Privacy Policy

1. Data Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. General Information on Data Processing

We only process personal data insofar as this is necessary for a functional website and our content and services. The processing of personal data is carried out exclusively on the basis of legal provisions, in particular the GDPR and the BDSG (German Federal Data Protection Act).

3. Server Log Files

When you visit our website, the hosting provider automatically stores information in server log files:

• IP address of the requesting device
• Date and time of access
• Name and URL of the accessed file
• Amount of data transferred
• Notification of whether the access was successful
• Identification data of the browser and operating system used
• Referrer-URL

This data is collected to ensure the smooth operation of the website and to improve our services. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). The data is deleted after 30 days at the latest.

4. Hosting

Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner is ISO 27001 certified. Processing takes place exclusively on servers in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place.

More information: hetzner.com/de/rechtliches/datenschutz

5. Contact Form (Early Access)

When you contact us via our Early Access form, the data you provide (name, email address, shop URL, platform, message) is stored for the purpose of processing your request and for any follow-up questions.

6. Email Delivery

For sending form requests to our email address, we use Mailjet, a service of Mailgun Technologies, Inc. (a company of the Sinch Group). A data processing agreement pursuant to Art. 28 GDPR is in place.

The current DPA is available at: sinch.com/legal/.../data-processing-agreement

Mailjet/Sinch is ISO 27001 certified and processes data in the EU (France) with infrastructure extensions in the global Sinch Group. For third-country transfers within the Sinch Group, EU Standard Contractual Clauses (SCC) pursuant to Implementing Decision (EU) 2021/914 and the EU-US Data Privacy Framework are in place.

7. Web Analytics

Important: Our website does not use cookies. We use the cookieless open-source tool Plausible for anonymous audience measurement.

We use Plausible Analytics for anonymous analysis of website usage. Plausible is operated by Plausible Insights OÜ and hosts all data in the EU (on Hetzner servers in Germany). Data points collected: page view, referrer, browser, operating system, device type and country (derived from IP address).

To distinguish visitors, a daily rotating hash value is generated from IP address, user agent and a salt. This hash cannot be reverse-engineered and is discarded at the end of each day. No personal data is stored in this process.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in anonymous audience measurement). More information: plausible.io/data-policy

8. Rights of Data Subjects

You have the following rights:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent (Art. 7(3) GDPR)

To exercise your rights, contact: privacy@plassio.ai

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The authority responsible for us is:

10. Changes to this Privacy Policy

We reserve the right to update this privacy policy to ensure it always meets current legal requirements. The current version is always available on our website.