Privacy Policy

1. Introduction 

Welcome to Gustaaf ("we," "our," "us"). We are committed to protecting your privacy and ensuring that your personal data is handled securely and in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) in the European Union, the California Consumer Privacy Act (CCPA), and other relevant international privacy laws.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website ("Website") or interact with our services.

2. Data Controller 

Gustaaf is the data controller responsible for the processing of your personal data under the GDPR. If you have any questions regarding this Privacy Policy or your personal data, please contact us at:

Gustaaf

Am Sandhügel 9
63150 Heusenstamm
olaf@gustaaf.de

3. Personal Data We Collect 

We collect the following types of personal data:

  • Information You Provide: When you contact us via our Website or email, we may collect your name, email address, and any other information you provide voluntarily.

  • Automatic Data Collection: When you visit our Website, we may collect technical data such as your IP address, browser type, device information, and usage patterns through cookies and similar tracking technologies.

We do not collect phone numbers or sensitive personal data (e.g., health information, financial details).

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

  • Consent (Art. 6(1)(a) GDPR) – When you provide explicit consent for specific data processing activities.

  • Contractual Obligation (Art. 6(1)(b) GDPR) – When processing is necessary to fulfill a contract with you.

  • Legal Obligations (Art. 6(1)(c) GDPR) – When we must comply with legal requirements.

  • Legitimate Interests (Art. 6(1)(f) GDPR) – When processing is necessary for our legitimate business interests, provided they do not override your rights.

5. How We Use Your Data 

We use the collected data for the following purposes:

  • To provide and improve our services.

  • To communicate with you in response to inquiries.

  • To analyze Website usage and enhance user experience.

  • To comply with legal obligations.

We do not sell, rent, or trade your personal data to third parties.

6. Data Sharing and Transfers

We may share your personal data:

  • With service providers who assist us in running our business (e.g., hosting, analytics).

  • When required by law, regulatory authorities, or to protect our legal rights.

  • In the case of business transfers (e.g., merger, acquisition).

If data is transferred outside the European Economic Area (EEA), we ensure adequate protection through EU-approved standard contractual clauses or other legal mechanisms.

7. Your Rights Under GDPR and CCPA

Under the GDPR (for EU users) and CCPA (for California residents), you have the following rights:

  • Access: You may request access to the personal data we hold about you.

  • Correction: You can request corrections to inaccurate data.

  • Deletion: You may request the deletion of your personal data.

  • Objection and Restriction: You can object to or request the restriction of certain data processing activities.

  • Data Portability: You may request a copy of your data in a structured format.

  • Opt-Out of Data Sale (CCPA): We do not sell personal data, but California residents may still opt out of certain data-sharing practices.

To exercise your rights, please contact us at [Email Address].

8. Data Retention 

We retain personal data only as long as necessary for the purposes outlined in this Privacy Policy or as required by law. Once data is no longer needed, it will be securely deleted or anonymized.

9. Security Measures 

We implement technical and organizational measures to protect your data from unauthorized access, loss, or disclosure. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Cookies and Tracking Technologies 

Our Website may use cookies and similar tracking technologies to improve user experience. You can manage your cookie preferences through your browser settings.

11. Third-Party Links

Our Website may contain links to third-party sites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing personal data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with the updated revision date. Please review this policy periodically

13. Contact Us 

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

Gustaaf

Am Sandhügel 9
63150 Heusenstamm
olaf@gustaaf.de