Privacy policy

The controller for the processing of personal data on this website is:

Mike Möhler & Jamy Fritzler GbR
trading as “MJF Partners”
Markgrafenstraße 147
79211 Denzlingen
Baden-Württemberg, Germany

Email: [Email address]
Phone: [Phone number]

We are not obliged to appoint a data protection officer. If you have any questions about data protection, please use the contact details above.

We only process personal data to the extent necessary to operate the website, handle your enquiries and provide our services. We do not use analytics or advertising cookies, nor any tracking services. The website uses your device’s system fonts; no third-party fonts are loaded.

The website and our software are operated by [Hosting provider, address, server location]. The database is operated by Supabase Inc., server location [Check region, e.g. Frankfurt am Main].

When you access the website, the server processes technically necessary data: IP address, date and time, page accessed, referrer, browser and operating system. This serves the secure and stable provision of the website (Art. 6(1)(f) GDPR). The data is deleted after [number] days unless it is needed to investigate a security incident. Data processing agreements are in place with the providers.

If you contact us using a form, we process the details you provide, such as your name, email address, company, shop address and your message. We use them to handle your enquiry and prepare the requested analysis (Art. 6(1)(b) GDPR, pre-contractual measures). We delete the data when it is no longer needed for this purpose and no statutory retention obligations apply, at the latest after [period, e.g. 12 months] if no contract is concluded.

For the analysis, we look at publicly accessible information about your shop, such as your website and public reviews. [Add the analysis procedure once it is defined]

If you contact us by email, phone or chat, we process your details to deal with your request (Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR). We use Postmark (ActiveCampaign, LLC, USA) to send and receive email. The transfer to the USA is based on [EU-US Data Privacy Framework or standard contractual clauses – check].

For our customer portal and our internal software, we process your sign-in data (email address, encrypted password) and the data you enter there (Art. 6(1)(b) GDPR). To keep you signed in, we store a sign-in key in your browser’s local storage. This is technically necessary and does not require consent (Section 25(2) no. 2 TDDDG, the German Telecommunications Digital Services Data Protection Act).

If you are a customer of a shop for which we provide customer service, we process your enquiry on behalf of that shop (Art. 28 GDPR). The respective shop is then the controller. The shop’s privacy policy sets out which data is processed and what rights you have. This is based on our data processing agreement.

In doing so, we use the following service providers on behalf of the shop:

• Supabase Inc. – database and sign-in
• Postmark (ActiveCampaign, LLC, USA) – sending and receiving email
• Anthropic, PBC (USA) – automated text processing to sort enquiries and prepare draft replies; our team reviews drafts according to the shop’s rules
• Meta Platforms Ireland Ltd. – WhatsApp, Instagram and Facebook, if the shop uses these channels
• Shopify International Ltd. or the respective shop provider – order and shipping data

[Reconcile the list with the providers actually used, their registered office and the basis for transfer]

Where service providers process data outside the EU, this only takes place on the basis of an adequacy decision by the EU Commission (such as the EU-US Data Privacy Framework for certified providers) or standard contractual clauses (Art. 46(2)(c) GDPR).

We only store personal data for as long as necessary for the respective purpose. Retention obligations under German commercial and tax law (Section 257 HGB, Section 147 AO) remain unaffected; they last up to ten years.

You have the right at any time to

• access your stored data (Art. 15 GDPR),
• have incorrect data rectified (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• withdraw consent given, with effect for the future (Art. 7(3) GDPR).

Right to object under Art. 21 GDPR

If we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds.

You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

We adapt this privacy policy when our services or the legal situation change. The version published here at the time applies.