# Every visit. Precisely planned. > The AI for home care services, alongside your care software: your team speaks instead of typing. Source: https://farolacare.com/en · As of: 2026-10-26 ## Sound familiar? - “The paperwork gets written at the kitchen table at night.” The writing starts after the round. Good people leave because the paperwork never stops. _(Topic: Conversation)_ - “What Mrs K. said on Tuesday, only one colleague knows.” Knowledge sits in heads, on scraps of paper or in private messengers, health data included. _(Topic: Overview)_ - “6:02 a.m., someone calls in sick. The phoning goes on until eight.” Who takes over which client? Management replans the day on the phone. _(Topic: Replanning)_ - “Relatives call: when are you coming?” The question lands in the office just when nobody there has time. _(Topic: Drive)_ - “Gaps only show up at the inspection.” What is missing often only shows when the Medical Service (Medizinischer Dienst) asks. _(Topic: Overview)_ - “Another piece of software? We don't have time for that.” Switching, training, data migration: no care service can manage that on the side. ## Speak instead of typing. Farola sorts the rest. ## Arrive prepared **1 · Drive.** “What do I need to know about Mrs K.?” the caregiver asks the assistant, and gets the answer from her own round: access, tasks, what mattered last time. **Result:** Fewer questions to the office, fewer surprises at the door. - The day's round in driving order, with access notes - Navigation with Apple Maps, “Arrived” with one tap - Live arrival time: if the day shifts, management sees it - Assistant for questions about your own round, just by voice ## Speak once, everything sorted **2 · Conversation.** The caregiver records the conversation at the client's home, but only with documented consent. Farola writes it down and organises what was said. **Result:** Documentation happens during the visit, not after work. - Recording with a visible indicator, only with consent - Transcript in the EU (Vertex AI, EU region) - Sorted automatically: wellbeing, medication, vital signs, notes - To-dos for the next visit straight from the conversation - Summary as a briefing for the next colleague - Recordings are deleted automatically after the agreed period ## When the day tips over, Farola asks **3 · Replanning.** If a visit runs longer, Farola recalculates the arrival times of the following visits. Management sees it straight away, without a phone call. **Result:** Less phoning in the morning. The decision stays with you. - A delay shifts the arrival times of the following visits - “On the way – arrived – done” shows up live in the dashboard - Suggestion of who can take over a client, confirmed with one tap - Tell relatives about delays ## Everything in one place **4 · Overview.** What is said and done on the road ends up with the client and in the round instead of in someone's head or a chat. **Result:** The next colleague knows what happened. So do you. - Live map with all rounds, caregivers and visits - Tasks per visit, ticked off and saved - A memory per client that keeps learning from every conversation - Export to your care documentation - Each care service sees only its own data, each caregiver only their own round ## Everyone sees the data they need **Who sees what.** On the road you see only your own clients; the office sees the whole day. - **Caregiver (App)**: Today, Meds, Notes, File - **Dispatch (Dashboard)**: Live map, Rounds, Inbox - **Management (Dashboard)**: Care report, Medication plan, Change log, Team & data - **For doctors (Dashboard)**: Vital signs, Medication, Observations - **Clients & relatives (Device)**: Arrival time, Request by voice ## One app for the whole visit, on the phone and on the tablet **The app.** In the app, every client has a page with everything due today: the last conversation, the tasks, the medication, the file. Your caregivers speak instead of typing and tick off what is done. - **Speak instead of typing:** one tap on the record button and Farola captures the conversation (only with consent) - **Medication and routines to tick off:** medication plan, readings and tasks per visit, with times - **Hand tasks to Farola:** “Request a prescription from Dr. Weber”, and Farola makes the call - **iPhone and iPad:** on the phone on the road, on the tablet at handover, both with the same data - **Vehicle tracker:** fills in the drive between visits and shows the arrival time live, even without a phone in the car ### Every vehicle live on the map **Vehicle tracker.** For every vehicle, Farola supplies a small tracker. It plugs into the OBD port under the steering wheel in two minutes, no garage needed. A data SIM is built in, and the vehicle appears live on the map. Device: e.g. Teltonika FMC003 (OBD, LTE) What it does: - Plug it in, scan the code in the dashboard, assign the vehicle - Live position during the round, even without a phone in the car - Tracking only happens during rounds. Private journeys and positions after work are not stored. Without a tracker: the caregiver app reports the position while it is open during the round. **Result:** You know where every vehicle is without making a phone call. ## Your caregivers become people your clients confide in **Trust.** Before the caregiver rings the bell, Farola reminds her of what mattered in earlier conversations: that the granddaughter's birthday is coming up, that Mrs K. has slept badly since the move, that she loves her garden. So she picks up where they left off instead of starting from zero every time. **Result:** Happy clients and relatives, plus caregivers who stay because their work becomes more human. Sample briefing “Next: Mrs K.” (From 4 conversations): - Granddaughter Mia's birthday is on Saturday - Has slept badly since the move - Loves talking about her garden - Briefing before every visit in the app - Filled automatically from all previous conversations ## Farola handles the follow-ups **Follow-ups.** What comes up during a visit often has to be sorted out on the phone. The caregiver tells Farola once, and Farola takes over the calls. 1. **Caregiver**: “Please book an appointment with Dr Weber, ideally Thursday at 8.” 2. **Farola calls the surgery** and books the appointment: Thursday, 8:00. 3. **Farola calls the client** and confirms the appointment with Mrs K. 4. **In the plan**: The appointment is in the plan, and your care service sees the status: confirmed. Farola always identifies itself as an AI on the phone and passes on information about clients only with their consent. **Result:** No phone loops in the office: appointments, prescriptions and call-backs run in the background. ## On the phone, Farola sounds like your team **Familiar voice.** Farola takes over routine calls such as appointment confirmations, reminders, call-backs and questions about the time, in the voice of the caregiver your clients know. Sample call (Farola · Voice: Anna): - Farola: “Hello, Mrs Keller, this is Anna's digital assistant from Sonnenschein care service. I'm calling about your doctor's appointment.” - Client: “Oh, lovely. What time was it again?” - Farola: “Thursday at 8, with Dr Weber.” Farola always identifies itself as an AI on the phone. The law requires it, and it keeps things honest. - A caregiver's voice is used only with their explicit consent, which they can withdraw at any time. - Medical questions, personal conversations and emergencies go to a person: Farola passes them on to your team. **Result:** Your team spends less time on the phone and more with people, and your clients still hear a familiar voice. ## Farola at home **For clients.** Every client gets a small device for the bedside table. Press the big button on top once and simply speak. Farola answers in a natural voice. What it does: - Reads e-mails aloud and writes replies, for example to a daughter or grandson - Makes calls: to relatives or straight to your care service - Shows on the display what matters today: “Anna is coming today at 9:15” - Reminds about medication and appointments with a sound and on the display Sample display: - Thursday: 07:24 - Next visit: Anna · 9:15 - Reminder: Eye drops · 8:00 - Farola only listens once the button has been pressed. The microphone is not listening in all the time. - The AI runs in the EU. On the phone, Farola always identifies itself as an AI. - **Not a home emergency call system:** the device does not replace an emergency service. In an emergency, 112 or the home emergency call system still applies. Farola passes anything urgent on to people in your team. **Result:** Fewer calls to the office, because clients and relatives know when you are coming and what is next. ## Built for health data - Processing in the EU: database, files and AI (Vertex AI, EU region). - Recording only with documented consent. Without it there is no record button. - Location tracking only during the round, visible in the app, no evaluation of individuals. - No advertising, no tracking, no cookies on this website. More: [Privacy and security](https://farolacare.com/en/datenschutz-und-sicherheit). ## In addition, not instead Farola does not replace your care software. It runs alongside it: an AI that listens on the road, keeps the record and keeps an eye on the day. - **Your care software stays.** No data migration, no switchover, no billing in Farola. - **Your team speaks instead of typing.** The app is built for the road: round, navigation, one tap for “Arrived”, recording with consent. - **You only pay when the AI works for you.** 0 € a month, no base fee, no contract term. Only credits for AI usage are billed. 1. **Your team speaks**: At the client's home, in the app 2. **Farola keeps the record**: Transcript in the EU, round and tasks live 3. **Your documentation**: Handed over to your care software ## What Farola costs **0 €** a month · no base fee · no contract term. You only pay credits for AI usage, for example for a transcribed recording. [Register your care service](https://app.farolacare.com/auth?mode=signUp) ## Ready in no time 1. **Invitation link for your team**: You invite your caregivers from the dashboard, by e-mail or as a link to send in a message. 2. **App on the work phone**: The caregiver opens the link, downloads “Farola Care” and signs in with their phone number. No password to remember. 3. **First round**: Create clients and visits and release the round. It appears in the app straight away. ## Frequently asked questions ### Do I have to switch my care software? No. Farola runs alongside the software you use today for care planning, documentation and billing. There is no data migration and no switchover. You only enter in Farola what the rounds and the app need. ### Does Farola replace care documentation? No. Farola is not certified care documentation under SGB XI. It captures what is said at the client's home and prepares it so that you can transfer it into your documentation. ### What happens to the conversation recordings? Recording only happens if there is documented consent for the client. Otherwise there is no record button. The recording is transcribed in the EU (Vertex AI, EU region) and deleted automatically once the agreed period has passed. Your care service is responsible for the data; Farola acts as a processor. More: [Privacy: caregiver app](https://farolacare.com/en/datenschutz/app). ### Does Farola really make calls itself? Yes. Farola calls on behalf of your care service, for example the doctor's surgery or the client. It always identifies itself as an AI on the phone and passes on information about clients only with their consent. Your team sees the status of every call in the plan. ### Does Farola sound like my staff on the phone? If you want it to. For routine calls such as appointment confirmations, reminders or call-backs, Farola can speak in the voice of one of your caregivers, but only with their explicit consent, which they can withdraw at any time. Farola always identifies itself as an AI. Medical questions, personal conversations and emergencies are handled by a person: Farola passes them on to your team. ### Does the app work without a network? Partly. A round that has been loaded stays visible, even in a dead zone. Status updates, ticked-off tasks and recordings need a connection. Without one, the app says so and you send again. Location data is buffered and sent later. ### What does Farola cost? 0 € a month, with no base fee and no contract term. You only pay credits for AI usage, that is for what the AI actually does for you, such as transcribing a conversation. ### Is the caregiver tracked all the time? No. Location tracking only runs during a round and only while the app is open, the app shows visibly that it is running, and it ends with the last visit. There is no evaluation of individuals: no rankings, no break or speed profiles. ### Does the vehicle tracker record private journeys? No. Positions are stored only during rounds, not on private journeys or trips after work. Without a tracker, Farola locates only via the caregiver app, while it is open during a round. ### Does the home device replace a home emergency call system? No. The device replaces neither a home emergency call system nor an emergency service. In an emergency, 112 or the client's home emergency call system still applies. Farola helps with everyday things like reminders, calls, e-mails and the next visit. Anything urgent it passes on to your team. ### What devices does my team need? A smartphone (iPhone or Android) with the “Farola Care” app for the caregivers. They sign in with an invitation link and their own phone number. Management and dispatch work in the browser. ### Can an AI assistant set up Farola for me? It can prepare your care service's registration, with a link or through our open interface. Nothing is created until you confirm the link in your e-mail and set a password yourself. Details: [For AI assistants](https://farolacare.com/en/fuer-ki-assistenten). --- # Every home visit. Precisely planned. > The AI for home visits and mobile services: you speak instead of typing, and Farola plans the route and handles the follow-ups. Source: https://farolacare.com/en/aerzte · As of: 2026-10-26 ## Sound familiar? - “Twelve home visits, and I spend half the time in the car.” The order gets worked out in your head in the morning. One detour, one roadworks, and the afternoon is gone. _(Topic: Route)_ - “3 a.m., the on-call phone rings. Who goes?” On call, planning happens between the phone, a scrap of paper and the handover book. Relatives wait for a call back. _(Topic: On call)_ - “After the visit, the phoning starts.” Pharmacy, lab, relatives, care service: every question is a call, often on hold. _(Topic: Follow-ups)_ - “I type up the visit notes in the evening.” What mattered at the visit still has to go into the practice software after work. _(Topic: Speak, don't type)_ - “What happened at the last visit, only the colleague from the early shift knows.” Knowledge sits in heads and in private messengers and gets lost at handover. _(Topic: Overview)_ - “Another piece of software? We don't have time for that.” Switching, training, data migration: no team can manage that on the side. Farola runs alongside. ## Speak instead of typing. Farola does the rest. ## The route is set before you leave **1 · Route & day plan.** Farola puts your home visits across the region in a sensible order, with the time windows patients and relatives need. If an urgent visit comes in, Farola fits it in and recalculates the rest of the day. **Result:** Less time in the car, more time with your patients. - Day plan in driving order, with time windows and access notes - Fit in urgent visits, and the following times recalculate - Navigation with Apple Maps, “Arrived” with one tap - Live arrival time: if the day shifts, your team sees it ## Speak once, the note is done **2 · Speak instead of typing.** After the visit you dictate the visit note into your phone, or record the conversation if the patient has consented. Farola writes it down and turns it into a structured note that you copy into your practice software. **Result:** The note is written at the visit, not at your desk in the evening. - Visit note by voice, recording of conversations only with consent - Transcript in the EU (Vertex AI, EU region) - In your words, sorted into reason, findings, medication and next visit - Ready to copy into your practice management system, because Farola replaces neither the PMS nor the medical record - Follow-ups straight from the note: prescription, lab, call-back - Recordings are deleted automatically after the agreed period ## When the phone rings at night **3 · On call & replanning.** An urgent call comes in. From the rounds under way and the on-call roster, Farola suggests who can take the visit soonest. One tap decides it, and the relatives learn when someone is coming. **Result:** The night stays plannable. The decision stays with you. - On-call roster, at night and at weekends too - Suggestion of who takes an urgent visit, confirmed with one tap - A delay shifts the arrival times of the following visits - Relatives learn when someone is coming - You decide whether a visit is urgent, and Farola does the planning ## Farola handles the follow-ups **4 · Follow-ups.** After a visit, the phoning often starts. You tell Farola once, and Farola calls or writes. 1. **You**: “Please tell the pharmacy that Mr M.'s prescription is coming, and let the lab know about the blood sample.” 2. **Farola calls the pharmacy** and lets them know Mr M.'s prescription is coming. 3. **Farola writes to the lab**: Sample coming today, collection at 11:00. 4. **In the plan**: Both follow-ups are in the plan, and your team sees the status: done. Farola always identifies itself as an AI on the phone and passes on information about patients only with their consent. **Result:** No hold music after the visit: prescriptions, lab, care service and appointments run in the background. ## For mobile medicine and specialised services - **Home visits & mobile practices**: Home and care-home visits as a round through the region, urgent visits fitted in, visit notes by voice. - **Palliative & SAPV teams**: An on-call roster around the clock and a handover briefing for every change of shift. Relatives know when someone is coming. - **Wound & specialist care**: A photo series per wound and the next dressing change in the plan. The same goes for intensive care, ventilation, infusion and stoma services. - **Therapy & lab**: Courses of treatment as fixed appointments on the route. Lab pick-up rounds with time windows for when a sample has to be handed over. ## Everyone sees the data they need **Who sees what.** On the road you see only your own patients; the practice sees the whole day. - **Doctor (Dashboard)**: Vital signs, Medication, Observations - **On site (App)**: Today, Meds, Notes, File - **Dispatch (Dashboard)**: Live map, Rounds, Inbox - **Management (Dashboard)**: Care report, Medication plan, Change log, Team & data - **Patients & relatives (Device)**: Arrival time, Request by voice ## One app for every visit, on the phone and on the tablet **The app.** In the app, every patient has a page with everything due today: the last visit, the tasks for this visit, the note. You speak instead of typing and tick off what is done. - **Speak instead of typing:** one tap and Farola captures the visit note (conversations only with consent) - **Tasks per visit to tick off:** dressing change, blood draw, wound photos, each with a time - **Hand tasks to Farola:** “Call the pharmacy about the prescription”, and Farola makes the call - **iPhone and iPad:** on the phone on the road, on the tablet at handover, both with the same data - **Vehicle tracker:** fills in the drive between visits and shows the arrival time live, even without a phone in the car ### Every vehicle live on the map **Vehicle tracker.** For every vehicle, Farola supplies a small tracker. It plugs into the OBD port under the steering wheel in two minutes, no garage needed. A data SIM is built in, and the vehicle appears live on the map during the round. Device: e.g. Teltonika FMC003 (OBD, LTE) What it does: - Plug it in, scan the code in the dashboard, assign the vehicle - Live position during the round, even without a phone in the car - Tracking only happens during rounds. Private journeys and positions after work are not stored. Without a tracker: the app reports the position while it is open during the round. **Result:** You know where every vehicle on a round is without making a phone call. ## What Farola costs **0 €** a month · no base fee · no contract term. You only pay credits for AI usage, for example for a transcribed visit note. [Sign up for free](https://app.farolacare.com/auth?mode=signUp) _Sign-up still asks for your “Pflegedienst” (care service). Just enter your practice or service there._ --- # Features > What Farola takes off your care service's hands. Source: https://farolacare.com/en/funktionen · As of: 2026-10-26 ## Daily planning and rounds - Recurring care plan per client: weekday, time window, duration, required qualification, service. - Planning run: a proposal for the day's rounds, which dispatch adjusts and releases. - Day planner with planned and actual times per visit and a status chain “planned → on the way → arrived → done” (or “cancelled” with a reason). - Travel times are estimated from the distance. Turn-by-turn navigation is handled by Apple Maps in the app. ## Live map - Caregivers and visits on the map in real time, with the age of every position. An outdated position is shown as outdated. - If a visit runs late, Farola updates the expected arrival for the following visits. - Relatives learn the expected arrival by e-mail, push or SMS. - Vehicles appear live on the map with a GPS tracker, even without a phone in the car. ## Caregiver app (iPhone and Android) - Sign-in with an invitation link and phone number, with no password to remember. - The day's round, navigation to the next visit, “Arrived” and “Completed”. - Tick off the visit's tasks; the tick is saved per visit. - Call the client or their stored relatives directly. - An assistant that answers questions about your own round (“What do I need to know for the next visit?”). - Conversation recording only with documented consent. More: [For caregivers](https://farolacare.com/en/pflegekraefte). ## Requests - Requests from clients and relatives arrive in one inbox, are classified (service, preferred time, urgency) and assigned to a visit or declined with a reason. - Clients and relatives can also make requests by voice assistant in the client app. ## Conversation documentation - Recording at the client's home (with consent), transcription and structured analysis via Vertex AI in the EU. - Every analysis is a suggestion and is approved by a person before it goes into the client's context memory. - Audio files are deleted automatically when their retention period ends. ## Administration - Service catalogue: services with flat or time-based prices, travel prices by distance or zones, subscriptions. - Team: caregivers with qualification and app access, dashboard users with roles (Admin, Dispatch, Read-only). - Client file with contacts, care level, access notes and export. --- # The app for the round > One person, one device, one round, and clear rules about what the app knows. Source: https://farolacare.com/en/pflegekraefte · As of: 2026-10-26 ## What the app does 1. **Sign in**: Your care service sends you an invitation link. You open it on your work phone and enter your phone number. That's it. 2. **See the round**: All of the day's visits in driving order, with address, access note, tasks and the summary of the last conversation. 3. **Drive and arrive**: Navigation with Apple Maps, “Arrived” and “Complete visit”. If a visit is running late, you see the new arrival time. 4. **Tasks and calls**: Tick off tasks, call the client or relatives with a question. ## When the app shares your location - **During the round:** Yes, from “Start navigation” or the first status change, while the app is open. The app shows a visible notice while it is tracking. - **After the last visit:** No. Tracking ends when all visits are done. - **Free time and days off:** No. The server also discards positions outside a round. - **Evaluations about you:** None. There are no rankings and no break or speed profiles. ## Conversation recording The record button only exists if the client has consented. The recording is visible, is deleted from the device after uploading and serves to document the visit, not to assess your work. Legal: [Privacy notice for the caregiver app](https://farolacare.com/en/datenschutz/app). --- # Privacy and security > Three sensitive kinds of data at once, and a clear rule for each. Source: https://farolacare.com/en/datenschutz-und-sicherheit · As of: 2026-10-26 ## Clients' health data (Art. 9 GDPR) - Processing only for care. The care service is the controller; Farola acts as a processor. - Database and files are in the EU; AI features run exclusively via Vertex AI in the EU region, without training on your data. - No health data in error logs, file names or address lines. ## Caregivers' location data - Tracking only during an active round, visible in the app. - No evaluation of individuals: location serves dispatch, not monitoring of behaviour. - Tracking is subject to co-determination (Section 87 BetrVG, the German Works Constitution Act): Farola is built so that a works agreement can clearly limit it. ## Conversation recordings - Only with documented consent that can be withdrawn, checked in the app and on the server. - Audio is the kind of data kept for the shortest time: after transcription and analysis it is deleted automatically once its period expires. - Analyses are suggestions and are approved by a person before they are adopted. ## Tenant separation and access - Each care service is a separate tenant; database policies keep the data apart. - Roles in the dashboard: Admin, Dispatch, Read-only. Caregivers see only their own round. - App sessions are bound to one device and can be revoked individually; access tokens are stored only as a hash. --- # Register your care service > A few details, then a confirmation by e-mail. Nothing is created before you confirm. Source: https://farolacare.com/en/registrieren · As of: 2026-10-26 ## What happens next 1. **Send the details**: Name of the care service, your name, your e-mail address. The rest is optional. 2. **Confirm the e-mail**: You receive a link. It shows your details once more; with “Bestätigen” (confirm) you accept the terms of use. 3. **Set a password**: Then you set your password, and your care service is set up in Farola. An AI assistant can prefill this form for you. More: [For AI assistants](https://farolacare.com/en/fuer-ki-assistenten). --- # Set up Farola with an AI assistant > An assistant can prepare everything. Only the person can confirm, agree and set a password. Source: https://farolacare.com/en/fuer-ki-assistenten · As of: 2026-10-26 ## Ground rules for assistants - Never create an account or confirm anything on a person's behalf. The registration only takes effect once the person opens the link in their e-mail and confirms. - Consent (terms of use, privacy) is always given by the person themselves, on the confirmation page. - Do not send clients' health data. The registration only needs details about the care service and the contact person. - Tell the person that you have prepared something on their behalf and that an e-mail is on its way. ## Option 1: prefilled link (for every assistant) Give the person this link with their details. They check the form and send it themselves. ``` https://farolacare.com/en/registrieren?organisation={name of the care service}&contact={name}&email={e-mail}&phone={phone}&address={street}&postalCode={postcode}&city={town}&agent={name of your assistant} ``` All parameters are optional and URL-encoded. Unknown parameters are ignored. ## Option 2: direct call (if you can send HTTP requests) Only if the person has explicitly asked you to. The request is marked as prepared by an assistant and shown to the person as such. ``` POST https://app.farolacare.com/api/public/v1/registrations Content-Type: application/json { "organisationName": "Pflegedienst Sonnenschein", "contactName": "Maria Beispiel", "email": "maria@example.org", "phone": "+49 6131 000000", "city": "Mainz", "staffCount": 12, "clientCount": 40, "source": "agent", "agentName": "Name of your assistant" } ``` The response is always `202 { "status": "pending_confirmation" }`, even if an account already exists for this address or too many requests came in. The response deliberately reveals nothing about existing accounts. For invalid details: `400 { "error": "INVALID_BODY", "message": … }`. Machine-readable: [/openapi.json](https://farolacare.com/openapi.json) and [/.well-known/agent-actions.json](https://farolacare.com/.well-known/agent-actions.json). ## What happens next 1. **E-mail to the person**: They get a confirmation link (valid for 7 days). Until then, no account exists. 2. **Confirmation by the person**: The page shows the details and, where applicable, “Vorbereitet von” (prepared by): . The person agrees and confirms. 3. **Password and start**: The person sets a password; the care service is created and they land in the dashboard. What Farola is about, in short form for language models: [/en/llms.txt](https://farolacare.com/en/llms.txt). --- # Support > Quick help with Farola and the caregiver app. Source: https://farolacare.com/en/support · As of: 2026-10-26 ## For caregivers - **Invitation link does not work:** The link is valid for 7 days and can be used once. Ask your dispatch team for a new invitation. - **Phone number not recognised:** It has to be the number your care service has on file, with 0 or +49. If it is stored incorrectly, your dispatch team corrects it and invites you again. - **Lost phone:** Your dispatch team can end the sign-in on that device immediately. ## Contact E-mail: support@farolacare.com Please direct questions about your data in the app to your care service first. It is responsible for them. We help it with that. Legal: [Terms of use](https://farolacare.com/en/nutzungsbedingungen) · [Privacy notice for the app](https://farolacare.com/en/datenschutz/app) · [Have your account deleted](https://farolacare.com/en/datenschutz/app#konto-loeschen) --- # Legal notice > Information pursuant to Section 5 DDG (German Digital Services Act). Source: https://farolacare.com/en/impressum · As of: 2026-10-26 _This translation is for convenience. Farola is offered under German law; the German version prevails._ [Read the German original](https://farolacare.com/impressum) ## Provider - **Company:** 997 Ventures UG (haftungsbeschränkt) - **Address:** Sonnenhof 13, 67677 Enkenbach-Alsenborn, Germany - **Represented by:** Finn Lauppert von Peharnik - **Register entry:** HRB 33133 - **VAT ID:** DE341312895 - **E-mail:** info@farolacare.com **For the United States and every country outside the EU:** Triple Peak Software Systems. ## Responsible for the content Finn Lauppert von Peharnik, address as above. **For the United States and every country outside the EU:** Triple Peak Software Systems. ## Consumer dispute resolution We are neither willing nor obliged to take part in dispute resolution proceedings before a consumer arbitration board. --- # Privacy policy > For this website (farolacare.com). The caregiver app has its own notice. Version 1.0 · As of: 28 September 2026. Source: https://farolacare.com/en/datenschutz · As of: 2026-10-26 _This translation is for convenience. Farola is offered under German law; the German version prevails._ [Read the German original](https://farolacare.com/datenschutz) ## Controller 997 Ventures UG (haftungsbeschränkt), Sonnenhof 13, 67677 Enkenbach-Alsenborn. E-mail: info@farolacare.com. ## Hosting and server logs The website is delivered as a static site via Vercel. When it is accessed, the host processes technically necessary data (IP address, time, page requested, browser) to deliver and secure it. Legal basis: Art. 6(1)(f) GDPR. The host is Vercel Inc. (USA); the transfer is based on the EU Standard Contractual Clauses in the data processing agreement with Vercel. We do not use cookies or any analytics or tracking tools. ## No cookies, no tracking This website sets no cookies and uses no analytics or advertising services. Fonts are loaded from our own server, not from third parties. If you choose a language or country, your browser stores that choice locally (localStorage) so it is kept for your next visit. Without a choice, the site derives both from your browser's language setting. None of this is sent to us or to third parties; you can delete it in your browser at any time. ## Registering a care service If you (or an AI assistant on your behalf) send the registration form, the details (name of the care service, contact person, e-mail and optional details) go to our application app.farolacare.com. We store them to send you a confirmation e-mail and delete unconfirmed requests after 30 days at the latest. We do not store your IP address in the process; to prevent abuse, we limit the number of confirmation e-mails per address. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract). The application and its database run in the EU (Supabase, Frankfurt); we send e-mails via Resend. ## Your rights You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a supervisory authority (responsible for us: the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate). --- # Privacy notice for the caregiver app > Which data the Farola caregiver app processes, what for and for how long. Version 1.1 · As of: 29 September 2026. Source: https://farolacare.com/en/datenschutz/app · As of: 2026-10-26 _This translation is for convenience. Farola is offered under German law; the German version prevails._ [Read the German original](https://farolacare.com/datenschutz/app) ## Who is responsible The controller is the care service that invited you. 997 Ventures UG (haftungsbeschränkt) operates Farola as a processor on behalf of this care service (Art. 28 GDPR). The data belongs to your care service. It decides on the purpose and duration of the processing; we do not use the data for our own purposes, not for advertising and not to train AI models. ## Legal bases - Your care service bases the processing of your data as an employee on the employment relationship (Section 26 BDSG) and on the performance of the contract and of legal obligations (Art. 6(1)(b) and (c) GDPR). - Health data of clients that you record at the client's home is processed by your care service as a special category (Art. 9 GDPR) on the basis it ensures. - Location data during the round is employee data protection and subject to co-determination (Section 87 BetrVG); your care service sets the basis and the limits. ## Which data the app processes - **Sign-in:** Your phone number (matched against the number stored by the care service), a device identifier of the installation, session tokens (in the device's keychain; on the server only as a hash). - **Round:** Your visits for the day with addresses, access notes, tasks and clients' contact phone numbers (only your own round). - **Location:** Only during a running round and while the app is open, visibly indicated; positions outside a round are discarded. - **Status and tasks:** “Arrived”, “Completed”, ticked-off tasks. Timestamps are set by the server. - **Conversation recordings:** Only after the client's documented consent; the recording stays on the device until it is uploaded, is then deleted from the device and on the server once the period expires. - **Photos and documents:** Only with the client's documented photo consent: photos and documents taken or chosen, for the assistant (not stored there) or for the record. - **Questions to the assistant:** Your question and the context of your round go to Vertex AI in the EU region; the history is not stored. ## Microphone and conversation recordings For conversation recordings, the app asks once for the microphone permission. Recording only happens if there is documented consent for the client; otherwise there is no record button, and the server rejects a recording without consent. A running recording continues if you open Google Maps via “Navigation starten” or lock the device. iOS then shows the red recording indicator. The app plays nothing back; it only records the conversation at the client's home so that you can navigate to the address in between. The recording stays on the device until it is uploaded and is then deleted there. The audio is transcribed in the EU and deleted automatically once the agreed period has passed; a withdrawal deletes the recording and the transcript. ## Photos and documents In the composer you can take a photo or choose an existing one and attach it to a question to the assistant or file it in the client's record; likewise a document (such as a doctor's letter). This is only possible with the client's documented photo consent. For “take a photo” the app asks for camera permission. When you choose an existing photo, the app receives only the selected image and no access to your photo library. Photos and documents you send to the assistant are processed by Vertex AI in the EU for that one request only and not stored; what you file in the record is stored as care documentation and visible only to the care service. ## Location during the round Location tracking runs only while the app is open and a round is active. It starts with the round and ends with the last visit. In the background or without an active round, the app does not track location. A visible notice shows that tracking is running. Without a network, positions are briefly buffered on the device and sent later; imprecise positions are discarded. There is no evaluation of individuals, no rankings and no break or speed profiles. ## Navigation via Google Maps When you tap “Navigation starten”, the app opens Google Maps on your device (as an app or via a web link). Only the visit's destination (coordinate or address) is handed over, never a name, no identifier and nothing from the record. Google is its own controller for the use of Google Maps; Google's privacy terms then apply. ## The assistant and AI The assistant and the analysis of conversations run via Vertex AI in the EU region. Real names may appear; processing exclusively on EU infrastructure provides the safeguard. There is no training and no further use of your data at the provider. The history of your queries is not stored. AI functions and route calculation may be missing until your administration has confirmed the associated contract documents (the data processing agreement and its annexes) in the product. Without that confirmation the affected functions stay locked; the rest of the app remains usable. ## Services the app uses Servers, database and the AI functions are in the EU. To run the app we use the same providers that apply to Farola as a whole; the full list with purpose, types of data, location and transfer basis is available at [sub-processors](https://farolacare.com/en/unterauftragsverarbeiter). - Database, sign-in and file storage (EU). - AI: transcription, analysis and the assistant via Vertex AI (EU region). - Navigation via Google Maps on your device, which you open yourself (see above). ## What the app does not do - No tracking outside the round and not in the background. - No analytics or advertising SDKs. - No evaluation of your performance or behaviour. ## Private devices and voluntary use If you use the app on a private device, it does not access your content without being asked: it reads neither your photo library nor your contacts; it hands over a photo or document only if you take or choose it yourself (see “Photos and documents”). Only the session sign-in data and not-yet-uploaded recordings are stored on the device; the round content is loaded on each call and not stored permanently. If the device is lost or you leave, your care service ends the access. Whether and how you use the app follows your care service's instructions. You do not have to use voluntary additional functions; not using them puts you at no disadvantage, unless your care service provides otherwise. ## Storage location and periods Servers and database in the EU. Your care service is responsible for the data of your round; how long it is kept depends on the data processing agreement with it. We delete conversation recordings automatically once the agreed period expires, and location data after seven days. ## Deleting your account and data Your care service sets up your app account. To have it deleted, ask your care service, or write to us at support@farolacare.com. We then end all sign-ins on your devices and delete your sign-in data (phone number matching, device identifier, sessions). Visit data that is part of the care service's care documentation is handled according to its instructions and the statutory retention periods. Signing out in the app (Settings) immediately ends the sign-in on that device. ## Your rights You have the right of access, rectification, erasure, restriction of processing, data portability and objection. For these, please contact your care service as the controller; we support it in doing so. Contact us: info@farolacare.com. You also have the right to lodge a complaint with a data protection supervisory authority. Our [terms of use](https://farolacare.com/en/nutzungsbedingungen) apply in addition. --- # Terms of use > For the use of farolacare.com, the Farola dashboard and the “Farola Care” app. As of: 23 September 2026. Source: https://farolacare.com/en/nutzungsbedingungen · As of: 2026-10-26 _This translation is for convenience. Farola is offered under German law; the German version prevails._ [Read the German original](https://farolacare.com/nutzungsbedingungen) ## 1. Scope Farola is software for home care services. The provider is 997 Ventures UG (haftungsbeschränkt), Sonnenhof 13, 67677 Enkenbach-Alsenborn, represented by Finn Lauppert von Peharnik (HRB 33133), e-mail: info@farolacare.com. Farola is aimed at businesses. The contracting party is the care service; the contract concluded with it and the data processing agreement (DPA) apply to it. These terms of use govern the use of the website, the dashboard and the “Farola Care” app (caregiver app) by the care service and its staff. In the event of conflict, the contract with the care service takes precedence. ## 2. Access - Only people invited by their care service can use the “Farola Care” app. Sign-in is via the invitation link and the phone number stored by the care service, or via a sign-in code from the care service. - Access is personal and not transferable. Protect your device and your sign-in from access by third parties. - The care service can end access at any time, for example when employment ends or a device is lost. ## 3. Permitted use - Farola may only be used for the work of the care service that set up the access. - In particular, it is not permitted to access other people's data, to circumvent protective measures, to reverse-engineer the software unless the law allows it, or to make automated mass queries. - Automated access is only permitted via the documented public registration interface ([For AI assistants](https://farolacare.com/en/fuer-ki-assistenten)), and only on behalf of the person who is to be registered. ## 4. Content and professional responsibility - Nursing and medical decisions are made by the care service's professionals. Farola supports planning and documentation but does not replace professional judgement. - Machine-generated content, such as summaries of conversations or the assistant's answers, is labelled as such. It is guidance, not medical advice, and may be incomplete or wrong; check it before use. - Farola is not a medical device and not an emergency service. In an emergency, call **112**. ## 5. Availability We strive for high availability but cannot guarantee uninterrupted operation. Where possible, we carry out maintenance outside the usual visit hours. Different commitments may be agreed in the contract with the care service. ## 6. Data protection The care service is responsible for the data of clients and staff; Farola processes it on its behalf (Art. 28 GDPR). Details: [privacy policy of the website](https://farolacare.com/en/datenschutz) and [privacy notice for the caregiver app](https://farolacare.com/en/datenschutz/app). ## 7. Liability - We are liable without limitation for intent and gross negligence, for injury to life, body or health, and under the Product Liability Act. - For slight negligence, we are only liable for breach of an essential contractual obligation (cardinal obligation), limited to the typical, foreseeable damage. - Otherwise, liability is excluded unless the contract with the care service provides otherwise. ## 8. Termination and account deletion Access to the app ends when the care service ends it. You can request deletion of your app account at any time from your care service or from us at support@farolacare.com; we coordinate the deletion with the care service because visit data may be part of its care documentation. The care service's data is handled according to the data processing agreement. More in the [privacy notice for the app](https://farolacare.com/en/datenschutz/app#konto-loeschen). ## 9. Apps from the App Store For apps you obtain via the Apple App Store, Apple's [Standard End User License Agreement (EULA)](https://www.apple.com/legal/internet-services/itunes/dev/stdeula/) also applies. The contracting party for the app is the provider, not Apple; Apple is not responsible for the app or its content. ## 10. Final provisions - We may change these terms of use with effect for the future if there is an objective reason, such as new features or a change in the law. We will inform the care service of material changes in good time. - German law applies, excluding the UN Convention on Contracts for the International Sale of Goods. - The place of jurisdiction for disputes with merchants, legal entities under public law and special funds under public law is the provider's registered office. - Should any provision be invalid, the validity of the remaining provisions is not affected. --- # General terms and conditions (AGB) > Contract terms for the use of Farola by home care services. Version 1.0 · As of: 28 September 2026. Source: https://farolacare.com/en/agb · As of: 2026-10-26 _This translation is for convenience. Farola is offered under German law; the German version prevails._ [Read the German original](https://farolacare.com/agb) _Draft: details marked `[[…]]` are still missing._ ## 1. Scope The provider of Farola is 997 Ventures UG (haftungsbeschränkt), Sonnenhof 13, 67677 Enkenbach-Alsenborn, Germany, represented by Finn Lauppert von Peharnik (HRB 33133), e-mail: info@farolacare.com. > Draft for legal review. This is a version 1.0 template, not yet cleared by a lawyer. Individual details (billing method, liability cap) are still to be supplied by the provider; until then the draft notice remains. These general terms and conditions (AGB) govern the contract for the use of Farola between the provider and the care service. Farola is aimed exclusively at businesses; the care service concludes the contract as an entrepreneur (Section 14 BGB). No contract is concluded with consumers. For the use of the website, the dashboard and the “Farola Care” app by staff, the [terms of use](https://farolacare.com/en/nutzungsbedingungen) also apply. For the processing of personal data, the [data processing agreement (DPA)](https://farolacare.com/en/avv) applies. In the event of conflict, these terms and conditions take precedence over the terms of use; for data protection, the DPA takes precedence. ## 2. Conclusion of the contract The care service registers online. The contract is concluded in two steps: - The registration prepares the contract. It takes effect once the contact person opens the confirmation link in their e-mail and sets a password themselves; only then does the care service come into being. - The contract becomes binding with the acceptance in the product: the administration accepts these terms and conditions and the DPA and acknowledges the privacy policy, via three non-pre-ticked checkboxes. - Only a person with the Administrator role acts for the care service in doing so. Other roles (Dispatch, Read-only) see a notice, but not the acceptance dialog. - Farola logs every acceptance in an append-only manner (not overwriting) with name, e-mail, role, time and version, and sends the accepting person a confirmation by e-mail. ## 3. Services and remuneration Farola is add-on software for home care services. It runs alongside the existing care software and replaces neither billing nor certified care documentation under SGB XI. - Base use is free: 0 € a month, no base fee, no minimum purchase. - Only the use of the AI features is chargeable (such as transcription and analysis of conversations, the voice assistant, the phone AI). It is billed by consumption. - Prices are exclusive of statutory VAT. > [[Billing of AI usage still to be decided: the prices (price list), the billing method (such as prepayment or a subsequent invoice), the payment method and the due date are added here by the provider.]] ## 4. Daily AI budget and caps To protect against unintended costs and abuse, caps on AI usage apply per care service. - By default these are up to 30 AI calls per minute and a daily budget of 5 € per care service. - Once a limit is reached, the AI features pause until the next period; the rest of Farola remains usable. - The limits can be adjusted at the care service's request. ## 5. AI results and professional responsibility - Machine-generated content (summaries, analyses, proposed rounds, the assistant's answers) is a suggestion. It may be incomplete or wrong and is checked by a qualified person before use. - Nursing, medical and dispatch decisions (care, planning, documentation) are the sole responsibility of the care service. - Farola is not a medical device and not an emergency service. In an emergency, call **112**. ## 6. Availability We strive for high availability but do not owe any particular availability (no service level agreement). Where possible, we carry out maintenance outside the usual visit hours. Different commitments require a separate agreement. ## 7. Obligations of the care service - The care service is responsible for the lawfulness of the data it enters and of the processing. - It obtains the necessary consents, in particular for recording clients' conversations. - It ensures the employment-law basis for tracking; caregivers' location data is subject to co-determination (Section 87 BetrVG), and a works agreement can limit tracking. - It keeps the access data secret, names the persons authorised to instruct, and ends access for staff who have left. - It uses Farola only for its own work as a care service and not in an unlawful manner. ## 8. Data processing For all personal data we process on behalf of the care service, the [data processing agreement (DPA)](https://farolacare.com/en/avv) under Art. 28 GDPR applies. It is part of this contract. The care service remains the controller; we process only on its documented instructions. ## 9. Term, termination and data export - The contract runs for an indefinite period and has no minimum term. - Both sides may terminate at any time with ordinary notice. The right to extraordinary termination for good cause remains unaffected. - After the contract ends, the data processing agreement provides that we return or delete the personal data at the care service's choice (DPA Section 9). - [[Export and deletion at the end of the contract: procedure and deadline still to be decided.]] ## 10. Liability - We are liable without limitation for intent and gross negligence, for injury to life, body or health, and under the Product Liability Act. - For slight negligence, we are only liable for breach of an essential contractual obligation (cardinal obligation), limited to the typical, foreseeable damage. - Liability under the preceding point is limited in total per case of damage to [[liability cap still to be decided]]. - Otherwise, liability is excluded. Liability under Art. 82 GDPR and the DPA remains unaffected. ## 11. Changes to these terms - We may change these terms and conditions and the price list with effect for the future if there is an objective reason, such as new features, a change in the law or changed costs. - We inform the administration of material changes in advance, by e-mail and with a notice in the dashboard, and ask for renewed acceptance in the product. - If the care service objects to the change or does not accept it, either side may terminate as of when the change takes effect; until then the previous version continues to apply. ## 12. Apps from the App Store For apps you obtain via the Apple App Store, Apple's [Standard End User License Agreement (EULA)](https://www.apple.com/legal/internet-services/itunes/dev/stdeula/) also applies. The contracting party for the app is the provider, not Apple; Apple is not responsible for the app or its content. ## 13. Final provisions - German law applies, excluding the UN Convention on Contracts for the International Sale of Goods. - The place of jurisdiction for all disputes arising from this contract is the provider's registered office (Kaiserslautern), where the care service is a merchant, a legal entity under public law or a special fund under public law. - Amendments and additions require text form. - Should any provision be invalid, the validity of the remaining provisions is not affected. --- # Data processing agreement (DPA) > Under Art. 28 GDPR between your care service as controller and us as processor for the use of Farola. Version 1.1 · As of: 29 September 2026. Source: https://farolacare.com/en/avv · As of: 2026-10-26 _This translation is for convenience. Farola is offered under German law; the German version prevails._ [Read the German original](https://farolacare.com/avv) _Draft: details marked `[[…]]` are still missing._ ## Parties This data processing agreement (DPA) applies between the care service that uses Farola, as controller (Art. 4(7) GDPR), and 997 Ventures UG (haftungsbeschränkt), Sonnenhof 13, 67677 Enkenbach-Alsenborn, Germany (HRB 33133), represented by Finn Lauppert von Peharnik, as processor (Art. 4(8) GDPR). Contact: info@farolacare.com. It gives concrete form to the obligations under Art. 28 GDPR for all personal data we process within Farola on behalf of the care service. The care service remains the sole controller: it decides on the purposes and means of the processing; we process only on its documented instructions. > Draft for legal review. This is a version 1.1 template, not yet cleared by a lawyer. Acceptance takes place in the product (Section 13); until it is cleared by a lawyer the draft notice remains. ## Section 1 Subject matter and duration of the processing (1) The subject matter is the provision of Farola as software for home care services: dispatch and round planning, the live map, the caregiver app, functions for clients and relatives, the capture and analysis of conversations at the client's home, and the storage required for this. Farola runs alongside the existing care software and replaces neither billing nor certified care documentation. (2) The processing lasts as long as the care service uses Farola. It ends when the use ends; Section 9 (return and deletion) then applies. (3) We process personal data only within this DPA and the documented instructions of the controller. If we consider an instruction to infringe the law, we say so and may suspend its execution until the matter is resolved. ## Section 2 Nature and purpose of the processing The processing serves solely to provide Farola to the care service, in particular: - Planning and running rounds and visits (who drives when to whom, with which vehicle), including estimating travel times. - Showing caregivers and vehicles on the live map during a running round. - Providing the caregiver app (round, navigation to the client's home, status updates, voice notes). - Receiving requests from clients and relatives and assigning them to visits. - Recording, transcribing and structured analysis of conversations at the client's home and maintaining a context memory per client, in each case only with documented consent (Annex A). - Sending necessary notifications (such as arrival times) and system e-mails. AI and voice functions are governed separately in Annex A. The purposes are exhaustive; the data is not used for our own purposes, in particular not to train AI models. ## Section 3 Types of data and categories of data subjects (1) Data subjects are the care service's clients, their relatives and contact persons, the caregivers, and the users of the dashboard (management, dispatch). (2) Depending on the function, the following are processed in particular: - **Master data:** Names, addresses, contact details, access notes for the home, relationships (relatives). - **Health data (Art. 9 GDPR):** Care level, care and visit needs, observations, conversation content and its analysis, the context memory per client. - **Caregivers' location data:** Positions during a running round (employee data protection, Section 26 BDSG); vehicle positions between the start and end of a round. - **Conversation recordings:** Audio at the client's home, only after consent, and the transcript and analysis produced from it. - **Usage and sign-in data:** Phone number matching, device identifier, session tokens (only as a hash), roles, technical log data. (3) Health data is a special category of personal data (Art. 9 GDPR) and is handled with particular care. Strict data minimisation applies: each function processes only the data it needs. ## Section 4 Obligations of the processor - We process data only on the documented instructions of the controller (Art. 28(3)(a) GDPR), including for transfers to third countries (Section 11). - Persons obliged to confidentiality: everyone dealing with the data is obliged to confidentiality (Art. 28(3)(b), Art. 29, Art. 32(4) GDPR) and bound by professional secrecy (Section 5). - We take the technical and organisational measures under Art. 32 GDPR (Section 6). - We support the controller in responding to requests from data subjects (Art. 12 to 23 GDPR) with appropriate technical and organisational measures. - We support the controller in its obligations under Art. 32 to 36 GDPR (security, breach notification, data protection impact assessment, prior consultation). - We report any personal data breach to the controller without undue delay after becoming aware of it, with the information needed for notification under Art. 33 GDPR. - We engage sub-processors only in accordance with Section 10. - After the end of the processing, we return or delete the data at the controller's choice (Section 9). - We make available to the controller the information needed to demonstrate compliance and allow reviews (Section 8). ## Section 5 Professional secrecy (Section 203 German Criminal Code) (1) The controller's caregivers, as members of a health profession with state-regulated training, are bound by the duty of confidentiality under Section 203(1) of the German Criminal Code (StGB). The data processed within Farola constitutes other people's secrets within the meaning of that provision. (2) We and our staff are other participating persons within the meaning of Section 203(3) StGB. We expressly oblige everyone who is given access to this data to secrecy (Section 203(4) StGB) and inform them that unauthorised disclosure is a criminal offence. This obligation continues after the activity ends. (3) If we engage further participating persons (sub-processors, Section 10), we oblige them to secrecy in the same way. The controller may disclose the secrets to us to the extent necessary for the use of Farola (Section 203(3) sentence 2 StGB). ## Section 6 Technical and organisational measures We take measures appropriate to the state of the art under Art. 32 GDPR, giving special regard to the protection of special categories (Art. 9 GDPR). The processing takes place in the European Union. - **Access control (systems):** Access to systems only after authentication; session tokens are stored only as a hash; app sessions are bound to a device and can be revoked individually. - **Access control (data):** Roles in the dashboard (Admin, Dispatch, Read-only); caregivers see only their own round; every access is checked on the server. - **Separation control:** One care service is one tenant; database policies (row level security) and tenant-bound keys keep the tenants' data apart. - **Transfer control:** Transport encryption (TLS); encryption of data at rest at the infrastructure providers; audio in private storage with short-lived, signed access links. - **Input control:** Servers set the authoritative timestamps; changes to care entries are logged (who, what, when). - **Availability control:** Managed, backed-up database in the EU; regular backups; a round that has been loaded stays visible in the app even without a network. - **Data minimisation:** Each interface returns only the fields needed for the purpose; location only during a round; recordings only with consent. - **Protection of special data:** No health data, names, addresses or transcript excerpts in error logs, file names or address lines; file and record names use technical identifiers (UUID). - **Error monitoring:** Before anything is sent to error monitoring, secrets, tokens and transcripts are removed; personal data does not reach the logs. On AI calls: pseudonymising the names is not required; here, processing exclusively on EU infrastructure provides the safeguard (Annex A). We keep the measures up to date; the level of security in force at any time must not be undercut. ## Section 7 Rights and obligations of the controller - The controller is responsible for the lawfulness of the processing and for fulfilling data subjects' rights. - It obtains the necessary consents, in particular for recording clients' conversations, and ensures the employment-law basis for tracking (caregivers' location data is subject to co-determination, Section 87 BetrVG; Farola is built so that a works agreement can clearly limit tracking). - It issues instructions in principle in text form or via Farola's settings and names the persons authorised to instruct. - It informs us without undue delay if it detects errors or irregularities in the processing. ## Section 8 Reviews and evidence (1) We demonstrate compliance with this DPA, as a rule by information, current descriptions of the measures under Section 6, and available certificates or audit reports, including those of the sub-processors. (2) If this evidence is not sufficient, we allow reviews by the controller or an auditor it appoints who is bound to confidentiality. Reviews take place after notice, during normal business hours, without disrupting operations and, where practical, remotely. On-site reviews are possible to the extent necessary. (3) Without particular cause, reviews are limited to once per calendar year. Where there is concrete cause, for example after a data breach, they are possible at any time. (4) Support within the scope owed by law and one review per calendar year are free of charge for the controller. Effort beyond this for reviews and support is remunerated by time at market rates. ## Section 9 Return and deletion (1) Statutory retention obligations for the data processed on the controller's behalf, in particular for care documentation under SGB V and SGB XI and under tax and commercial law, lie with the controller alone. Farola is not the controller's legally required care documentation system; it runs alongside the controller's care software and does not replace it (GTC Section 3). The processor has no statutory retention obligation of its own within the meaning of Art. 28(3)(g) GDPR. (2) After the end of the use, we return or delete all personal data at the controller's choice, including any copies, unless a statutory retention obligation of the controller prevents this. A return is made on request in a common, machine-readable format over a secure transfer channel. [[A self-service export by the controller is not yet set up; we will add the delivery procedure here.]] (3) We delete the personal data [[X]] days after the end, or, if earlier, [[…]] days after an export confirmed by the controller. Copies in backups are overwritten by rotation at the latest [[…]] after the end and, until then, are used only to restore on instruction. On completion we confirm the deletion on request in text form (time and scope). (4) Farola already deletes certain data automatically during the term: conversation recordings once the agreed period has passed (30 days by default, Annex A), location data after seven days. Entries the controller has taken into its own care documentation are subject to its instructions and the statutory periods. (5) The controller is responsible for keeping the exported records itself for the duration of its statutory retention periods. ## Section 10 Sub-processors (1) The controller gives general authorisation for the use of the providers listed in [Annex 1: sub-processors](https://farolacare.com/en/unterauftragsverarbeiter). Annex 1 is part of this DPA. (2) Before adding or replacing a sub-processor, we inform the controller and obtain its consent. Consent is given in the product by the administration, by accepting the new DPA version (Section 13). Until consent is given, the new or replaced provider is technically locked; no personal data flows to it, and only the already authorised sub-processors remain in use. The rest of Farola remains usable during this time. Providers marked as planned in Annex 1 become active only after this consent. (3) We conclude a contract with every sub-processor that imposes at least the same data protection obligations on it as this DPA imposes on us (Art. 28(4) GDPR), including the obligation to professional secrecy (Section 5). (4) Ancillary services such as pure telecommunications, post or maintenance are not sub-processing, provided there is no access to the controller's personal data. ## Section 11 International data transfers (1) The processing takes place in the European Union. The database, the files and the AI functions (Vertex AI) are in the EU. (2) If we use a provider whose parent company is in a third country (for example in the USA), any transfer relies on an adequacy decision, failing that on the EU-US Data Privacy Framework for certified providers or on the European Commission's Standard Contractual Clauses together with additional safeguards. The relevant basis per provider is named in [Annex 1](https://farolacare.com/en/unterauftragsverarbeiter). (3) If a provider's transfer basis changes, we notify this without undue delay, at the latest within 30 days of becoming aware. ## Section 12 Liability Liability is governed by the statutory provisions, in particular Art. 82 GDPR. We are liable for the fault of our staff and of the sub-processors we engage as for our own fault. Internally, liability is apportioned in accordance with Art. 82(5) GDPR. ## Section 13 Conclusion and changes (1) This DPA is concluded in the product. On registration or first sign-in, the controller's administration accepts this DPA and the terms and conditions and acknowledges the privacy policy, via three non-pre-ticked checkboxes. Only a person with the Administrator role can accept; other roles see a notice, but not the acceptance dialog. The version in force is published on this page and provided to the controller as a file on request. (2) Every acceptance is logged in an append-only and immutable manner (no overwriting, no deletion) with the name, e-mail and role of the accepting person, the time, the accepted version and the previously valid version. The accepting person receives a confirmation of this by e-mail. The controller can view the log of its acceptances in the settings. (3) For material changes to this DPA or its annexes, in particular new types of data, new sub-processors or new processing locations, we inform the controller's administration by e-mail on the day of the announcement, with a reminder after 14 days, and show a notice in the dashboard. The changed processing stays technically locked until the administration accepts the new version in the product; until then only the already authorised processing remains active, and the rest of Farola remains usable. (4) Not a material change but a clarification of the description are wordings that describe an already agreed processing more precisely (such as naming concrete fields, storage locations or steps that are already the subject of this DPA), and the correction of typographical errors and references. A clarification changes neither the subject matter, the purpose, the types of data or the categories of data subjects, nor the sub-processors, the processing locations, the protection level of the technical and organisational measures, or the rights and obligations of the parties. Every clarification is documented with a date and is available on this page; it needs no renewed acceptance. Every other change is material and is accepted under paragraph 3. ## Section 14 Final provisions - German law applies. - In the event of conflict between this DPA and other agreements of the parties, the provisions of this DPA prevail for data protection. - Should any provision be invalid, the validity of the remaining provisions is not affected. - Amendments and additions require text form. ## Annex 1: sub-processors The current list of sub-processors with purpose, types of data, location, transfer basis and DPA status is available at [sub-processors](https://farolacare.com/en/unterauftragsverarbeiter). It is part of this DPA. ## Annex A: AI and voice functions (1) Farola uses AI exclusively via Vertex AI in the EU region: transcription of conversations, structured text analysis and the assistant. No API keys are used (authentication via ADC or Workload Identity Federation). - Real names may appear in AI calls; processing exclusively on EU infrastructure provides the safeguard, and pseudonymisation is not required. - No training and no further use of the data at the provider. - Conversation recordings only after documented, revocable consent (client and caregiver), checked in the app and on the server. Without consent there is no recording. - Audio is deleted automatically once the period expires (30 days by default) after transcription and analysis; a withdrawal deletes audio and transcript. - Analyses are suggestions and are approved by a person before they are adopted; the context memory is maintained, not the audio. - Dictation and assistant queries are not stored: one call to the EU model, then discarded. (2) Addresses are geocoded server-side via Google Places; only the typed address snippet with a session token is transmitted, no name and no identifier. Farola calculates travel times from the distance; if routing is enabled, only rounded coordinates go to the routing service, no names, addresses or identifiers. (3) When the caregiver taps “Navigation starten” in the caregiver app, the app opens Google Maps on their device (as an app or via a web link). Only the visit's destination (coordinate or address) is handed over, never a name, no identifier and nothing from the record. Google is then its own controller; this is not processing by us. (4) A phone AI (incoming and outgoing calls) is prepared but not yet active. It will only be put into operation after the controller consents to the sub-processors concerned (Annex 1) and, where necessary, after the parties to the call consent. ## Annex 3: Church and public carriers This annex applies in addition if the controller is a church or public carrier. The controller selects its carrier type in the settings; the following provisions and the functions available to it then apply accordingly. (1) Catholic carriers (KDG): if the controller is a body within the scope of the Act on Church Data Protection (KDG), the obligations of this DPA also apply as obligations under Section 29 KDG; references to the GDPR are to be read as references to the corresponding provisions of the KDG. We inform the controller without undue delay if, in our view, an instruction infringes the KDG, and we support it towards the church data protection supervision responsible for it with the information and evidence under Section 8. (2) Protestant carriers (DSG-EKD): if the controller is a body within the scope of the Church Act on Data Protection of the EKD (DSG-EKD), the obligations of this DPA also apply as obligations under Section 30 DSG-EKD; references to the GDPR are to be read as references to the DSG-EKD. We oblige the persons involved in the processing to data secrecy and support the controller towards the competent church data protection supervision. (3) Public carriers (social data): if the controller is a body named in Section 35 SGB I, we process social data within the meaning of Section 67(2) SGB X. We uphold the social secret (Section 35 SGB I) and oblige the staff involved in the processing to the social secret before they take up their work; the obligation continues after the activity ends. Under Section 80(2) SGB X, social data may be processed only in the European Union, the European Economic Area or a state with an adequacy decision under Art. 45 GDPR; the Standard Contractual Clauses alone may be regarded as insufficient for this. The notification under Section 80(1) SGB X lies with the controller; we provide the necessary information for it (measures under Section 6, types of data, categories of data subjects, sub-processors) on request and notify changes to sub-processors early enough for a fresh notification to be possible before they take effect. The processor's supervisory authority is the authority competent under Section 40 BDSG (Section 80(4) sentence 3 SGB X). (4) US nexus: Farola runs on EU infrastructure; the database, file storage and the AI functions (Vertex AI) process in the EU. Several of these services (Supabase, Vercel, Google Cloud with Vertex AI and Google Places, and Resend) process in the EU but have a US parent company; the transfer basis is the Standard Contractual Clauses (Annex 1). Under Section 80(2) SGB X the Standard Contractual Clauses alone may be regarded as insufficient. For public carriers, Farola currently locks only the telephony and monitoring services marked as planned in Annex 1; the other, EU-hosted services with a US parent remain active. > [[Lawyer review: admissibility of the EU-hosted services with a US parent for public carriers under Section 80(2) SGB X; procedure if needed]] > [[Open for legal review: does acceptance via the checkbox in the product (Section 13) satisfy the written-form requirement of Section 29 KDG or the text-form requirement of Section 30 DSG-EKD, or is a separate written agreement required for church carriers?]] --- # Sub-processors > Annex 1 to the data processing agreement. We use these providers to run Farola. Version 1.1 · As of: 29 September 2026. Source: https://farolacare.com/en/unterauftragsverarbeiter · As of: 2026-10-26 _This translation is for convenience. Farola is offered under German law; the German version prevails._ [Read the German original](https://farolacare.com/unterauftragsverarbeiter) _Draft: details marked `[[…]]` are still missing._ ## Current list This list is Annex 1 to the [data processing agreement (DPA)](https://farolacare.com/en/avv) and part of it. | Provider | Purpose | Data | Location | Transfer basis | DPA status | | --- | --- | --- | --- | --- | --- | | Supabase | Database, sign-in, file storage, realtime | All master, visit and health data (Art. 9), sign-in data | EU (Frankfurt) | SCCs (Implementing Decision 2021/914) | to be concluded | | Vercel | Hosting and delivery of the dashboard | Processes requests including health data transiently; no health data in logs | EU region; static content via a global CDN | SCCs (Vercel Inc., USA) | in place | | Google Cloud, Vertex AI | AI: transcription and text analysis, assistant | Transcripts, context, real names (Art. 9) | EU multi-region | SCCs (Google Cloud DPA) | in place, to be confirmed | | Google Places | Geocoding of addresses | Only the typed address snippet and a session token, no names or identifiers | EU | SCCs (Google Cloud DPA) | in place, to be confirmed | | Resend | Sending e-mails | E-mail address and message content | EU (Ireland) | SCCs (US parent) | to be concluded | | HeiGIT gGmbH, openrouteservice | Routing and travel time | Only rounded coordinates, no names, addresses or identifiers | Germany (Heidelberg) | EU, no third country | to be concluded (before the first real client) | | Telnyx (planned) | Telephony and VoIP | Phone numbers, call audio, connection data | EU region, to be confirmed | SCCs (US parent) | planned, active only after confirmation | | LiveKit (planned) | Real-time voice connection for the phone AI | Call audio, connection data | EU (Frankfurt, eu-central) | SCCs (US parent) | planned, active only after confirmation | | Sentry (planned) | Error monitoring | Technical error data; personal data is removed before sending | EU (Frankfurt) | SCCs (US parent) | planned, active only after confirmation | | Nominatim, OpenStreetMap | Geocoding of the care service's own address only | Only the care service's business address, no client or staff data | EU and United Kingdom (OSMF) | Adequacy decision (United Kingdom) | no DPA required | ## What the DPA status means - **in place:** A data processing agreement with the provider is in place. - **to be concluded:** The provider is in use or intended for use; the data processing agreement is still to be concluded. Until then, no real client data is given to it, where this has not already happened. - **to be confirmed:** A contract or location is in place but still to be finally checked (such as the exact region or the DPF certification). - **planned, active only after confirmation:** The provider is prepared but not yet in use. It becomes active only after you have consented to it. - **no DPA required:** The provider processes no personal data of clients or staff, only the care service's business address. ## Changes and consent This list is Annex 1 to the DPA in version 1.1. Before we use a new sub-processor or replace an existing one, we inform the administration by e-mail (on the day of the announcement and with a reminder after 14 days) and show a notice in the dashboard. The new provider stays technically locked until the administration accepts the new DPA version in the product: until then no personal data flows to it, only the already authorised providers remain in use, and the rest of Farola remains usable (DPA Sections 10, 13). The maps provider that the caregiver app opens for navigation is not a sub-processor: when the caregiver taps, the app hands over only the destination (coordinate or address text), and the maps provider is then its own controller (DPA Annex A).