Data Privacy

1 - Data we collect

When visiting our website, with or without an account, we collect typical data that is provided by your browser:

The web address of pages you opened
The source that led you to the page
Browser used
Operating system used
Amount of data transferred
Date and time of the access
Timezone and locale of your browser

In compliance with GDPR, we use this information solely for improving our services and do never pass on this data to third parties.

Timezone and locale of your browser are used to determine the websites display language and to convert date and time information to your local time, as well as properly displaying dates and other information to the standard format in your locale.

We reserve the right to retain and inspect server logs, should suspicion for misuse of our services arise.

Any data send between you and our services is encrypted via TLS/SSL.

2 - Contact requests

When contacting our support, through contact forms or email, we store your contact information for the purpose of handling your request, based on your and our interest to resolve the requests. Your contact data is deleted after the requests were handled, unless we are to keep the data by law.

3 - Data collection for fulfilling orders and subscriptions

If required for the fulfillment of your order, data may be passed on to third party services, like payment providers.

Should the need to inform you about changes in your order or the fulfillment status arise, we reserve the right to use your contact data to inform you about these changes.

We work with the following service providers to fulfill orders and payments:

Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Irland (“Stripe”)

Stripe provides multiple payment methods. When selecting a payment method, personal data may be sent to the payment method service, which may including your name, address, account data, currency, payment amound and information on the ordered items. Only data required for processing the payment is transferred.

4 - Web analytics

We use “Plausible” analytics from Plausible Insights OÜ Västriku tn 2, 50403, Tartu, Estland.

Plausible is a GDPR compliant, privacy friendly, cookie-free tool that stores anonymous records of how users interact with the website. No personal data is stored.

We use the gathered information to improve our services.

5 - Page functionality

Federated sign-in

We provide federated sign-ins, meaning logins with accounts of third party services.

When choosing to sign-in using an external account you agree to the following:

Data is transferred to the external service where your account is registered. This may include sending data to servers outside of the EU/GDPR area.
The service providing the account will know about you using our website and may store your IP address and the source page.
You agree that upon registration, the external sign-in shares your personal data with us, including email, address, name and your user id

When logging in through an external service, a full account is created and pre-filled with data provided by the external service. After this step, you may continue to login through the external service or choose to reset your password on our website and then sign-in directly, without use of the external service.

Google Sign-in

We provide a Single Sign on for accounts registered at Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland.

As part of the login process, data may be transferred to Google LLC, USA.

Google has joined the EU-US Data Privacy Framework, which requires data to be processed by european data privacy standards.

Maps

We use services of MapBox Inc., 740 15th St Nw Suite 500 Washington, DC 20005, USA.

Their services are used to provide interactive maps and to resolve addresses entered by users to GPS coordinates (geocoding).

When opening any page including a map, a placeholder will be shown in place of the map, until MapBox’s cookies are accepted. To show interactive Maps, requests toMapBox are made, which include data like your IP address and knowledge about you using our website.

When resolving addresses, the requests are made from our servers and not from the end users device, to keep the data shared with MapBox to a minimum. As a result, address resolution will still work even if no MapBox cookies are accepted.

Data is transferred to servers outside of the EU. More information can be found at https://www.mapbox.com/legal/privacy#product-privacy-policy.