Updated:
sors Michał Trykoszko
ul. Bacieczki 219/12
15-686 Białystok
Poland · Email: info@regelkit.de
The website runs on servers of Hetzner Online GmbH in Germany. When you visit it, the server processes technically necessary data (IP address, requested page, time, browser identifier) to deliver the page (Art. 6(1)(f) GDPR). We do not keep access logs containing this data.
We use no analytics or tracking tools and no advertising services. No cookies are set on any page except the checkout. Fonts are served from our own server; no data is sent to Google or other font providers.
When you join a waitlist we store your email address, the chosen product, the language, the time of sign-up and confirmation, and the wording of your consent. The legal basis is your consent (Art. 6(1)(a) GDPR). The sign-up only takes effect once you click the link in our confirmation email (double opt-in).
We use the data only to tell you when the product is available and delete it when you withdraw your consent or the purpose is fulfilled. You can withdraw your consent at any time by emailing info@regelkit.de.
For a Pro subscription we process your e-mail address, name, billing address, company and VAT ID where given, the chosen product, the licence key and your statements at checkout (acceptance of the terms and consent to immediate performance, with time and wording). The legal basis is performance of the contract (Art. 6(1)(b) GDPR) and our legal obligation to document and retain (Art. 6(1)(c) GDPR). We keep invoice data for five years from the end of the tax year (Art. 86 Polish Tax Ordinance) and contract data until limitation periods expire.
Payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. You enter your payment details directly with Stripe; we never see full card details. Stripe also calculates VAT from your address. Only the checkout page loads Stripe.js, which sets cookies and processes device information for fraud prevention; this is strictly necessary for the payment you request (Art. 5(3) ePrivacy Directive as implemented, Art. 6(1)(b) and (f) GDPR). For fraud prevention Stripe is an independent controller; data may be transferred to the USA (EU-US Data Privacy Framework, standard contractual clauses). Details: stripe.com/privacy.
The Pro add-ons send the licence key, your shop’s address and the version number to our server once a day so we can check the licence and provide updates (Art. 6(1)(b) GDPR). We store the activated shop addresses and the time of the last check for the duration of the subscription.
When you submit a statement via “Cancel contracts here” or “Withdraw from contract here”, we store your details with the time of receipt and send you a confirmation (Art. 6(1)(c) GDPR). We keep this data until the limitation period expires.
To send emails (e.g. waitlist confirmations) we use Resend, provided by Resend, Inc., USA, as a processor (Art. 28 GDPR). Your email address and the content of the email are processed. Transfers to the USA are covered by the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).
If you email us, we process your details to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them when they are no longer needed and no statutory retention period applies.
You have the right of access, rectification, erasure, restriction of processing, data portability and to object to processing based on Art. 6(1)(f) GDPR. You can withdraw consent at any time with effect for the future. You may lodge a complaint with a data protection authority, in particular in the member state of your residence; our lead authority is the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, Warsaw).
We do not use automated decision-making or profiling.