Legal Pages
Updated:
July 2026
Privacy Policy
CONTROLLER & OVERVIEW
Controller within the meaning of the GDPR is ShredRack GmbH, Mühlreit 33, 83404 Ainring, Germany, represented by Managing Director Tobias Deckert (service@shredrack.com). In short, we process:
Technically necessary data when you visit the site (via our host Framer, including a cookie-free reach measurement); data you send through the contact/booking form or by email; data transferred by embedded videos when you play them and by the Instagram feed shown on our site. We run no advertising tracking, do not sell data and send no newsletter.
Legal bases are Art. 6(1) GDPR — consent, contract, legal obligation or legitimate interest, as set out below.
HOSTING & REACH MEASUREMENT (FRAMER)
This website is hosted by Framer B.V., Amsterdam, Netherlands. When you access the site, Framer processes technically necessary server data:
IP address of your device; date and time of access and the requested URL; referrer URL, browser type and operating system; transferred data volume and status codes.
This is required to deliver and secure the site (Art. 6(1)(f) GDPR). Log data is deleted or anonymised after a short time. A data processing agreement under Art. 28 GDPR is in place; transfers to third countries rely on EU standard contractual clauses. Framer additionally provides a built-in reach measurement (events.framer.com) that works without cookies: page views are recorded in aggregate, without cross-site tracking and without individual user profiles (Art. 6(1)(f) GDPR). For the smooth-scrolling effect, a stylesheet of the Lenis library is loaded from the CDN unpkg.com; this transfers your IP address to that provider, no cookies are set.
COOKIES & SECURITY
This website uses no analytics or advertising cookies; the reach measurement described above works without cookies. Technically necessary storage may be used for basic functions such as your chosen language and, where embedded content requires it, to store your consent choice (Section 25(2) TDDDG). We protect your data by:
SSL/TLS encryption across the whole site; data-minimising configuration of embedded content; no transfer of data for advertising purposes.
You can block or delete cookies in your browser settings at any time; some functions may then be limited.
CONTACT & BOOKING FORM
When you use the contact/booking form or email us, we process the data you provide:
Contact & enquiry
Name, company or agency, email address
Project details
Period, type of use, countries/reach, optional budget, message
Purpose & legal basis
Handling your enquiry and any follow-up; Art. 6(1)(b) GDPR for booking-related requests, otherwise Art. 6(1)(f) GDPR
We keep enquiries until communication is complete; statutory retention periods apply if a booking results. Providing a budget is optional.
EMBEDDED VIDEOS (YOUTUBE / VIMEO)
This site embeds videos from YouTube (Google Ireland Ltd.) and, where used, Vimeo. When you play a video:
A connection to the provider is established and your IP address is transferred; YouTube is embedded in extended data-protection mode (youtube-nocookie.com); where consent is requested the legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG, and consent can be withdrawn at any time.
Transfers to the USA rely on EU standard contractual clauses and the EU-U.S. Data Privacy Framework. See the providers’ privacy policies for details.
FONTS & SOCIAL MEDIA
Fonts are delivered locally via our host’s CDN (framerusercontent.com); there is no direct connection to Google Fonts or other font services. Our social profiles are only linked, not embedded; Instagram posts are shown on our site through a feed service:
No data is sent to these networks when you merely visit our site; data is only transferred once you follow a link; the provider’s own privacy policy then applies (Instagram/Meta, YouTube/Google). Our Instagram posts are displayed through the service Behold (feeds.behold.so), which retrieves the feed and delivers the images from its own servers (behold.pictures): when the page loads, your IP address is transferred to Behold. No cookies are set and no direct connection to Meta is established (Art. 6(1)(f) GDPR).
The sedcard offered for download can be retrieved without providing personal data; only the technical access data described under hosting is processed.
YOUR LEGAL RIGHTS
Regarding your personal data you have the right to:
Access, rectification and erasure of your data; restriction of processing and data portability; withdrawal of consent with effect for the future; objection to processing based on legitimate interest (Art. 21 GDPR).
To exercise your rights, an informal email to service@shredrack.com is sufficient.
RETENTION, RECIPIENTS & COMPLAINTS
We delete personal data once the purpose no longer applies and no statutory retention periods require otherwise (e.g. 6 years under Section 257 HGB, up to 10 years under Section 147 AO). Recipients are limited to:
Our host Framer and, where applicable, our web host ALL-INKL.COM; the feed service Behold and the CDN unpkg.com when the page loads; YouTube or Vimeo only when you actively play a video. There is no transfer for advertising purposes and no automated decision-making.
CONTACT
For privacy-related questions, requests or concerns, please contact:
Address
ShredRack GmbH, Mühlreit 33, 83404 Ainring, Germany
We aim to respond to all privacy-related enquiries within a reasonable timeframe.