Skip to content
+49 40 8821 539 41info@cityweb.deDeutsch
CitywebWebmail Login

Privacy Policy

Cityweb GmbH – email services for private customers. Last updated: April 2025

This is a non-binding translation provided for the convenience of our English-speaking customers. In the event of any discrepancy or dispute, the German-language version of this document is legally binding and shall prevail.

Protecting your personal data is important to us. Below we inform you about the collection, processing and use of personal data in connection with our offering on this website as well as in connection with the provision of email addresses.

1. Controller

Cityweb GmbH
Suhrenkamp 59
22335 Hamburg
Germany
Email: info@cityweb.de

2. Collection and Processing of Personal Data

We process personal data that you provide to us in the course of using our website, during registration, and when using a cityweb email address. This includes in particular:

  • Name, address, email address
  • Bank account details (for the SEPA direct debit procedure)
  • Usage data (e.g. time of registration, logins, IP address)

3. Purpose of Data Processing

Your personal data is processed for the following purposes:

  • Provision and administration of your email address
  • Billing of the monthly usage fees by SEPA direct debit
  • Customer communication and support
  • Compliance with legal obligations (e.g. record-keeping obligations)

4. Legal Bases for Processing

Your data is processed on the following legal bases:

  • Art. 6(1)(b) GDPR (performance of a contract)
  • Art. 6(1)(c) GDPR (legal obligation)
  • Art. 6(1)(f) GDPR (legitimate interest – e.g. to prevent misuse)

5. Disclosure to Third Parties

Your data is disclosed only where necessary for the performance of the contract or where required by law. Examples:

  • Disclosure of your bank details to our payment institution for the purpose of processing the SEPA direct debit
  • Where applicable, to technical service providers for the operation of our email platform (hosting)

No data processing takes place outside the EU (transfer to third countries).

6. Retention Period

We store your personal data for as long as necessary to perform the contract. After termination of the contract, your data will be retained in accordance with statutory retention periods and subsequently deleted.

7. Your Rights as a Data Subject

You have the right at any time to:

  • Request information about the personal data we hold about you (Art. 15 GDPR)
  • Request rectification of inaccurate data (Art. 16 GDPR)
  • Request erasure or restriction of processing (Art. 17, 18 GDPR), unless statutory retention obligations preclude this
  • Data portability (Art. 20 GDPR)
  • Object to the processing of your data (Art. 21 GDPR)
  • Lodge a complaint with a supervisory authority (e.g. Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, the Hamburg Commissioner for Data Protection and Freedom of Information)

8. Security

We employ technical and organisational security measures to protect your data against loss, manipulation or unauthorised access.

9. Cookies & Tracking

This website does not use cookies and does not embed any third-party services. The fonts we use are served from our own server; no connection to Google servers is established. No tracking for advertising purposes takes place, and consent is therefore not required.

10. Changes to this Privacy Policy

This privacy policy may be amended from time to time. Please check our website regularly for the current version.