Privacy Policy

1. Data Controller

E-Mail: mail@haukesteinbach.de

Go to the Legal Notice

2. Access Data and Hosting

When this website is accessed, the hosting provider may process technical access data, in particular the IP address, date and time of access, requested content, amount of data transferred, browser type, and operating system. This processing is carried out to provide, maintain, and secure the website.

The website is operated on rented servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, located in Hetzner’s data center in Nuremberg, Germany. No own server hardware is operated. A data processing agreement pursuant to Article 28 GDPR is in place with the hosting provider.

Server log files containing access data are automatically deleted after 14 days at the latest, unless a longer retention is required in individual cases to investigate attacks or malfunctions.

3. Contact Requests

If you contact me by email or via a contact form, the data you submit will be processed in order to handle your request. Processing is carried out on the basis of Article 6(1)(b) GDPR if your request is related to the conclusion or performance of a contract, or on the basis of Article 6(1)(f) GDPR due to the legitimate interest in handling inquiries.

4. Web Fonts

This website uses the web fonts Fraunces, Inter, and IBM Plex Mono. All font files are hosted locally on this website’s own server. No connection to Google Fonts or any other third-party font provider is established when a page is loaded, and no data — including your IP address — is transmitted to external servers for this purpose.

5. Customer Account and Sign-in

To access purchased products, you can sign in with your e-mail address using a one-time code; no password is created or stored. For this purpose, your e-mail address and technically required session data are processed by our backend provider Supabase (Supabase Inc.; data hosted in the European Union, Frankfurt am Main region). Processing is carried out on the basis of Article 6(1)(b) GDPR (performance of a contract).

The session token required to keep you signed in is stored in your browser’s local storage and can be removed at any time by signing out or clearing your browser data.

6. Purchases and Payment (Stripe)

Payments on this website are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. When you make a purchase, you enter your payment details directly with Stripe; they are not transmitted to or stored on this website’s systems at any time. Details on Stripe’s processing can be found in Stripe’s privacy policy.

After a completed purchase, I store the e-mail address used at checkout, the purchased product, the amount paid, and a payment reference, in order to provide your downloads and to comply with statutory record-keeping obligations. The legal bases are Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(c) GDPR (legal obligations).

When you consent to immediate performance of the contract before checkout (waiver of the right of withdrawal for digital content), the time of your consent, the consent text shown to you, and your IP address are recorded as legally required proof. The legal basis is Article 6(1)(c) GDPR in conjunction with Section 356(5) of the German Civil Code (BGB).

Retention periods: invoices and purchase records are retained for ten years in accordance with Section 147 of the German Fiscal Code (AO) and Section 257 of the German Commercial Code (HGB). Records of your withdrawal consent are retained for three full calendar years after the purchase, corresponding to the regular limitation period (Sections 195, 199 BGB). Purchase confirmation e-mails are sent via our own e-mail account operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (see the newsletter section below).

7. Downloads

Purchased products are delivered as downloads via protected storage hosted by Supabase in the European Union (Frankfurt am Main region). Download links are personal, generated only after verifying your purchase, and expire automatically after a few minutes.

8. Newsletter (“The Archive Letter”)

You can subscribe to a newsletter about new instrument releases. Sign-up uses a double opt-in procedure: your e-mail address is only added to the list after you confirm it with a code sent to that address. The newsletter is sent at most once per month; the legal basis is your consent under Article 6(1)(a) GDPR.

The newsletter and all system e-mails (sign-in codes, purchase confirmations) are sent via our own e-mail account operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes the e-mail traffic on our behalf; a data processing agreement pursuant to Article 28 GDPR is in place (see IONOS privacy information). No external newsletter marketing platform (such as Mailchimp or Brevo) is used; the subscriber list is stored exclusively in our own database (Supabase, EU region, see above).

You can withdraw your consent at any time with effect for the future, via the unsubscribe link in every newsletter or by e-mail to mail@haukesteinbach.de. Your e-mail address will then be removed from the list and deleted; it is stored only for as long as your subscription is active.

9. External Links and Embedded Content

This website may contain links to external platforms as well as embedded content from third-party providers. When such content or links are activated, personal data may be transmitted to the respective third-party provider. In that case, the privacy policies of the respective provider apply.

10. Your Rights

• Right of access pursuant to Article 15 GDPR
• Right to rectification pursuant to Article 16 GDPR
• Right to erasure pursuant to Article 17 GDPR
• Right to restriction of processing pursuant to Article 18 GDPR
• Right to data portability pursuant to Article 20 GDPR
• Right to object pursuant to Article 21 GDPR
• Right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR

11. Version of this Privacy Policy

Version: August 2026. This privacy policy may be updated if technical functions, integrated services, or legal requirements change.