Privacy Policy
Information on how personal data is handled on this website.
Controller
SPOFACT GmbH
Münsterplatz 40
89073 Ulm
Germany
Represented by the managing director: Erol Öztuncel
Phone:+49 (0) 731 1466 099 0
Email:info@spofact.com
Hosting and server log files
When you access our website, the provider of the pages automatically collects and stores information that your browser transmits to our server (so-called server log files). This includes:
- Browser type and browser version
- Operating system used
- Referrer URL (the previously visited page)
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not combined with other data sources. This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – server log files must be collected for this purpose.
Fonts (Google Fonts)
This website uses web fonts provided by Google (Plus Jakarta Sans, Source Serif 4, and JetBrains Mono) for the uniform presentation of fonts. When you access a page, your browser loads the required web fonts from Google servers (fonts.googleapis.com and fonts.gstatic.com). Fonts are not hosted locally by us.
In the process, your IP address is transmitted to Google.
For more information, see Google's privacy policy: https://policies.google.com/privacy.
The processing is based on our legitimate interest in a consistent presentation of the website (Art. 6(1)(f) GDPR). Google may process the IP address outside the EU/EEA; where required, appropriate safeguards are used.
Contacting us
If you contact us by email or phone, your enquiry including all resulting personal data (name, contact details, content of the enquiry) will be stored and processed by us for the purpose of processing your request and in case of follow-up questions.
The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR).
The data you send to us will remain with us until the purpose for data storage no longer applies (e.g. after your request has been processed) or you ask us to delete it. Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
Contact form
When you use the contact form on our home page, we process the data you enter in order to handle your enquiry.
What data: Name, email address, message and your confirmation that you have read the privacy information (required). Optional: company or brand. When you submit the form, we also store your IP address, the address of the page you were on and the page you came from (referrer).
Storage and hosting: Your enquiry is stored in this website's database. This website is hosted by 10Web (TenWeb, Inc.). The published 10Web Data Processing Agreement applies to SPOFACT GmbH, as 10Web has confirmed in writing. The selected data center is in Council Bluffs, Iowa, USA. 10Web identifies Google Cloud Platform as a sub-processor. For transfers to the USA, EU Standard Contractual Clauses are used where applicable.
Email notification: Each enquiry triggers an email with your details to our mailbox info@spofact.com, with a copy to erol@spofact.com. The mailbox info@spofact.com is hosted by Microsoft as a service provider. The website sends these emails through WordPress's default mail delivery. You do not receive an automatic confirmation email; after sending you see a confirmation on the page.
Spam protection: The form protects itself with a hidden extra field and a minimum completion time. No external service is used for this. Entries identified as spam are kept for 30 days.
Disclosure: Your enquiries are not routinely shared with third parties. Sharing with manufacturers, dealers or service partners only takes place if and to the extent necessary to handle your individual enquiry. Beyond that, no third-party services are connected in the form settings.
Legal basis: The checkbox in the form only confirms that you have read the privacy information. It is not consent and not the legal basis of the processing. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR (legitimate interest in the effective handling of enquiries).
Retention period: Contact requests are manually reviewed by us and deleted no later than 6 months after final completion, unless statutory retention obligations require longer storage. Entries identified as spam are kept for 30 days.
Required information: Name, email address, message and the checkbox (acknowledgement of the privacy information) are required; without them we cannot process your enquiry.
Transfers to third countries: In connection with 10Web (hosting) and Microsoft (email mailboxes), data may be processed outside the EU/EEA, in particular in the USA. Appropriate safeguards, in particular EU Standard Contractual Clauses where applicable, are used. We do not rely on an adequacy decision.
Service request (form)
When you use our service form, we process the data you enter in order to handle your service request (e.g. warranty claim, repair, spare-part order, questions about use).
What data: Name, email address, whether you are an end customer or a dealer, brand, model, serial number (or a note that it cannot be found), date of purchase (if the device is under warranty), the "No warranty" statement (if applicable), a copy of the proof of purchase (photo or PDF, up to three files, max. 10 MB each; required if the device is under warranty), type of request and description of the problem. Optional: dealer, country of purchase, spare part, OEM number and up to five photos (image files, max. 10 MB each). Your confirmation that you have read the privacy information is also required. When you submit the form, we also store your IP address, the address of the page you were on and the page you came from (referrer).
Storage and hosting: Your request is stored in this website's database. Uploaded photos and proofs of purchase are stored together with the service request on the website's server and are not publicly accessible. This website is hosted by 10Web (TenWeb, Inc.). The published 10Web Data Processing Agreement applies to SPOFACT GmbH, as 10Web has confirmed in writing. The selected data center is in Council Bluffs, Iowa, USA. 10Web identifies Google Cloud Platform as a sub-processor. For transfers to the USA, EU Standard Contractual Clauses are used where applicable.
Email notification: Each request triggers an email with your details to our service mailbox service@spofact.com. Uploaded photos and proofs of purchase are attached to that email or included as a download link. The link expires after 7 days; this does not delete the file, and the form entry also remains. The mailbox service@spofact.com is hosted by Microsoft as a service provider. The website sends these emails through WordPress's default mail delivery. In addition, you receive an automatic confirmation email at the address you entered; it only confirms that your request has been received and contains a link to your uploaded files. This email is also sent through WordPress's default mail delivery.
Spam protection: The form protects itself with a hidden extra field and a minimum completion time. No external service is used for this. Entries identified as spam are kept for 30 days.
Disclosure: Your service requests are not routinely shared with third parties. Sharing with manufacturers, dealers or service partners only takes place if and to the extent necessary to handle your individual service case. Beyond that, no third-party services are connected in the form settings.
Legal basis: The checkbox in the form only confirms that you have read the privacy information. It is not consent and not the legal basis of the processing. The legal basis is Art. 6(1)(b) GDPR where your service request relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR (legitimate interest in the effective handling of service requests).
Retention period: Service requests and uploaded photos and proofs of purchase are manually reviewed by us and deleted no later than 3 years after final completion, unless statutory retention obligations or the establishment, exercise or defence of legal claims require longer storage. Expiry of the 7-day download link does not delete the file. Entries identified as spam are kept for 30 days.
Required information: Fields marked as required are necessary for us to handle your request. Without them we cannot process it.
Transfers to third countries: In connection with 10Web (hosting) and Microsoft (email mailboxes), data may be processed outside the EU/EEA, in particular in the USA. Appropriate safeguards, in particular EU Standard Contractual Clauses where applicable, are used. We do not rely on an adequacy decision.
Your rights as a data subject
Within the framework of the applicable legal provisions of the General Data Protection Regulation (GDPR), you have the following rights at any time:
Right of access (Art. 15 GDPR): You have the right to obtain information free of charge at any time about the origin, recipient and purpose of your stored personal data.
Right to rectification (Art. 16 GDPR): You have the right to request the immediate rectification of inaccurate or completion of incomplete personal data.
Right to erasure (Art. 17 GDPR): You have the right to demand the immediate deletion of your personal data stored by us, provided that no statutory retention obligations conflict with this.
Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your personal data.
Right to data portability (Art. 20 GDPR): You have the right to receive data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a standard, machine-readable format.
Right to object (Art. 21 GDPR): If data processing is carried out on the basis of Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a competent data protection supervisory authority.
SSL/TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Storage period
Unless a more specific storage period has been specified within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to exist.