GDPR-compliant, white-label appointment booking system: EU/Hetzner-hosted on your own domain
A booking system that looks like your brand, not ours. It runs at booking.yourdomain.com, hosted with Hetzner in Germany, with AES-256-encrypted contact data and documented consent. No marketplace, no third-party logos, no commission per booking.
What your appointment data stands on
Operated in Hetzner's German data centres, under EU data protection law, with no US CLOUD Act access and no data transfer to third countries by default.
You get your own, separated instance. No shared data pool with other businesses, no mixing of customer data.
Phone number, email, date of birth and notes sit in the database encrypted with AES-256, not in plain text.
Messages only go to contacts with recorded consent under GDPR Art. 6, revocable at any time and logged transparently.
A data processing agreement (Art. 28 GDPR), a record of processing activities and a deletion concept are part of the setup, not an afterthought.
The booking flow, confirmation emails and reminders carry your logo, your colours and your sender. TerminJet stays invisible.
A white-label booking system with EU hosting under your own domain
Your customers book at booking.yourdomain.com and never notice that the software behind it is not yours. No TerminJet branding, no redirect to a portal, no foreign URL in the address bar. The data stays in your instance in Germany.
Data protection guards against penalties. The engine brings revenue back.
Many GDPR tools stop at the booking. TerminJet keeps going afterwards: if someone cancels or fails to show, the engine spots the open slot and offers it to the right person from your waitlist, by WhatsApp or SMS, and only to contacts with documented consent.
Compliance you do not feel in operation
Server location Germany
All data sits with Hetzner in German data centres. No third-country transfer, no Schrems II problem, a clearly documented location.
Consent captured cleanly
The booking flow obtains consent for reminders and slot offers in a legally sound way and logs it transparently.
Encryption at rest
Sensitive contact data is stored encrypted with AES-256. Anyone who sees the database sees no plain-text patient data.
Deletion concept built in
Retention periods and deletion rules are configurable. The right to be forgotten can be implemented, not just promised.
Tenant separation
Your instance is separated from other businesses. No cross-tenant risks, no shared data store.
Audit log
Every change to appointments, contacts and offers is logged: who, what, when. Traceability is part of the system.
White-label instance vs. brandable SaaS tool
Tools like Zeeg, Meetergo or cituro can be adjusted in colour and are GDPR-aware. The difference lies in who owns the instance and the data, and in what happens after the booking.
| TerminJet · Your instance | Brandable SaaS tool | |
|---|---|---|
| Booking on your own domain | booking.yourdomain.com | Provider's subdomain |
| Hosting location | Germany (Hetzner) | EU, partly third countries |
| Own, isolated instance | ||
| Sensitive data AES-256 at rest | opaque | |
| Automatic slot refilling | ||
| Waitlist via WhatsApp/SMS | rare / add-on | |
| Done-for-you setup per industry | ||
| Data export when switching | complete | limited |
GDPR compliance should be a given. Whether your customers see your brand or that of a foreign portal decides who owns the relationship.
Common questions about data protection and white-label
Where is the data hosted?
Exclusively with Hetzner in German data centres. The default is no transfer to third countries, which removes the Schrems II issue. Sensitive contact data sits in the database encrypted with AES-256.
Do my customers see that TerminJet is behind it?
No. The booking runs under your own domain such as booking.yourdomain.com, with your logo, your colours and your sender address. TerminJet does not appear in the URL, in the design or in the emails.
Do I get a data processing agreement?
Yes. The data processing agreement under Art. 28 GDPR is part of the setup. On request we also support you with the record of processing activities and the deletion concept for your instance.
How is this different from Zeeg, Meetergo or cituro?
These tools are GDPR-aware and adjustable in colour, but run as shared SaaS on the provider's subdomain. With TerminJet you get your own instance under your domain, with automatic slot refilling via the waitlist and setup by our agency.
Are reminders and slot offers sent in a GDPR-compliant way?
Messages only go to contacts with documented consent under Art. 6 GDPR. Every consent is logged and revocable at any time. Without consent, no one receives a WhatsApp or SMS.
What happens to my data if I want to switch?
It is your data in your instance. You get a complete export at any time, with no locks or extra costs. There is no portal holding on to your customer relationship.
See the white-label booking system on an industry template
Sign up. We show you the booking flow under a sample domain, with GDPR setup and automatic refilling, and in the free audit we work out how many slots you could realistically win back.