Privacy Policy
In short: the pages of this website load without cookies and without analytics. Google Analytics only runs if you agree in our privacy banner, YouTube videos only load when you click them, and the online store (FastSpring) only loads on pages where you can buy something or when you open the cart. The fonts are served from our own server. Here is what is processed and why.
1. Controller
Stefan Kohler
Bauerngasse 42
97702 Münnerstadt
Germany
Email: [email protected]
2. Hosting (Cloudflare)
This website is delivered through the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you open a page, Cloudflare processes technically necessary connection data (e.g. IP address, date and time of access, page requested, browser type) to deliver the website, secure the connection and fend off attacks.
The legal basis is our legitimate interest in a secure and reliable operation of the website (Art. 6 (1) (f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; a data processing agreement with EU standard contractual clauses is in place with Cloudflare. More information is available in Cloudflare’s privacy policy.
3. Customer account, licenses and downloads
The customer account (/account/), license verification and downloads of purchased software run on our own WordPress server. When you sign in, we process your account data (name, email address, purchased licenses) to provide your licenses and downloads (Art. 6 (1) (b) GDPR).
When you sign in, WordPress sets the login cookies that are necessary for your account session (§ 25 (2) no. 2 TDDDG). Hosting provider and location of this server, server log files and their retention period: to be added.
4. Your privacy choice (consent banner)
We store your choice in the banner in your browser’s local storage (key “it-consent-v1”), so we do not have to ask again. No cookie is used for this. You can change or withdraw your choice at any time via “Privacy settings” at the bottom of every page. Legal basis: § 25 (2) TDDDG and Art. 6 (1) (c) GDPR (documenting consent).
5. Google Analytics 4 (only with your consent)
If you click “Accept statistics” (or select Statistics and save), we use Google Analytics 4 (measurement ID G-0B5YYKMHFX), a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Before you agree, no Google Analytics script is loaded, no request is sent to Google and no analytics cookie is set.
We use Google Consent Mode v2: after your consent only analytics storage is enabled; advertising storage, ad user data and ad personalization stay switched off. Google Analytics sets cookies (“_ga”, “_ga_0B5YYKMHFX”) and measures page views and these interactions: clicks on “Add to Cart”, on product tiles and the Infinite Nodra call to action, on links to partner sites, file downloads and starting a video. Google Analytics 4 does not log or store full IP addresses. The data is kept for 14 months.
Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. Legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You can withdraw it at any time with effect for the future via “Privacy settings”; we then switch analytics off and delete the Google Analytics cookies of this website. More information: Google’s privacy policy.
6. Online store (FastSpring)
Our products are sold by FastSpring as reseller (merchant of record): FastSpring Inc., [legal entity and address of FastSpring]. FastSpring processes the data you enter during checkout (e.g. name, email address, billing address, payment details) to carry out your order, payment and invoicing, and sends you your license key. Legal basis is the performance of the contract (Art. 6 (1) (b) GDPR); for FastSpring’s own processing, FastSpring’s privacy policy applies.
The FastSpring Store Builder only loads on pages with buy buttons (product pages, Infinite Nodra and “All products & prices”); the cart icon on other pages leads to “All products & prices”. When it loads, it stores an identifier for your cart session in your browser’s local storage (key “fscSerial-rawexchange.onfastspring.com/popup-infinite-tools”), so the cart keeps its content while you browse. This is necessary for the cart to work (§ 25 (2) no. 2 TDDDG). It contacts rawexchange.onfastspring.com, d1f8f9xcsvx3ha.cloudfront.net, d8y8nchqlnmka.cloudfront.net and cdnjs.cloudflare.com; your IP address and browser data are transmitted to these servers. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual steps) and our legitimate interest in a working online store (Art. 6 (1) (f) GDPR).
7. YouTube videos (only after a click)
Videos are shown as a preview image first. Only when you click a video is it loaded from youtube-nocookie.com, a service of Google Ireland Limited (address see above). From then on Google receives your IP address and the information that you watched the video, and may store data in your browser. Legal basis is your consent by clicking (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). See Google’s privacy policy.
8. Contact
If you write to us by email, we process your details (email address, name, content of the message) only to handle your request. Legal basis is Art. 6 (1) (b) GDPR (initiation or performance of a contract) or Art. 6 (1) (f) GDPR (legitimate interest in answering your message). We delete the data as soon as it is no longer needed for this purpose and no statutory retention obligations apply.
Our support page currently offers contact by email only. If a contact form is added, this section will be updated.
9. Cookies, local storage, fonts
On the pages of this website, apart from Google Analytics (cookies, only with consent), YouTube (only after a click) and FastSpring (local storage entry for the cart, only on pages with buy buttons), no cookies are set, nothing else is written to your device except your privacy choice (see section 4), and no content is loaded from third-party servers. The fonts are loaded from this website – there is no connection to Google Fonts or other font services.
Exception – customer account: the customer account (/account/, login, license and download pages) and older pages that have not been moved yet are still delivered by our WordPress server. As of today these pages load Google Tag Manager, Google Fonts, Google reCAPTCHA (cookie “_GRECAPTCHA”) and ActiveCampaign site tracking. We are removing these services there or will ask for your consent before they load.
10. Encryption
All connections to this website are encrypted via TLS (HTTPS).
11. Your rights
Under the GDPR you have the right to:
- access the data stored about you (Art. 15),
- rectification of incorrect data (Art. 16),
- erasure (Art. 17) and restriction of processing (Art. 18),
- data portability (Art. 20),
- object to processing based on legitimate interests (Art. 21),
- withdraw a consent at any time with effect for the future (Art. 7 (3)).
An informal email to [email protected] is enough.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
12. Changes
If something on this website changes – for example a form that transmits data directly – we will update this policy accordingly. The version published here applies.