1. Controller
B&B Engel Holding GmbH, Korngasse 43, 1170 Vienna, Austria
Commercial register number: FN 513254k, Commercial Court Vienna (Handelsgericht Wien), VAT ID: ATU74630919
Managing Director: Mag. Birgit Engel, MSc
Email: bernhard@100dealslater.com
We take the protection of your personal data seriously. We process your data exclusively on the basis of the applicable legal provisions (GDPR, Austrian Data Protection Act (DSG), Austrian Telecommunications Act 2021 (TKG 2021)).
2. Server log files and hosting
When you visit this website, technically necessary data (IP address, date/time, browser, page accessed) are processed to ensure operation and security (Art. 6(1)(f) GDPR). Hosting provider: Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus.
3. Contacting us
If you contact us by email, we process your details to handle your enquiry and any follow-up questions (Art. 6(1)(b) and (f) GDPR). The contact form on our Contact page does not send anything to our server: it opens your own email program with your message filled in, and you send it yourself. We then process it like any other email. We do not share this data without your consent.
Quick Score (100dealslater.com/quick-score/)
The Quick Score runs in your browser; your answers are not sent to us or stored by us. If you want to see your top 3 levers and next steps, you can enter your email address (and optionally your name). We process it with the WordPress plugin Icegram Express on our own website at Hostinger, send you a confirmation link (double opt-in) and, after confirmation, emails about the Quick Score, the Buy-and-Build Check and the book. We store your email address, name if provided, and the time and IP address of sign-up and confirmation as proof of consent. Legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link in every email or by writing to bernhard@100dealslater.com. We delete your data after you unsubscribe, except for the proof of consent, which we keep for up to three years.
4. Buy-and-Build Check (app.100dealslater.com)
At app.100dealslater.com we operate the Buy-and-Build Check, an AI-powered system that automatically generates a Value Creation Roadmap based on your inputs. The Roadmap is system-generated output, not advice.
Sign-in. To sign in, you enter your email address. We send you a sign-in link with limited validity via our email service at Hostinger. For counting how many Roadmaps you have created (the first Roadmap is free), the app uses a pseudonymised identifier derived from your email address (cryptographic hash). To prevent misuse, we also store the time of sign-in links sent for this identifier and delete these entries after one hour.
Role, situation and result. Before your result is shown, the app asks for your role (e.g. investor, managing director, entrepreneur, adviser) ; the situation (platform or add-on) follows from what you choose to assess. For each completed check we store your email address together with your role, situation, the result (gate and score), the mode of the check, the language, the time, the entry source (e.g. from the Quick Score), whether the Roadmap was free or paid, and an internal user identifier. We use this data to evaluate how the Buy-and-Build Check is used and to identify which users might be interested in a more comprehensive product. We also remember your last role and situation so that they are preselected next time. We do not store your answers to the check questions unless you choose to save them (see “Saved answers” below), and we never store the text of the Roadmap. We do not use tracking or analytics tools in the app.
Inputs and Roadmap. Your inputs are processed on our server at Hostinger (Hostinger International Ltd., Cyprus) in a data centre in Germany (EU). To generate the texts, we transmit your inputs to Mistral AI SAS, 15 rue des Halles, 75001 Paris, France, via its EU endpoint. Mistral AI does not use this data to train AI models. Under Mistral AI’s terms, inputs and outputs are retained for up to 30 days for abuse monitoring and then deleted. Unless you choose to save your answers (see below), we do not store your inputs or the generated Roadmap ourselves: they are processed only during your session, and you download the Roadmap as a PDF to your own device. The app’s logs contain neither inputs nor email addresses, and the app server keeps no access log with IP addresses. Please only enter data you are entitled to share.
Saved answers (optional). If you tick the box “Save my answers so I can continue or compare later”, we store your answers to the check questions on our server at Hostinger (data centre in Germany, EU), linked to the pseudonymised identifier derived from your email address, so that you can continue or compare them on a later visit. The box is not ticked by default; without it, nothing is saved. Legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future by clicking “Delete my saved answers” in the app or by writing to bernhard@100dealslater.com; we then delete your saved answers. Otherwise they are deleted automatically 24 months after you last saved them. Saved answers are not used for advertising and are not shared with third parties; when you generate a Roadmap, they are processed as described under “Inputs and Roadmap”.
Payment. You can buy further Roadmaps in our shop on 100dealslater.com (WooCommerce). We process your order data: name, email address, billing country (for VAT) and, if provided, address and phone number, the order, and your consent to immediate delivery with its timestamp. Payment is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg; PayPal’s privacy policy applies. We do not receive your payment details (e.g. card data). To assign a payment to the right Roadmap, the app queries paid orders for your email address through a read-only interface and stores the order number together with the pseudonymised identifier.
Legal bases. Sign-in, generating the Roadmap, payment processing and assigning payments are necessary to perform the contract or to take steps at your request (Art. 6(1)(b) GDPR). Storing your email address with role, situation and result for evaluating usage and product interest is based on our legitimate interest in understanding how our system is used and in developing our offering (Art. 6(1)(f) GDPR). Order and invoice data are retained to meet legal obligations (Art. 6(1)(c) GDPR). If you voluntarily join an early-access list in the app, we store your email address and language for this purpose on the basis of your consent (Art. 6(1)(a) GDPR); you can withdraw it at any time with effect for the future.
Retention. We keep the pseudonymised identifier, the Roadmap count and assigned order numbers for as long as you use the app and delete them at your request unless a statutory retention obligation applies. Records of completed checks (email address, role, situation, result) are deleted automatically after 24 months, or earlier if you object. Order and invoice data are kept for seven years (§ 132 Austrian Federal Fiscal Code, BAO). Early-access entries are deleted once you withdraw consent. Saved answers are deleted when you delete them or withdraw consent, and at the latest 24 months after your last save.
Your rights. The rights in section 7 apply. Right to object: you can object at any time, on grounds relating to your particular situation, to the storage of your email address with role, situation and result (Art. 21 GDPR) by writing to bernhard@100dealslater.com; we will then delete these records. When you contact us, please tell us the email address you use for the app.
5. Payments and external links
Payments for the Value Creation Roadmap are processed through our shop (see section 4). Links to Amazon lead to external websites, where Amazon’s privacy policy applies.
6. Cookies, consent and Google Ads
Consent banner. We use the WordPress plugin Complianz (Really Simple Plugins B.V., Netherlands), installed on our own website, to ask for your consent. Complianz stores your choice in cookies on your device (names starting with cmplz_, for up to 365 days). It does not send your choice to the plugin provider. You can change or withdraw your consent at any time via the “Manage consent” link shown on every page.
Necessary cookies. Technically necessary cookies (e.g. for login, shopping cart and checkout in our shop) are set without consent on the basis of § 165(3) TKG 2021 and Art. 6(1)(f) GDPR.
Google Ads. We advertise with Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and measure whether an ad led to a completed Quick Score or a sign-up (conversion tracking). We use Google Consent Mode: until you accept marketing cookies, the Google tag sets no advertising cookies; Google may still receive basic technical information without cookies (for example that a page was loaded, together with your IP address), which Google uses only in aggregated form. Only if you accept marketing cookies does the Google tag set cookies and send conversion data to Google. Google may process data in the USA; Google LLC is certified under the EU-US Data Privacy Framework. Legal basis: your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021), which you can withdraw at any time with effect for the future.
Fonts. The fonts on this website are hosted on our own server; your browser does not connect to Google Fonts.
You can also block or delete cookies in your browser settings.
7. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, withdrawal of consent and objection. To exercise these rights, please contact bernhard@100dealslater.com. If you believe that the processing of your data violates data protection law, you may lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, www.dsb.gv.at).