Privacy & Cookies

2. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA (“Vercel”). When you access the site, Vercel automatically collects and stores information in server log files that your browser transmits to us. This includes:

• IP address (anonymised or shortened where technically possible)
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL
• Requested page / resource

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in a secure, stable and performant website. A data processing agreement (Art. 28 GDPR) is in place with Vercel. Data may be transferred to the USA; the transfer is safeguarded by Standard Contractual Clauses and Vercel’s participation in the EU-U.S. Data Privacy Framework.

3. Cookies and similar technologies

This website uses only a single, strictly necessary first-party cookie named “NEXT_LOCALE”. It stores your language preference (German or English) so the site can be displayed in the correct language on your next visit. It does not contain any personal data beyond the language code and is not used for tracking or analytics.

Because we do not use any optional or tracking cookies, no cookie consent banner is required. You can delete or block this cookie at any time via your browser settings; the site will then fall back to its default language.

Legal basis: § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR — strictly necessary for a function you have explicitly requested (language selection).

4. Contact form and pre-order form

If you contact us via the contact form or submit a pre-order, we process the data you enter in the form (first name, last name, email address, phone number if provided, and your message/comments; for pre-orders also the selected version) in order to answer your request and, where applicable, prepare a personalised offer.

For technical processing, form submissions are transmitted via a Google Apps Script endpoint and stored in a Google Sheet. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company Google LLC, USA). Google acts as a processor on our behalf on the basis of a data processing agreement (Art. 28 GDPR). Data may be transferred to the USA; the transfer is safeguarded by Standard Contractual Clauses and Google’s participation in the EU-U.S. Data Privacy Framework.

We do not pass your data on to any other third parties without your consent.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures at your request) and Art. 6(1)(f) GDPR (legitimate interest in answering inquiries).

5. Newsletter

If you subscribe to our newsletter, or if you tick the newsletter opt-in box on the pre-order form, we process your email address to send you occasional updates about the Folding Desk. The email address is stored in a Google Sheet via the same Google Apps Script endpoint described in section 4.

You can unsubscribe at any time, free of charge, by sending a short email to info@form13.de. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

Legal basis: Art. 6(1)(a) GDPR — your consent, given by submitting the form.

6. Web analytics (Simple Analytics)

To understand how this site is used on an aggregated level, we use Simple Analytics, a privacy-friendly web analytics service provided by Simple Analytics B.V., Nieuwezijds Voorburgwal 104, 1012 SG Amsterdam, Netherlands.

Simple Analytics does not use cookies and does not track you across websites or sessions. No personal identifiers are stored. Collected data includes aggregated information such as pages viewed, referrer, browser, operating system, country (derived from IP and immediately discarded) and screen size. IP addresses are not stored.

Further information and the provider’s privacy policy are available at https://www.simpleanalytics.com/privacy.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in a statistically sound, privacy-friendly analysis of our website. Because no information is stored on or read from your device, no consent under § 25 TDDDG is required.

7. Your rights

You have the following rights under the GDPR:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

Legal basis: To exercise any of these rights, please contact us at info@form13.de. You also have the right to lodge a complaint with a supervisory authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA).

8. Data retention

We only store personal data for as long as necessary for the purpose for which it was collected, or as required by statutory retention obligations (e.g. commercial and tax law, typically 6 to 10 years for order-related data). Server log files are kept for a short period for security and debugging purposes and then deleted or anonymised.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services or in legal requirements. The date at the top of this page shows when it was last changed.