The provider is Tobias Bender, trading as HailSignal (Hailman Hagelschaden & Dellencenter), Kastanienstraße 29, 58332 Schwelm, Germany; support@hailsignal.com, VAT ID DE289184710.
The service is offered to businesses and self-employed paintless dent repair technicians purchasing for their professional activities, not private use. Anyone ordering for a business must be authorised to do so. Customers confirm this before entering the paid checkout. Registration or an IP address alone does not establish business status. A declaration does not override mandatory statutory rights.
HailSignal supports deployment planning with hail reports derived from weather data, a map, an inbox and configurable areas. The initial channels are email and web push. Push requires a supported device, notification permission and appropriate system settings; on iPhones the website is added to the Home Screen.
The US service covers the actual available radar footprint within the contiguous United States (CONUS). Canada, Mexico, Alaska, Hawaii and US territories are outside this initial scope. The European core uses two radar feeds: for Germany, the hail flag of the cell detection of the German Weather Service (DWD), nationwide and year-round, and MeteoSwiss within actual radar reach. The DWD feed provides no hail size; alerts for Germany therefore only state that (large) hail is possible. This does not imply nationwide coverage of other countries. Available coverage and data interruptions are described in the service.
According to the current provider documentation, Swiss hail products are calculated from 1 April to 30 September. Outside this season, this source provides no current hail estimates; an empty file does not confirm that no hail occurred. This limitation applies to the Swiss radar feed, not to the German DWD feed or the separate US radar data. This seasonal information does not change existing billing periods or agreed contractual rights.
Hail size, potential damage and tracks are estimates. C1–C4 expresses the evidence level separately from size. C2 is not proof of damage to a particular vehicle; C3/C4 do not establish damage at every point in an area. Reports may be missing, late or incorrect. Older observations may appear as delayed reports and assessments may be downgraded. No particular jobs, revenue, profitable trips or fixed delivery time are promised. The service does not replace official warnings or independent safety and deployment decisions.
New subscriptions are available only as annual plans. The twelve-month term starts on subscription, independently of the calendar year. Existing contracts retain their agreed prices and billing periods; this offering change does not modify them.
Creating a free account does not initiate a payment. The selected plan, currency, taxes, billing period and terms are shown before the binding order. Stripe handles payment. The confirmed checkout offer governs; access follows the confirmed payment/subscription status. Abandoning checkout is not a completed purchase.
The agreed base prices are EUR 649 annually, or USD 649 annually, plus applicable taxes. These are separate prices, not a live currency conversion. Changing the website currency does not convert existing subscriptions. The annual price is paid upfront for the year, not in monthly instalments.
Limited-time price offers apply to new subscriptions initiated during the stated booking period. The advertised discount applies only to the first billing period: the first year. Renewals use the regular base price displayed at purchase unless cancelled beforehand. New offers do not change existing subscriptions. An offer checkout opened during the campaign remains valid for up to 60 minutes, even if the campaign ends meanwhile.
An annual subscription renews for another year unless cancelled before the current paid period ends. Cancellation is available through the customer portal in “Account & subscription” and takes effect at that period's end. Paid access continues until then. If the portal is unavailable, cancellation can be sent to support@hailsignal.com. Account deletion and subscription cancellation are different operations; deletion requests are checked against any existing subscription.
Failed payment may suspend premium access according to the confirmed subscription status. Customers can update their payment method in the portal. No fixed extra grace period is promised. Support handles refund requests; statutory rights remain unaffected.
Promotional keys provide the limited access period stated with the key, without payment details. Access ends automatically, without cancellation or automatic conversion to a paid subscription. Only one key can be redeemed per account.
Customers keep contact and billing details accurate and protect account credentials. They may only submit information and photographs they are entitled to share and should omit unnecessary personal details from weather evidence. Business use does not permit reselling account access or bypassing access controls. Rights in open source data are unaffected by these restrictions.
Support is available at support@hailsignal.com and through the service's help facilities. No continuously staffed emergency centre is promised. Weather sources, internet, email and push providers may fail. Material lasting reductions to the paid service will be communicated; resulting statutory rights remain available. Material changes to contractual terms or prices will be announced and require a new agreement where necessary. Silence alone is not treated as blanket acceptance. Existing paid periods are not changed retroactively.
Liability remains unlimited for intentional misconduct, gross negligence, death or personal injury and any other mandatory statutory liability. For ordinary negligence in breach of essential contractual duties, liability is limited to foreseeable loss typical of the contract at the time it was made; otherwise ordinary-negligence liability is excluded only to the extent permitted by law. The stated forecasting limitations are relevant to the service actually promised.
Personal data is processed as described in the separate privacy notice. Acknowledging that notice is not blanket consent to every processing activity. Optional push is activated separately.
German law, excluding the UN Convention on Contracts for the International Sale of Goods, applies, subject to overriding mandatory law. No blanket US arbitration or class-action waiver is agreed. Applicable statutory rules determine jurisdiction. An unenforceable provision does not invalidate the remaining terms. German, English, French, Italian, Dutch and Spanish versions describe the same agreement.
The document language and pricing currency determine neither the applicable law nor the scope of service. The particular contract, business location, purchasing purpose and applicable mandatory provisions are relevant. The choice of law above also applies to US customers subject to those provisions; this does not promise a single special legal regime for all US states. Switzerland and the United Kingdom are not EU members. The stated source, area and seasonal limits apply regardless of the selected language.
HailSignal is offered to business customers. A purchase for professional purposes generally does not carry a statutory consumer withdrawal right. The business declaration does not remove mandatory rights that actually apply. Subscription cancellation is separate: cancel in the customer portal effective at the end of the paid billing period, or email support@hailsignal.com if the portal is unavailable. Promotional keys expire after their stated duration without automatic payment.
You may withdraw from the contract within fourteen days after its conclusion without giving a reason. Any further statutory conditions for the start of that period remain unaffected. Send an unambiguous statement to Tobias Bender, HailSignal, Kastanienstraße 29, 58332 Schwelm, Germany, support@hailsignal.com. Sending it before the deadline is sufficient.
We refund payments received within fourteen days after receiving the withdrawal, using the same payment method unless another method has been expressly agreed without additional cost. Creating an account, activating push or confirming business status does not by itself waive this right.
To Tobias Bender, HailSignal, Kastanienstraße 29, 58332 Schwelm, Germany, support@hailsignal.com: I hereby withdraw from the contract for the following service: … Ordered on: … Name: … Address: … Date: … Signature only for a paper statement. Using this template is not mandatory.
Tobias Bender, HailSignal (Hailman Hagelschaden & Dellencenter)
Kastanienstraße 29, 58332 Schwelm, Germany
Phone: +49 160 92038915
Email: support@hailsignal.com
VAT identification number: DE289184710
HailSignal produces its own interpretations of weather data. These are not official warnings or recommendations from the source providers. US weather data: NOAA / National Weather Service. Storm reports: NWS through Iowa Environmental Mesonet, Iowa State University. Swiss radar data: MeteoSwiss, CC BY 4.0, analysed and summarised by HailSignal.
Maps: OpenFreeMap, OpenMapTiles and © OpenStreetMap contributors, ODbL. Country boundaries: Natural Earth, public domain. Place directory: GeoNames, CC BY 4.0, filtered and adapted for place descriptions. Country defaults and aggregate country statistics: DB-IP Lite, CC BY 4.0. Event time zones: timezone-boundary-builder, ODbL, via timezonefinder-data 1.2026.3.
Fonts: Inter (The Inter Project Authors) and Space Grotesk (The Space Grotesk Project Authors), SIL Open Font License 1.1, served locally without modification. Licenses: Inter and Space Grotesk.
Flags: Twemoji (Twitter), CC BY 4.0, provided as a subset through Twemoji Mozilla and TalkJS Country Flag Emoji Polyfill, used without further changes. Source and licence, full CC BY 4.0 terms. Map library: MapLibre GL JS 5.9.0 with a documented security correction, licence and copyright notice.
German radar basis, weather models and warning evidence: Deutscher Wetterdienst (DWD), CC BY 4.0, including the KONRAD3D cell detection and public reports from the WarnWetter app, analysed by HailSignal; MeteoAlarm, CC BY 4.0, crediting the national meteorological service identified by the source.
European warning area boundaries: Statistics Austria (Austria, CC BY 4.0); IGN ADMIN EXPRESS COG 2025 through Sandre (France, Licence Ouverte 2.0); ISTAT through geoBoundaries (Italy, CC BY 3.0); World Bank through geoBoundaries (Romania, CC BY 4.0); Statistics Belgium through geoBoundaries (Belgium) and © OpenStreetMap contributors/Wambacher through geoBoundaries (Hungary). The Belgian and Hungarian databases are each available under the Open Database License 1.0. HailSignal mapped and combined areas and simplified boundaries. Sources, data years and licences; the complete adapted databases are available for free: Austria, France, Italy, Romania, Belgium, Hungary.
Tobias Bender, HailSignal (Hailman Hagelschaden & Dellencenter), Kastanienstraße 29, 58332 Schwelm, Germany; privacy@hailsignal.com.
| Activity | Information and purpose | Basis where GDPR applies |
|---|---|---|
| Website/operations | IP address, technical connection/error data; delivery and security | Legitimate interests, Article 6(1)(f) |
| Account | Email, password hash, profile, country, selected language, session/reset records; access and administration | Contract/precontract steps (b), abuse prevention (f) |
| Optional Google sign-in | Google identifier, verified email and supplied profile information; no Google password received | Customer-selected sign-in for the account (b) |
| Rules/inbox | Areas, optional starting location, thresholds, channels, reports and delivery attempts | Contract (b) |
| Orders | Account reference, time, accepted document identity/language, plan/currency and business declaration | Contract (b), required records (c), legal claims (f) |
| Web push | Device endpoint, encryption keys and label; encrypted delivery through the device's service | Optional activation/consent (a) |
| Support/feedback | Voluntary text, contact/account references and submitted photographs; support and quality review | Contract enquiries (b), quality/abuse prevention (f) |
Place searches go from the browser to our server and use a locally stored GeoNames directory. Search text is not sent to Nominatim or GeoNames. A saved starting point is part of the rule held on our server. The separate current-location marker on the map is handled in the browser after device permission.
Country defaults use a local DB-IP table without sending the visitor's IP to DB-IP. Event time zones are computed offline. Language, currency, theme and local usage preferences are stored in the browser; session cookies support sign-in. Optional advertising measurement with the Meta Pixel is loaded only after consent and explained below. Optional Google analytics is also described separately below.
Only with your voluntary consent do we load Google Analytics 4 on public information pages, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal bases are Article 6(1)(a) GDPR and Section 25(1) German TDDDG. Without consent, no Google tag is loaded and no cookieless analytics request is sent. Rejection is equally available. Signed-in customer areas, forms, internal pages and archived contractual documents are excluded.
Purpose: understanding website use, approximate visitor countries, devices, traffic sources and sessions. Google processes technical connection data (including the IP address required for the connection), browser/device information, public page visits and random browser identifiers. Google states that GA4 does not log or store IP addresses. We do not send account details, email addresses, form entries or URL query parameters. Advertising features and Google Signals are disabled. Analytics is not linked to your HailSignal account.
Analytics cookies (_ga and _ga_…) last up to 60 days without renewal on each visit. Your consent choice is stored locally for up to 180 days. You can reject at any time using “Analytics settings” on public pages; further collection stops and accessible analytics cookies for this browser are removed. Earlier processing remains unaffected. DNT/GPC and the opt-out offered below are respected.
Google also processes data through affiliated companies and subprocessors, potentially in the USA. The Google data processing terms, including their transfer mechanisms, apply. See Google Privacy and GA4 privacy information. User- and event-level data is intended to be retained for two months; aggregated standard reports may remain available longer. Google reports supplement local daily counts and cover only visits with consent.
Only with your voluntary consent, and only when this measurement is switched on, do we load the Meta Pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The legal bases are Article 6(1)(a) GDPR and Section 25(1) German TDDDG. Without consent the pixel is not loaded and nothing is sent to Meta. Rejection is equally available. Earlier consent that covered only Google Analytics is not reused.
Purpose: seeing whether visits lead to account creation, the start of checkout and a completed annual subscription. On public information pages we send a page view. On the sign-in page and the account page, after consent, we send account creation and checkout start; after returning from payment we send the completed subscription with the net amount and currency (EUR or USD). We do not transmit email addresses, names, phone numbers, account numbers or form entries. Meta may process the IP address required for the connection, the browser type and the page address, and may set the _fbp and _fbc cookies.
When the server-side addition is switched on, our server sends the same event with the same event number, again only after this consent. The IP address, browser type and, where present, the identifiers from the _fbp and _fbc cookies are included; account data is not. Consent is stored locally for up to 180 days and as a short consent cookie in this browser. You can reject at any time using “Analytics settings”; further collection stops and accessible Meta cookies for this browser are removed. DNT/GPC and the page-count opt-out are respected. We and Meta Platforms Ireland Limited are joint controllers for collecting and transmitting this data to Meta (Art. 26 GDPR); the Meta Controller Addendum applies. Meta alone is responsible for any further processing. You can exercise your rights with us or with Meta. Meta also processes data in the USA through Meta Platforms, Inc. The Meta data processing terms and the Meta Privacy Policy apply.
In addition to Google Analytics, you may consent to a separate HailSignal analysis (Article 6(1)(a) GDPR, Section 25(1) German TDDDG). It links the first recorded public landing page, language, approximate IP country and broad referral category to successful registration or login, creation of an annual checkout, its confirmed payment and related refunds. We do not store form entries, IP addresses or full referral URLs for this purpose. This attribution remains on our Hetzner server and is not sent to Google. Google analytics remains separate from customer accounts.
A random HttpOnly cookie (hs_funnel_v1) lasts 30 minutes; only its hash is stored on the server. Successful login links measurement to the internal account ID; payment references are stored as hashes. The consent version is stored in your browser; earlier Google-only consent is not reused. Attribution and storage require this new consent. Reports cover up to 90 days; older records are deleted during the next collection operation. Rejection does not affect login, purchases or hail alerts.
Under the same consent we store, for a newly created account, where the sign-up came from: the source group, the campaign fields utm_source, utm_medium and utm_campaign, whether a Meta click id was present (not the id itself), the hostname of the previous site without its path, the landing page without query parameters, and the time. Another HttpOnly cookie (hs_quelle_v1) lasts 30 days and is set only after this consent. Before consent there is no such cookie and no local storage. The note stays until you withdraw consent or the account is deleted. Without consent, or after withdrawal, the account only says unknown. The visit measurement kept for at most 90 days stays separate.
Withdraw using Analytics settings on public pages, login, account and the home overview. Records still identifiable through the browser cookie are removed; while signed in, all analytics records linked to your account are removed. If the cookie has already expired, sign in or contact us. Account deletion and data access include these records. Contractual and invoice records remain separate. DNT/GPC and the page-count opt-out prevent new collection.
To improve our public website, we maintain separate local daily counts of page views, approximate countries, device types, browser families and broad referral categories. The legal basis is our legitimate interest in improving the website and understanding its reach (Article 6(1)(f) GDPR). The IP address already transmitted with a page request is used only for immediate country lookup in a local DB-IP table; browser and referral information is reduced to fixed categories. Our statistics do not store IP addresses, complete browser headers, referral URLs, search terms, visitor identifiers or individual browsing paths. For these local daily counts, no analytics cookies are set and no analytics data is sent to an external analytics provider.
Only successful public page requests without a session cookie are counted; customer areas, internal pages and recognised bots are excluded. Separate totals cannot be combined into a visitor profile. Up to 90 days are shown; older counts are removed on the next counting operation. These statistics are separate from technical security and operational logs.
You may object to counting: we honour Do Not Track and Global Privacy Control. Alternatively, the button below stores only your opt-out preference in this browser for one year. Please opt out again after clearing browser data or when using another device.
Hetzner Online GmbH provides hosting and encrypted external backup storage. A data processing agreement was concluded on 14 September 2026. Stripe collects payment and billing details; HailSignal does not receive full card numbers. Depending on purpose, Stripe acts as a processor or an independent controller. Resend (Plus Five Five, Inc.) delivers email, including weather and account messages, using the configured sending region in Ireland. Processing by the US provider and its subprocessors is not limited to that sending region. Web push uses the service selected by the device, such as Apple, Google or Mozilla. Message content is encrypted for the device; the provider processes technical delivery information.
The map loads styles, tiles and related resources from OpenFreeMap, which receives IP addresses and technical request information. Fonts are served directly by HailSignal; loading the fonts does not connect to Google Fonts. Google sign-in is optional. A Google Maps link connects to Google only when selected and includes the linked event location. GeoNames and DB-IP datasets are downloaded for local processing, not queried for each visitor as an external geocoding service.
The optional help assistant sends entered questions to the Anthropic API. Answers can be incorrect. Signed-in questions and answers are stored with an account reference. Guest rate limits use a daily identifier rather than a plain-text IP in the questions log; personal information voluntarily entered in text is still personal information. Please do not submit sensitive information or third-party details you are not entitled to share. The account number and full customer profile are not sent as a standard account record to the answering model. Standard 30-day retention of inputs and outputs is enabled for the Anthropic API. Longer retention may apply, in particular for legal obligations or security and abuse investigations. The commercial standard terms provide that our API content is not used to train models; optional user feedback sharing is disabled. This provider retention period is separate from storage by HailSignal described below.
Existing individually configured ntfy or other channels may involve further recipients. The initial new-customer channels are email and web push. Existing customer configurations are not silently migrated.
Processing outside the EEA requires an applicable transfer mechanism. The Hetzner data processing agreement mentioned above is in place. Resend incorporates its data processing agreement through registration; the commercial Anthropic API is governed by commercial terms including a data processing addendum. Depending on purpose, Stripe acts as an independent controller or processor. The provider agreements govern subprocessors and international transfers, including EU Standard Contractual Clauses where applicable. Information on recipients and the applicable safeguards is available through our contact above.
Emails to our hailsignal.com addresses, such as support@ and privacy@, are received by the domain provider INWX (Berlin) and forwarded to the operator's Gmail mailbox at Google; Google may also process them in the USA. We send replies through Resend.
Accounts, rules and related usage information are retained as needed for the account and stated purposes. Access/deletion requests require identity verification. Sessions are generally valid for 30 days and reset links for 60 minutes; expiry does not mean physical deletion of every associated record. Guest questions older than 90 days are removed by the designated cleanup. Account questions do not currently have the same automatic age limit and are included in account deletion handling.
Invoices generally require eight years' retention under German VAT Act section 14b, starting at the end of the year of issue; other business records and specific legal holds may differ. This does not justify keeping an entire account indefinitely or establish a verified payment-provider deletion deadline. Necessary records are handled separately for their specific purpose when deleting an account.
Protected backups retain 14 daily, eight weekly and twelve monthly selections; critical backups also retain closely spaced snapshots for two days. Physical removal depends on successful pruning. A minimal, separately backed-up deletion register prevents old backups from reactivating deleted accounts and remains while such copies can be restored. Supplier/support copies and statutory records are reviewed separately for each request. Messages already delivered to customer devices cannot be recalled by our server.
Web server access logs contain the shortened IP address (IPv4 to /24, IPv6 to /48), time, requested page without query parameters, status code and browser identifier. They serve troubleshooting and protection of the service and are deleted after 14 days.
Where applicable, rights include access, correction, deletion, restriction, portability, objection and withdrawal of consent for future processing. Push can be disabled in HailSignal and device settings. Complaints can be made to a competent supervisory authority, including LDI North Rhine-Westphalia. Verified requests are generally handled within one month; any necessary justified extension is communicated within that period. Statutory exceptions and other people's rights are respected.
Other mandatory local rights remain unaffected. We do not claim that every US privacy law is inapplicable simply because customers are businesses, or that a checkbox waives statutory rights.
The GDPR applies to processing in the context of our German establishment even when a person is in the USA. Additional applicable mandatory local rights remain available. Language, currency or IP country do not determine this on their own. For access, correction, deletion or other privacy requests, use the contact above; the relevant country or US state helps identify additional rights.
The date and version of this notice appear at the bottom of the page. Updated notices are published here; material changes to the described processing are identified on the website. Where new consent is required, publication does not replace it.
When enabled, Google services may collect activity across websites over time; see Google Privacy. HailSignal enables neither advertising features nor Google Signals.