Privacy Policy

⚠️ Placeholder. This content is not legally valid text. Replace it with a legal text generator (e.g. eRecht24, IT-Recht-Kanzlei) or a lawyer's review before going live.

This policy informs you in accordance with Art. 13 GDPR about the processing of personal data when visiting this website and using the services offered.

Controller

Max Gaube
Omnaut (sole proprietorship)
Bonhoefferplatz 24, 01157 Dresden
Email: kontakt@omnaut.de

Hosting (Vercel)

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA (EU server location, Frankfurt region). When the site is accessed, Vercel processes technical access data on our behalf (including IP address, browser type, date and time of access) in server log files. Processing is based on Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). A data processing agreement exists with Vercel; Vercel is certified under the EU-U.S. Data Privacy Framework.

Contact

The contact form opens your email client with a pre-filled message. Your details are not routed through our servers; they are processed only when you send the email and it reaches us. The legal basis is Art. 6(1)(b) GDPR (contract initiation) or Art. 6(1)(f) GDPR (handling your inquiry). We delete the data as soon as your inquiry has been fully handled and no statutory retention obligations apply.

Payment Processing via Stripe

For payment processing we use Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). When you pay, the necessary data (including payment method, amount, transaction data) is transmitted directly to Stripe via Stripe's hosted checkout page (Payment Link) and processed there — card data never reaches our servers. Data may be transferred to the USA; Stripe is certified under the EU-U.S. Data Privacy Framework. On the payment pages, Stripe sets technically necessary cookies (e.g. for fraud prevention and session management). The legal basis is Art. 6(1)(b) GDPR (performance of contract). Details in Stripe's privacy policy: https://stripe.com/de/privacy.

Payment Status (Webhook)

To process your order, Stripe processes payment status events (e.g. "Payment successful") on our behalf. This involves transaction data such as payment amount, time, and status. The legal basis is Art. 6(1)(b) GDPR.

Email Delivery (Resend)

For transactional emails (order confirmation after payment) we use Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) as delivery provider. This involves processing the email address provided at payment as well as order data (product, amount). Data may be transferred to the USA; the transfer is based on EU Standard Contractual Clauses, and a data processing agreement exists with Resend. The legal basis is Art. 6(1)(b) GDPR (performance of contract).

Cookies & Consent

On your first visit, a cookie banner asks for your consent.

Technically necessary cookies are set by Stripe as part of payment processing (see above) as well as to store your cookie consent itself ("omnaut-consent", 180-day lifetime). These are required for operation and cannot be deselected (legal basis: § 25(2) No. 2 TTDSG).

Optional statistics cookies (anonymous visitor statistics to improve the website) are set only with your consent (§ 25(1) TTDSG, Art. 6(1)(a) GDPR). You can change or withdraw your choice at any time via the "Cookie Settings" link in the footer.

Storage Duration

Personal data is deleted as soon as the purpose of processing ceases and no statutory retention obligations (in particular commercial and tax law, § 147 AO, § 257 HGB) apply.

Your Rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing. An email to kontakt@omnaut.de is sufficient to exercise these rights. You also have the right to lodge a complaint with a data protection supervisory authority (responsible for us: the Saxon Data Protection Commissioner).