Print Profit Navigator
Privacy Policy
This privacy policy describes how personal data is processed in the Print Profit Navigator application.
Controller
EFRIDA – Marketing Solutions, Traberhofstr. 99, 83026 Rosenheim, Germany
- Telephone: +49 176 1111 2322
- Email: eva@loom2moon.com
Hosting and server logs
The application is operated with a hosting provider. When it is accessed, technically necessary server log data is processed (IP address, timestamp, requested resource, referrer, user agent, status code).
Legal basis: Art. 6(1)(f) GDPR (secure and stable operation).
Calculator inputs and saved sessions
Calculator inputs are initially kept in your browser's local storage so your session is preserved. Without a sign-in these inputs are not linked to a user account.
If you are signed in, cost and labour profiles can be stored in our database and linked to your account. Such data is then no longer anonymous.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) or Art. 6(1)(f) GDPR.
Customer accounts
For sign-in we process your email address, authentication data and optional profile details (name, company, country, language, currency). Sign-in is possible with email/password or Google.
Legal basis: Art. 6(1)(b) GDPR.
Contact and lead forms
When you submit a form we process the data you provide (e.g. name, email, company, message) in order to handle your request.
Purchase and contract processing, reports
When you purchase a download product we store the order and payment status, product, amount, currency, timestamp, payment session identifier and the accepted legal document versions. Downloads are logged with timestamp and count in order to enforce the limit of 5 downloads.
This data is stored server-side and linked to your account. Legal basis: Art. 6(1)(b) and (c) GDPR (commercial and tax retention obligations).
Payment processing (Stripe)
Payments are processed through Stripe. Payment details (e.g. card data) are entered directly with Stripe and are not stored by us. For parts of the processing Stripe acts as an independent controller.
This may involve transfers to third countries; Stripe relies on standard contractual clauses for such transfers.
Transactional emails
We send emails for account management (e.g. confirmation, password reset) and for purchases (e.g. purchase confirmation, download notice). Marketing emails are only sent with separate consent.
Consent management
Your cookie consent is stored locally with a consent ID, the selected categories, the version, a timestamp and the locale, so that it can be documented and respected.
Analytics and embedded content
No analytics services and no advertising tracking technologies are currently enabled. Should this change, this policy will be updated in advance and consent will be obtained.
Recipients and processors
We use carefully selected service providers:
- Hosting and application operation
- Database, authentication and file storage (backend platform)
- Stripe for payments
- Email delivery service for transactional emails
A complete, maintained list of processors is kept by the administration and provided on request.
Retention periods
Account data is stored until the account is deleted. Purchase and invoice data is subject to statutory retention periods (in Germany typically 6 or 10 years). Server logs are deleted after a short period. The specific periods are configurable.
Your rights
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdrawal of consent with effect for the future
Please address erasure requests to eva@loom2moon.com. We confirm receipt and document how the request is handled.
You also have the right to lodge a complaint with a data protection supervisory authority.
Automated decision-making
No automated decision-making producing legal effects and no profiling takes place. Calculation results are planning indicators based on your inputs.
Security measures
We use transport encryption (TLS), row-level access rules in the database, server-side payment verification and signed, expiring download links.
