Note: This is a draft. Please have it reviewed by a lawyer before publication. Add/remove currently used services and recipients as appropriate.

1. Controller

The controller for data processing on this website is:
OpenVuture – Adrian Fredl, Altenmaiser Straße 6a, 94244 Teisnach, Germany, email: hello@openvuture.com.

2. General information on data processing

We process personal data only insofar as this is necessary to provide a functional website as well as our content and services, or where you have consented. The legal bases are in particular Art. 6(1)(a) (consent), (b) (contract), (c) (legal obligation) and (f) (legitimate interest) GDPR.

3. Hosting and server log files

When our website is accessed, the server automatically stores information in server log files (e.g. IP address, date and time, page accessed, amount of data transferred, browser type). This processing serves to ensure trouble-free operation and security (Art. 6(1)(f) GDPR). The website is hosted on a server operated or commissioned by us.

4. Cookies and consent management

Our website uses cookies and comparable technologies. Technically necessary cookies are set on the basis of Art. 6(1)(f) GDPR or § 25(2) TTDSG. Non-essential cookies are used only with your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG), which you give via our consent banner (Complianz) and can revoke at any time. Details on the cookies used can be found in our Cookie Policy.

5. Customer account and order processing (WooCommerce)

To process orders, we process the data you provide (e.g. name, address, email, order and payment data). Processing is carried out to perform the contract (Art. 6(1)(b) GDPR) and to fulfil retention obligations under tax and commercial law (Art. 6(1)(c) GDPR). Optionally, you can create a customer account; you can view the data stored there at any time and have it deleted.

6. Payment service providers

To process payments, we pass on the required data to the respective selected payment service provider (Art. 6(1)(b) GDPR). Depending on the chosen payment method, these may be: PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A.), Klarna (Klarna Bank AB), Stripe (Stripe Payments Europe, Ltd.) as well as other providers shown during the order process (including Apple Pay, Google Pay, Sofort). The data protection notices of the respective provider apply additionally.

7. Shipping

To deliver your order, we pass on your shipping data to the commissioned shipping or logistics company insofar as this is necessary for delivery (Art. 6(1)(b) GDPR).

8. Contact and enquiry forms

If you contact us by email or via a form (WPForms), we process your details to handle the enquiry (Art. 6(1)(b) or (f) GDPR). The data is deleted as soon as it is no longer required for the purpose and no statutory retention obligations prevent this.

9. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in the address bar of your browser.

10. Storage period

We process and store personal data only for as long as is necessary for the respective purpose or as provided for by statutory retention periods (in particular under commercial and tax law). The data is deleted thereafter.

11. Your rights

You have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21). You can revoke consent given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. A message to the contact details above is sufficient to exercise your rights.

12. Changes to this privacy policy

We adapt this privacy policy as soon as changes to data processing or the legal situation make this necessary. The version currently published on this page applies.