Skip to content
Plattenpapzt Plattenpapzt

Privacy policy

This policy explains which personal data we process when you use Plattenpapzt (https://plattenpapzt.com), for what purposes, on which legal basis under the General Data Protection Regulation (GDPR), and which rights you have.

Controller

The controller responsible for data processing on this website is:

Hosting

This website runs on a hosting platform whose operator processes data on our behalf under a data processing agreement (Art. 28 GDPR). The servers are located in the European Union. The processing is based on our legitimate interest in a secure and reliable website (Art. 6 (1) (f) GDPR).

Server log files

When you open a page, your browser automatically sends information that the server records in log files: IP address, date and time of the request, the address requested, the referring page, the HTTP status, the amount of data transferred and your browser's user agent. We need these data to deliver the website, to keep it secure and to find errors (Art. 6 (1) (f) GDPR). Log files are kept only for a short period and then deleted, unless an incident needs further investigation.

Cookies and local storage

We only store what this site needs to work in your browser (§ 25 (2) TDDDG, Art. 6 (1) (b) and (f) GDPR):

  • your chosen language (cookie app_locale, one year) and display mode (light or dark),
  • after you sign in, the sign-in tokens (in the browser's local or session storage; with "remember me" for up to 30 days),
  • the contents of your shopping cart (an anonymous cart number).

You can delete these data at any time in your browser's settings. Optional storage that is not needed to run the site is only used with your consent and described below.

Contact by email

When you contact us, we process the data you send us (for example your name, email address and message) to answer your request (Art. 6 (1) (b) GDPR if it relates to a contract, otherwise Art. 6 (1) (f) GDPR). We delete the data once your request has been dealt with, unless statutory retention obligations apply.

Emails we send

We send emails that belong to the use of this site (for example confirmations, password resets or messages about your orders). To make sure they arrive, we keep a send log: the content of a mail is deleted after 30 days, the log entry (recipient, subject, status) after 180 days (Art. 6 (1) (b) and (f) GDPR).

User accounts

If you have an account, we store your user name, email address, password (only as a secure hash) and the profile data you enter yourself, as well as the time of your last sign-in. We use them to provide the account (Art. 6 (1) (b) GDPR) and keep them until the account is deleted. In your profile you can view and correct your data and request a copy or the deletion of your data.

Visitor statistics

We count visits with our own statistics tool that runs on our server; no data is passed on to third parties. To recognise repeat visits, a random visitor number is stored in the cookie ia_vid (about 13 months). We record the pages you view, the referring page, campaign parameters, actions such as clicks on buttons, your browser and operating system family, device type, screen size and language, and the approximate location (country, region, city). Your IP address is used only for a moment to determine the approximate location and is never stored. If you are signed in, the visit is linked to your account. Signals such as "Do Not Track" can be respected.

The statistics are only recorded if you agree in the notice shown on your first visit (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You can withdraw your consent at any time with effect for the future with "Privacy settings" at the bottom of every page.

Orders in the shop

When you order, we process the data needed to perform the contract: name, billing and delivery address, email address, phone number if given, the ordered products, the payment method and the payment and shipping status (Art. 6 (1) (b) GDPR). We pass the delivery address to the carrier where needed. You can order as a guest or with a customer account. Order and invoice data are kept as required by commercial and tax law (Art. 6 (1) (c) GDPR) and anonymised after 10 years. Signed-in customers can request a copy or the deletion of their data in their profile.

Product reviews

If you write a review, we publish it with the name you give, your rating and your text, and mark whether you bought the product. The legal basis is your consent (Art. 6 (1) (a) GDPR); you can ask us to remove your review at any time.

YouTube videos

We embed videos from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, in the extended data protection mode (youtube-nocookie.com). When a video is shown, your browser connects to Google's servers and transfers at least your IP address and the page you are on; when you play it, Google may store information in your browser. Google may transfer data to the USA (EU-US Data Privacy Framework). Legal basis is our legitimate interest in showing video content (Art. 6 (1) (f) GDPR) or, where required, your consent (Art. 6 (1) (a) GDPR). More information: https://policies.google.com/privacy

Twitch streams

We show streams, videos and clips from Twitch, a service of Twitch Interactive, Inc., 350 Bush Street, 2nd Floor, San Francisco, CA 94104, USA. When you open the player, your browser connects to Twitch's servers, transfers your IP address and may store information in your browser; a chat may be shown. Legal basis is our legitimate interest in showing our streams (Art. 6 (1) (f) GDPR). More information: https://www.twitch.tv/p/legal/privacy-notice/

Sign in with Twitch

You can sign in or link your account with Twitch. Twitch then tells us your Twitch user id, user name and email address; we store them with your account, together with whether you follow or subscribe to our channel, to grant related benefits. You can remove the link in your profile at any time. Legal basis is the performance of the contract for your account (Art. 6 (1) (b) GDPR).

Mixcloud player

We embed recordings from Mixcloud Ltd, London, United Kingdom. When you open the player, your browser connects to Mixcloud's servers and transfers your IP address. The United Kingdom offers an adequate level of data protection according to the European Commission. Legal basis is our legitimate interest (Art. 6 (1) (f) GDPR). More information: https://www.mixcloud.com/privacy/

Your rights

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

Changes to this policy

We update this policy when our website or the legal requirements change. The current version is always available on this page.