefing)

Once sign-up for the Award Briefing is active, it will be sent exclusively after your explicit consent via the double opt-in procedure (Art. 6 (1)(a) GDPR). In doing so, we will store your email address as well as, as proof of consent, the time of sign-up and confirmation. You will be able to withdraw your consent at any time with effect for the future, for example via the unsubscribe link in every email. For sending we will use the newsletter function of our hosting provider STRATO AG (Otto-Ostrowski-Straße 7, 10249 Berlin), which will process the sign-up and sending data exclusively on our behalf on servers in Germany; a data processing agreement (AVV) under Art. 28 GDPR is in place. Only when the sign-up form is submitted will the entered email address and, to document consent and prevent misuse, technical data (including IP address and time) be transmitted. Details on data processing by STRATO can be found in its privacy policy at strato.de.

9. Affiliate and referral links

No paid affiliate or referral links are currently active. If such links are activated, they will be clearly labelled. Clicking then takes you to the partner or network domain; any cookies or processing there are the partner’s responsibility. AwardLevel does not create user profiles from link clicks. This policy and the transparency page will be updated before activation.

9a. Display advertising (ads)

Currently, no cookie-based display advertising is active on this website. Should an advertising network (e.g. Google AdSense) that uses cookies or comparable technologies for advertising purposes be integrated in future, this will only happen after your prior consent via a cookie/consent banner (Art. 6 (1)(a) GDPR, § 25 (1) TDDDG). This privacy policy will be updated accordingly in that case.

10. SSL/TLS encryption

For security reasons, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the "https://" in your browser's address bar.

11. Your rights

You have the following rights vis-à-vis the controller with regard to the personal data concerning you:

• right of access (Art. 15 GDPR),
• right to rectification (Art. 16 GDPR),
• right to erasure (Art. 17 GDPR),
• right to restriction of processing (Art. 18 GDPR),
• right to data portability (Art. 20 GDPR),
• right to object to processing (Art. 21 GDPR),
• right to withdraw consent that has been given (Art. 7 (3) GDPR).

To exercise these rights, an informal message to the email address above is sufficient.

12. Right to complain to a supervisory authority

You have the right to complain to a data protection supervisory authority about the processing of your personal data under Art. 77 GDPR. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

13. Currency and changes to this privacy policy

This privacy policy is current as of 29 August 2026. As the website develops or due to changed legal or regulatory requirements, it may become necessary to amend this policy. The latest version is always available on this page.

14. Further information

No data protection officer is required, as the thresholds of Art. 37 GDPR / § 38 BDSG are not met. There is no automated decision-making or profiling within the meaning of Art. 22 GDPR. No transfer of personal data to third countries takes place.