Privacy Policy

1. Controller

The controller for data processing on this website is:

2. Collection and storage of personal data

When you visit our website, information of a general nature is automatically recorded. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar data.

It is processed in particular for the following purposes: ensuring a smooth connection to the website, ensuring smooth use of our website, evaluating system security and stability, and for further administrative purposes.

3. Your rights

You have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)

4. Orders / customer account

When you place an order, we collect the following data: salutation, first and last name, delivery address, email address, telephone number, and where applicable billing address and payment information. This data is required to perform the contract (Art. 6(1)(b) GDPR).

5. Cookies

Our website uses cookies. These are small text files that are stored on your device. Some cookies are technically necessary (e.g. the shopping cart); others are used to analyse user behaviour. You can configure your browser so that you are informed when cookies are set.

6. Payment service providers

We use external payment service providers (PayPal, Stripe/Shopify Payments, Amazon Pay) through whose platforms our users can make their payments. The data is transmitted in encrypted form. You can find the privacy policies of the respective providers on their websites.

7. Hosting & data processors

The front end of this website is hosted by Vercel Inc. (USA). When the pages are accessed, server log files (see section 2) are processed. The transfer to the USA is safeguarded by the EU Standard Contractual Clauses.

To operate our shop we use the following service providers. Where they process personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR:

• Shopify International Ltd. (Ireland) – shop system, shopping cart, order processing and checkout.
• 1&1 IONOS SE (Germany) – sending and receiving emails, e.g. receipt and order confirmations as well as contact enquiries.
• Supabase (hosted in the EU/Frankfurt) – storage of form submissions (contact, measurement-sheet and withdrawal enquiries).
• n8n – processing of the enquiries from our advisory chatbot.
• Telegram – internal instant notification of new enquiries (your data is not published).

The legal basis for the processing is Art. 6(1)(b) GDPR (performance of the contract) and Art. 6(1)(f) GDPR (legitimate interest in secure, functional operation).

8. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or in order to implement changes to our services. The new privacy policy will then apply to your next visit.