Privacy policy

Privacy policy 1. Controller Robin Stenzel, [Address: enter in admin settings], email: toppmixreal@gmail.com 2. What we process and why • When you visit the site: technical access data (IP address, time, page, browser) in the host’s server logs, for operation and security (Art. 6(1)(f) GDPR). • When you buy: name, email address, order (beat, license, price, time), license ID, checkout consents with timestamp, to perform the contract and prove the license (Art. 6(1)(b) GDPR; retention under Art. 6(1)(c) GDPR). • When you request new download links: your email address, to send the links (Art. 6(1)(b) GDPR). • When you contact us: the details in your message, to reply (Art. 6(1)(b) or (f) GDPR). An account is not needed to buy. 3. Recipients and processors • Hosting, database and storage: Google (Firebase / Google Cloud, European region). • Payments: Stripe Payments Europe Ltd., Ireland. Card data is processed by Stripe only and is not stored on our servers. • Email delivery: Resend (purchase emails and download links). Data processing agreements are in place or being concluded. Where data is transferred outside the EU (e.g. USA), this is based on adequacy decisions or standard contractual clauses. 4. Retention Order and invoice data is kept as long as statutory retention periods require (currently up to 8 years for accounting records). License data stays stored while the license is valid so it can be verified. Server logs are deleted after a short time. 5. Cookies and local storage We only use strictly necessary storage: language choice (NEXT_LOCALE), cart and appearance (your browser’s local storage), a sign-in cookie for the operator. No tracking or advertising cookies and no analytics. 6. Your rights You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15 to 21 GDPR). Write to toppmixreal@gmail.com. You may also complain to a data protection authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia. 7. Required data Without name and email address we cannot issue a license or deliver anything.