Privacy Policy

1. Controller

SamSop GmbH

Rangierbahnhof-Ausfahrbhf. 3

90469 Nürnberg, Germany

Email: hello@synapto-konzept.de

Managing director: Vadim Ozeransky

2. Principles of data processing

We only process personal data to the extent necessary to provide our website and our services, or where required by law. Personal data is deleted as soon as the purpose of processing no longer applies and no statutory retention obligations prevent deletion.

3. Hosting – Vercel

This website is hosted by Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA.

When you access this website, Vercel processes technical connection data in server log files:

• IP address
• Date and time of access
• URL accessed
• HTTP status code
• Browser and operating system

Processing takes place in Vercel's data centres. An adequate level of data protection is ensured through appropriate safeguards. Legal basis: Art. 6(1)(f) GDPR.

Transfers to the USA take place on the basis of the EU-US Data Privacy Framework (DPF). Further information: https://vercel.com/legal/privacy-policy

4. Order process and purchase contract

When you place an order through our online shop, we collect the following data to fulfil the contract:

• First and last name
• Delivery address
• Email address
• Order details and order value

Legal basis: Art. 6(1)(b) GDPR.

Retention period: Order data is stored for 10 years in accordance with statutory retention obligations (§ 257 HGB, § 147 AO – German Commercial Code and Fiscal Code).

5. Payment processing – Stripe

For payment processing, we use the service of Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

When you place an order, the following data is transmitted to Stripe:

• Name and billing address
• Email address
• Payment data (processed in encrypted form)
• Order amount and currency

Stripe may also process data as an independent controller, in particular for fraud prevention purposes. Legal basis: Art. 6(1)(b) GDPR.

Stripe may transfer data to the USA. The transfer takes place on the basis of standard contractual clauses of the EU Commission pursuant to Art. 46 GDPR. Stripe's privacy policy: https://stripe.com/de/privacy

Payment processing takes place via an external page provided by Stripe.

6. Shipping – DHL

To deliver your order, we pass on your name and delivery address to Deutsche Post AG / DHL Paket GmbH. This data is shared solely for the purpose of carrying out the delivery. Legal basis: Art. 6(1)(b) GDPR.

DHL's privacy policy: https://www.dhl.de/datenschutz

7. Email communication

If you contact us by email, the data you provide will be stored for the purpose of processing your enquiry. Legal basis: Art. 6(1)(f) GDPR. The data will be deleted once your enquiry has been fully processed, unless retention obligations apply.

8. Processing of customer and newsletter data – Supabase

To process orders and manage newsletter and email subscriptions, we process personal data such as name, email address, delivery address and order information.

As part of the double opt-in process, we also store the time of registration and IP addresses to document the consent given.

For technical storage and processing, we use the Supabase service, hosted within the European Union (West EU, Ireland). Supabase is contractually bound as a data processor pursuant to Art. 28 GDPR.

Processing takes place on the basis of Art. 6(1)(a), (b) and (f) GDPR.

Further information: https://supabase.com/privacy

9. Fonts – Google Fonts

This website uses Google Fonts, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the page is loaded, your browser establishes a connection to Google's servers, transmitting your IP address.

Google Fonts is only loaded after you have given consent via our cookie banner (Cookiebot). Legal basis: Art. 6(1)(a) GDPR.

Google's privacy policy: https://policies.google.com/privacy

9. Web analytics – Google Analytics & Google Tag Manager

This website uses Google Analytics 4 and Google Tag Manager, services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics collects, among other things, the following data:

• Truncated IP address
• Pages visited and time spent
• Device and browser information
• Source of the website visit (referrer)

Processing takes place only after your consent via our cookie banner (Cookiebot). IP anonymisation is enabled. Legal basis: Art. 6(1)(a) GDPR in conjunction with § 25 TTDSG (German Telecommunications-Telemedia Data Protection Act).

Google may transfer this data to the USA. The transfer takes place on the basis of the EU-US Data Privacy Framework (DPF). Google's privacy policy: https://policies.google.com/privacy

You can object to data processing by Google Analytics by withdrawing your consent in the cookie banner or by installing the browser add-on for disabling Google Analytics: https://tools.google.com/dlpage/gaoptout

10. Cookies and consent management – Cookiebot

This website uses Cookiebot, a service provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, to manage cookie consent.

Cookiebot stores your consent decision in a cookie so that it does not need to be requested again on subsequent visits. Legal basis for setting this cookie: Art. 6(1)(c) GDPR in conjunction with § 25(2) TTDSG.

Cookiebot's privacy policy: https://www.cookiebot.com/de/privacy-policy/

11. Data security

Our website uses SSL encryption (HTTPS) to ensure the secure transmission of your data.

12. Your rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

You also have the right to withdraw any consent given at any time, with effect for the future.

To exercise your rights, please contact: hello@synapto-konzept.de

13. Right to lodge a complaint

You have the right to lodge a complaint with the competent data protection supervisory authority:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de