Legal Pages
Updated:
July 2026
Privacy Policy
CONTROLLER & OVERVIEW
Controller within the meaning of the GDPR is ShredRack GmbH, Mühlreit 33, 83404 Ainring, Germany, represented by Managing Director Tobias Deckert (service@shredrack.com). In short, we process:
Technically necessary data when you visit the site (via our host Framer); data you send through the contact/booking form or by email; data transferred by embedded videos when you play them. We run no advertising tracking, do not sell data and send no newsletter.
Legal bases are Art. 6(1) GDPR — consent, contract, legal obligation or legitimate interest, as set out below.
HOSTING (FRAMER)
This website is hosted by Framer B.V., Amsterdam, Netherlands. When you access the site, Framer processes technically necessary server data:
IP address of your device; date and time of access and the requested URL; referrer URL, browser type and operating system; transferred data volume and status codes.
This is required to deliver and secure the site (Art. 6(1)(f) GDPR). Log data is deleted or anonymised after a short time. A data processing agreement under Art. 28 GDPR is in place; transfers to third countries rely on EU standard contractual clauses.
COOKIES & SECURITY
This website uses no analytics or advertising cookies. Technically necessary storage may be used for basic functions such as your chosen language and, where embedded content requires it, to store your consent choice (Section 25(2) TDDDG). We protect your data by:
SSL/TLS encryption across the whole site; data-minimising configuration of embedded content; no transfer of data for advertising purposes.
You can block or delete cookies in your browser settings at any time; some functions may then be limited.
CONTACT & BOOKING FORM
When you use the contact/booking form or email us, we process the data you provide:
Contact & enquiry
Name, company or agency, email address
Project details
Period, type of use, countries/reach, optional budget, message
Purpose & legal basis
Handling your enquiry and any follow-up; Art. 6(1)(b) GDPR for booking-related requests, otherwise Art. 6(1)(f) GDPR
We keep enquiries until communication is complete; statutory retention periods apply if a booking results. Providing a budget is optional.
EMBEDDED VIDEOS (YOUTUBE / VIMEO)
This site embeds videos from YouTube (Google Ireland Ltd.) and, where used, Vimeo. When you play a video:
A connection to the provider is established and your IP address is transferred; YouTube is embedded in extended data-protection mode (youtube-nocookie.com); where consent is requested the legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG, and consent can be withdrawn at any time.
Transfers to the USA rely on EU standard contractual clauses and the EU-U.S. Data Privacy Framework. See the providers’ privacy policies for details.
FONTS & SOCIAL MEDIA
Fonts are delivered locally via our host’s CDN (framerusercontent.com); there is no direct connection to Google Fonts or other font services. Our social profiles are only linked, not embedded:
No data is sent to these networks when you merely visit our site; data is only transferred once you follow a link; the provider’s own privacy policy then applies (Instagram/Meta, YouTube/Google).
The sedcard offered for download can be retrieved without providing personal data; only the technical access data described under hosting is processed.
YOUR LEGAL RIGHTS
Regarding your personal data you have the right to:
Access, rectification and erasure of your data; restriction of processing and data portability; withdrawal of consent with effect for the future; objection to processing based on legitimate interest (Art. 21 GDPR).
To exercise your rights, an informal email to service@shredrack.com is sufficient.
RETENTION, RECIPIENTS & COMPLAINTS
We delete personal data once the purpose no longer applies and no statutory retention periods require otherwise (e.g. 6 years under Section 257 HGB, up to 10 years under Section 147 AO). Recipients are limited to:
Our host Framer and, where applicable, our web host ALL-INKL.COM; YouTube or Vimeo only when you actively play a video. There is no transfer for advertising purposes and no automated decision-making.
CONTACT
For privacy-related questions, requests or concerns, please contact:
Address
ShredRack GmbH, Mühlreit 33, 83404 Ainring, Germany
We aim to respond to all privacy-related enquiries within a reasonable timeframe.