privacy policy
1. general information
the protection of your personal data is a priority for us. this policy explains how we collect and process data in compliance with the general data protection regulation (gdpr).
2. data controller
responsible for data processing is:
alapfy manufactura
marton alapfy
flurstraße 4a
82239 alling
germany
contact@alapfymanufactura.com
3. cookies
what are cookies? cookies are small text files that are stored on your device when you visit our website. they help us make our website more user-friendly, effective, and secure. some cookies are "session cookies," which are automatically deleted after your browser session ends, while others remain on your device until you delete them.
how we use cookies we use cookies to ensure the basic functionality of our online shop, to analyze website traffic (using google analytics), and to improve our services.
types of cookies we use
essential cookies: necessary for the website to function (e.g., shopping cart, security). these do not require consent.
analytics cookies: help us understand how visitors use the site. these are only set if you give your consent.
managing your preferences you can manage your cookie preferences at any time by clicking the "manage cookies" button in the cookie banner on our website. additionally, you can configure your browser settings to inform you about the use of cookies and decide on an individual basis whether to accept them or to exclude the acceptance of cookies for specific cases. please note that disabling cookies may limit the functionality of this website.
4. ssl/tls encryption
this site uses ssl/tls encryption for security reasons and to protect the transmission of confidential content. you can recognize an encrypted connection by the browser’s address bar.
5. hosting
this website is hosted by squarespace ireland ltd., le pole house, ship street great, dublin 8, ireland. squarespace processes data according to their privacy policy.
6. data collection & legal basis
we process your data to fulfill our contractual obligations or pre-contractual measures according to art. 6 (1) (b) gdpr.
contact forms:
data is stored to process your inquiry.customer communication via whatsapp business:
if you contact us via whatsapp, we use the 'whatsapp business' service provided by whatsapp ireland limited, merrion road, dublin 4, ireland.
1.purpose and legal basis: we process your phone number, profile name, and the content of your inquiry exclusively to answer your request pursuant to art. 6 (1) (b) gdpr (contract fulfillment or pre-contractual measures).
2.encryption and metadata: the content of your message is end-to-end encrypted and cannot be read by us or meta platforms. however, technical metadata (e.g., your phone number, ip address, and timestamps) is processed by whatsapp and may be transferred to servers of meta platforms inc. in the usa. this transfer is secured by standard contractual clauses approved by the european commission.
3. data minimization: we explicitly do not use your contact details for unsolicited promotional messages or newsletter broadcasts without your separate, explicit consent.
analytics:
we use google analytics 4. data is processed with ip anonymization to ensure your privacy.newsletter subscription & dispatch: purpose:
if you subscribe to our newsletter, we collect your email address to send you updates regarding new concrete objects, product releases, and limited artisan drops.double opt-in and logging:
subscription takes place via a secure double opt-in process. after entering your email address, you will receive a confirmation email containing a link. your subscription only becomes active once this link is clicked. to comply with legal documentation requirements, we log your subscription (ip address, timestamp of initial signup, and timestamp of confirmation).legal basis:
the processing of your data for the newsletter relies exclusively on your express consent pursuant to art. 6 (1) (a) gdpr.dispatch provider (brevo):
the newsletter is sent using 'brevo', a service provided by sendinblue sas, 106 boulevard haussmann, 75008 paris, france. your email address and logging data are stored on brevo’s servers within the european union. we have entered into a data processing agreement (dpa) pursuant to art. 28 gdpr with brevo.performance tracking (web-beacon):
our newsletters contain a miniature tracking pixel. when you open an email, technical data (browser type, ip address, time of retrieval, and clicked links) is collected. this data is used exclusively for the statistical analysis of our campaigns to align future editions with the actual interests of our readers. by subscribing, you consent to this tracking.revocation and unsubscription:
you can revoke your consent and unsubscribe at any time. you will find an unsubscribe link at the bottom of every newsletter email. alternatively, you can notify us via contact@alapfymanufactura.com. upon unsubscribing, your email address will be deleted from the active distribution list immediately.payment processing (stripe & paypal):
to process your payments securely, we use external payment service providers integrated into our squarespace checkout. the transmission of your billing data to these providers is strictly based on the fulfillment of our contract pursuant to art. 6 (1) (b) gdpr.
1. stripe (credit cards, apple pay, google pay, klarna):
if you choose to pay via credit card, apple pay, google pay, or klarna, your payment is processed by stripe payments europe, ltd., 1 grand canal street lower, grand canal dock, dublin, ireland. stripe receives payment details (e.g., card numbers, tokenized device info) directly. processing may involve data transmission to stripe inc. in the usa, safeguarded by eu standard contractual clauses. details: stripe.com/privacy.
2. paypal:
if you choose paypal, your data is passed on to paypal (europe) s.à r.l. et cie, s.c.a., 22-24 boulevard royal, 2449 luxembourg. details: paypal.com/privacy.
server log files:
our hosting provider (squarespace) automatically collects and stores technical data in server log files (including ip address, browser type, operating system, referrer url, and timestamp). this data is processed pursuant to art. 6 (1) (f) gdpr based on our legitimate interest in maintaining the technical stability and security of our website.
7. rights of the user
you have the right to request information about your stored data, as well as the right to correction, blocking, or deletion of this data at any time.
8. right to lodge a complaint
in the event of violations of the gdpr, you have the right to lodge a complaint with a competent supervisory authority.