PRIVACY

Privacy policy

1. Controller

Dominic Artschwager
c/o Online-Impressum #9473
Europaring 90
53757 Sankt Augustin
Germany
Email: webadmin@made2drive.com

2. General information

This policy explains how personal data is processed when you visit the made2drive website, contact its operator or choose to open the external Spreadshop. Personal data is any information relating to an identified or identifiable person.

We process personal data only where this is necessary to operate the website, respond to enquiries, protect the website against misuse or provide access to the shop. The applicable legal basis depends on the purpose and may include Article 6(1)(b), (c) or (f) GDPR. Where processing relies on consent, the legal basis is Article 6(1)(a) GDPR.

3. Hosting and server logs

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO provides the hosting infrastructure and processes technically necessary data on our behalf. Further information is available in the STRATO privacy information ↗.

When you access the website, the hosting system may automatically process technical connection data such as your IP address, date and time of access, requested page or file, referrer URL, browser type, operating system and HTTP status. This processing is necessary to deliver the website, maintain technical security and investigate misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are reliable operation, security and error analysis.

Server log data is retained for 7 days and is then deleted or anonymised unless an incident requires longer storage or a legal retention obligation applies. An appropriate data-processing agreement with STRATO under Article 28 GDPR must be in place for production hosting.

4. Local website files and storage

The made2drive landing page serves its fonts, stylesheets, scripts and preview images locally. It does not currently use analytics, advertising networks, social-media pixels, contact forms or newsletter tools.

The landing page itself does not set cookies and does not use local storage or session storage. If the technical setup changes, this policy and any required consent mechanism must be updated before the new service is activated.

5. Spreadshop links and embedded shop

Product links and shop buttons may take you to the externally operated made2drive Spreadshop at made2drive.myspreadshop.de. No shop iframe is loaded when the landing page first opens.

The embedded shop is activated only after you deliberately select “Load Spreadshop” in the shop window. At that point, your browser establishes a direct connection to Spreadshop. Technical data such as your IP address, browser information, referrer and time of access may be transmitted. Spreadshop may also use cookies or similar technologies and display its own consent controls.

The Spreadshop service is provided by sprd.net AG, Gießerstraße 27, 04229 Leipzig, Germany. Orders, product configuration, payment, production, shipping and shop-side customer service are handled within the Spreadshop environment. Details about the provider’s processing, recipients, retention and possible international transfers are available in the Spreadshirt privacy policy ↗.

You can avoid loading the embedded shop by closing the window. Opening a direct shop or product link in a new tab also leaves the made2drive website and establishes a connection to Spreadshop.

6. Contact by email

If you contact us by email, we process the information you provide in order to respond. For enquiries relating to a potential or existing contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is answering legitimate business communications.

Messages are deleted when the matter has been resolved and no contractual or statutory retention obligation applies. Please do not send payment details or other sensitive information by ordinary email.

7. Recipients and international transfers

Personal data may be received by the hosting provider, technical service providers acting on our behalf, or public authorities where disclosure is legally required. When you activate or visit Spreadshop, data is processed by the provider and its service partners under its own privacy information.

If a provider processes data outside the European Economic Area, the respective provider must explain the transfer mechanism and safeguards. No additional third-country service is intentionally embedded in the current landing page.

8. Retention

We retain personal data only for as long as necessary for the relevant purpose or as required by law. Different periods apply to server logs, correspondence and contractual records. Data is deleted or anonymised when the purpose and any statutory retention periods have ended.

9. Your rights

Subject to the legal requirements, you may have the right to request access to your personal data, rectification, erasure, restriction of processing and data portability. You may also object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation.

Where processing is based on consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. You may contact the authority responsible for the controller or an authority at your habitual residence, place of work or the place of the alleged infringement.

11. Security and policy updates

We use appropriate technical and organisational measures to protect personal data. The production website should be delivered over an encrypted HTTPS connection. No internet transmission can be guaranteed to be completely secure.

This policy will be updated when the website, hosting setup, shop integration or legal requirements change.