Privacy Policy

1. Controller

Jan Pleitner, Am Markt 4, 25840 Friedrichstadt, Germany · E-mail: info@janpleitner.de

2. Principles

This website uses no tracking cookies, no analytics and no advertising services. We collect only the data necessary to run this site and to process purchases. The only external service involved is our payment provider.

3. Hosting and server logs

The website is hosted by Strato AG (Berlin, Germany). On every access the web server automatically records server log files (IP address, time, requested page, browser). These serve solely the technical provision and security of the site (Art. 6 (1) (f) GDPR) and are deleted after 7 days.

4. Payment processing (Stripe)

Purchases are processed by Stripe (Stripe Payments Europe Ltd., Dublin, Ireland; Stripe Inc., USA). When you pay, the data required for the payment is transmitted directly to Stripe; we never see your full payment details. Legal basis: Art. 6 (1) (b) GDPR (performance of contract). Details: stripe.com/privacy.

5. The wheel (abuse protection)

The acquisition wheel runs entirely on our own server; no data is sent to external AI or analytics services. To enforce the daily spin limit we store your IP address exclusively as a cryptographic hash (SHA-256). The IP address itself is never stored, and the hash does not allow us to identify you. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest: abuse protection and fairness). Your browser additionally keeps the state of your current wheel session (spins used, last result) in its own localStorage; this data never leaves your device and you can delete it at any time in your browser.

6. Purchase and confirmation e-mail

For a purchase we process the name or pseudonym you enter, your e-mail address and the order data (edition, price, certificate code) to perform the contract, issue your certificate and send the confirmation e-mail (Art. 6 (1) (b) GDPR). Order records are retained for the statutory commercial and tax retention periods (up to 10 years, § 147 AO). If you consented, your chosen name appears in the public archive and transparency ledger; you can revoke this at any time with effect for the future by e-mail.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. You also have the right to lodge a complaint with a supervisory authority; competent for us is the ULD — Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein.

The German version of this privacy policy is authoritative.