Privacy Policy
Controller
SHOOTA GmbH · Managing Director: Felix Wunderle
Sollner Str. 3, 81479 Munich
Phone: +49 (0) 89 709 564-00 · Email: info@shoota.de
The basics
This website is served statically. It sets no cookies for tracking or advertising and embeds no content from advertising networks or social networks. For anonymous audience measurement we use cookieless statistics that we run ourselves (see “Audience measurement”). For two purely functional settings (display mode, dismissing a note), your browser stores two short values locally, see “Local storage”.
Hosting and server log files
The website runs on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (processor). When you access it, the server processes technically necessary data (e.g. IP address, date and time of access, page accessed, browser and device information) in log files. The legal basis is our legitimate interest in providing this online offering securely and efficiently (Art. 6(1)(f) GDPR). Log files are only stored for as long as is necessary for security and operation.
Local storage (not a cookie)
For two controls, your browser stores a short value locally on your device (“localStorage”): which display mode you chose (Experience or Light) and whether you have already dismissed the light mode note. Both are pure settings without personal reference, created only by your own click and used solely to carry that choice over to your next visit. This storage is technically necessary to provide the function you explicitly chose; under § 25(2)(2) TDDDG no consent is required for it.
Audience measurement
To improve what we offer, we record anonymous usage statistics with the Umami software, which we run on our own server. No cookies are set and no personal profiles are created. Only aggregated information is recorded, such as pages accessed, approximate origin (country), referring page and browser and device type; the IP address is not stored. No cross-site tracking takes place, and the browser’s “Do Not Track” setting is respected. The legal basis is our legitimate interest in designing the website to meet actual needs (Art. 6(1)(f) GDPR). As no information on your device is accessed, no consent under § 25 TDDDG is required.
Videos
Videos embedded in project descriptions are served from our own server (subdomain os.shoota.de). No data is transferred to third parties in the process; transmitting your IP address to our own server is technically necessary.
Getting in touch
If you contact us by email or phone, we process the information you provide (name, contact details, content of the enquiry) in order to handle the enquiry and for possible follow-up questions (Art. 6(1)(b) and (f) GDPR). The data is deleted as soon as it is no longer needed for handling the matter and no statutory retention obligations apply (e.g. 6 years under the German Commercial Code, 10 years under the German Fiscal Code).
Request form
Via the form under “Start a project” we process the information you enter: type of project, budget range, preferred form of contact, name or company, email address and your free text. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract).
The information is transmitted to our own project system, operated on a server in Germany, and stored there as a request. To send you the confirmation of receipt and to notify us, we use the email service Resend (Resend, Inc., 2261 Market Street, San Francisco, CA 94114, USA). Processing takes place via the provider’s EU region (eu-west-1); a data processing agreement is in place. As Resend, Inc. is a US company, a transfer of data to a third country takes place regardless of the server location. The legal basis for this is Resend’s certification under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR). Only the form details named above are transmitted.
To protect against automated submissions, the form contains a field that is invisible to you and limits the number of submissions per IP address. The IP address is only held briefly in memory for this and is not stored. We delete the request data as soon as it is no longer needed for handling the matter and no statutory retention obligations apply.
External links
This website links to external offerings (e.g. LinkedIn). When you follow these links, the privacy policies of the respective providers apply.
Your rights
You have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). You can withdraw consent you have given at any time with effect for the future (Art. 7(3)). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). This is a translation of the German version, which is the legally binding one.