Privacy policy

This privacy policy applies to the website effware.com and to contacting us by email. Each of our Shopify apps has its own privacy policy; the links are at the end of this page.

1. Controller

Mitterschida Ventures UG (haftungsbeschränkt)
represented by its managing director Felix Groß
Mitterschida 1
94327 Bogen, Germany
Email: info@efflabs.de

effware and efflabs are brands of Mitterschida Ventures UG (haftungsbeschränkt).

We are not legally required to appoint a data protection officer. For questions about data protection please contact info@efflabs.de directly.

2. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent at any time with effect for the future (Art. 7 (3)).

Right to object: Where we process data based on legitimate interests (Art. 6 (1) (f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

An email to info@efflabs.de is enough for any request.

3. Hosting

The website runs on our own server at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in the Nuremberg data center. We have a data processing agreement with Hetzner under Art. 28 GDPR. We use no content delivery network and no upstream proxy service of a third party.

4. Delivering the website

For your browser to load the page, our server necessarily processes your IP address and the request itself (page address, browser identifier). The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is delivering the website.

We keep no access log: neither the web server of the website nor the proxy in front of it on our server records individual requests. In case of technical errors the web server may write an error message including the IP address to the container log. These logs rotate by size (3 × 10 MB) and are overwritten in the process.

5. No cookies, no tracking, no third-party content

This website sets no cookies, uses no analytics or tracking tools and loads no content from third parties: fonts, images and scripts come exclusively from our own server. There are no embedded videos, maps or social media elements. Links to other websites (such as the Shopify App Store or efflabs.de) are plain links; you only visit those sites when you click them.

6. Storage in the browser

The website appears light by default. If you choose another color scheme (dark or as set in your system), your browser stores this choice in its local storage (localStorage, key effware-color-mode). With the default “light” nothing is stored. The value never leaves your device and is not sent to us. The legal basis is § 25 (2) no. 2 TDDDG, as the storage is strictly necessary for the function you asked for. You can delete the entry at any time in your browser settings.

The notice pointing to the other language version reads your browser’s language setting only within the browser and stores nothing.

7. Encryption

The website is served exclusively via HTTPS (TLS). The certificate is issued by Let’s Encrypt; no visitor data is sent to Let’s Encrypt.

8. Contact by email

When you email us (for example at support@efflabs.de or info@efflabs.de), we process your email address, your name if given and the content of your message to answer your request. The legal basis is Art. 6 (1) (b) GDPR if the request concerns a contract or one of our apps, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering requests).

Our email runs on Google Workspace of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We have a data processing agreement with Google under Art. 28 GDPR. A transfer to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; for the USA there is therefore an adequacy decision of the EU Commission (Art. 45 GDPR).

We delete your request once it has been dealt with and no statutory retention obligations apply. We keep business correspondence for up to six or ten years under § 257 HGB and § 147 AO (German commercial and tax law).

Please do not send us data of your customers or staff by email that we do not need to handle your request.

9. Changes

We update this privacy policy when the website, the apps or the legal situation change. The version published here applies.