Privacy Notice
Last updated: 01/08/2026
2. Data protection officer
Contact: hello@moin-spatz.com
3. Server logs
When this site is accessed, our hosting provider Vercel Inc. processes technical connection data (IP address, user agent, timestamp, requested resource). IP addresses are not stored permanently. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable and secure operation).
4. Hosting / processors
This site is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). Content (PDFs, text) is stored on servers of Supabase, Inc. in the EU (region Stockholm, Sweden). Data processing agreements pursuant to Art. 28 GDPR are in place with both providers.
5. Contact form
When you contact us via the form, we process the details you provide in order to handle and answer your enquiry.
- Data collected: name, email address, topic and message; for the "vehicle check" topic also optional vehicle details (make, model, year). You may optionally attach images – these are transmitted to us by email only (not stored in our database).
- Purpose: handling and responding to your enquiry.
- Legal basis: Art. 6(1)(b) GDPR (pre-contractual / contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in answering enquiries); where explicit consent is given, Art. 6(1)(a) GDPR.
- Recipients / processors: the message is delivered to us by email via Resend (Resend, Inc., USA) and additionally stored at Supabase, Inc. (EU, Stockholm region). Data processing agreements under Art. 28 GDPR are in place with both; the transfer to Resend in the USA is safeguarded by EU Standard Contractual Clauses (SCC).
- Retention: until your enquiry has been fully handled; afterwards deleted, unless statutory retention obligations apply.
6. Product reviews
When you submit a product review, we process your details to check the review and – once approved – display it publicly on the website.
- Data collected: the rating (stars), title, text, the name you provide and any uploaded photos are shown publicly after approval. Your email address (optional) is not published and is used only for follow-up.
- Check / "verified purchase": every review is checked by us before publication. We only apply the "verified purchase" label if a proof of purchase was provided.
- Purpose: displaying genuine customer opinions; legal basis: Art. 6(1)(a) GDPR (consent on submission) or Art. 6(1)(f) GDPR (legitimate interest in meaningful reviews).
- Recipients / processors: stored at Supabase, Inc. (EU, Stockholm region); photos in a private storage bucket, publicly visible only after approval.
- Withdrawal / deletion: you can request deletion of your review at any time via the contact form; we then remove it including photos.
7. Anonymous usage analytics
We collect pseudonymised telemetry to understand which language versions and features are used most:
- Data collected: action (e.g. "language selected", "PDF opened"), country (derived from IP, IP itself not stored), hashed user agent (not linkable to individual devices).
- Purpose: product improvement, language prioritisation, identifying vehicles for the compatibility list.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in product improvement).
- Retention: As this statistic is anonymous (no personal reference), we keep it indefinitely. Technical error logs (404 / exceptions, without personal reference) are deleted after at most 90 days.
For this telemetry, no cookies are set; collection is purely server-side. This website does not set any cookies at all — your language choice is not stored in a cookie either, but follows from the address you visit (e.g. /de/ or /en/).
We additionally use Vercel Web Analytics (Vercel Inc., USA) for anonymous reach measurement. It sets no cookies and stores no data suitable for identifying individuals; analysis is aggregated. Legal basis: Art. 6(1)(f) GDPR.
8. Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection to processing. To exercise these rights, please contact: hello@moin-spatz.com.
You may also lodge a complaint with your competent data protection supervisory authority.