PRIVACY POLICY
1. CONTROLLER
Controller within the meaning of the EU General Data Protection Regulation (GDPR):
OnlineBuilders LLC
c/o Legalinc Corporate Services Inc.
131 Continental Dr, Suite 305
Newark, DE 19713, USA
Registered in the State of Delaware, USA · File No. 10291236
German contact address:
Bad Jungbrunnen · c/o Block Services
Stuttgarter Str. 106
70736 Fellbach, Germany
E-mail: [email protected]
“Bad Jungbrunnen” is a project of OnlineBuilders LLC. Please send privacy requests by e-mail or by post to the German contact address.
2. THE SHORT VERSION
We take the protection of your data seriously — same policy as our bath salt: 100% pure. This website uses no tracking or marketing cookies, no analytics or advertising services, and does not share data for advertising purposes. Fonts are hosted locally. We only process the data that is technically required to run the website.
3. HOSTING & SERVER LOG FILES
This website is hosted on servers operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre located in Germany. When you visit the website, the server automatically processes technical access data (server log files): IP address, date and time of access, requested page or file, transferred data volume, referrer URL, browser type and version, and operating system.
This processing ensures the reliable operation, stability and security of the website (legal basis: Art. 6(1)(f) GDPR — legitimate interest). Log data is not merged with other data sources and is deleted once it is no longer required for these purposes.
4. CONTENT DELIVERY & PROTECTION SERVICE (CLOUDFLARE)
We use Cloudflare, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, as a DNS, proxy and security service. For technical reasons, all requests to this website are routed through Cloudflare's infrastructure; in doing so, Cloudflare processes connection data such as your IP address and technical request headers in order to deliver the website faster and protect it against attacks (e.g. DDoS).
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, high-performance operation). Cloudflare is certified under the EU-U.S. Data Privacy Framework; in addition, EU standard contractual clauses are in place. More information: www.cloudflare.com/privacypolicy/
5. COOKIES
This website sets no tracking, analytics or marketing cookies. It only uses one technically required cookie (“NEXT_LOCALE”) that stores your language preference (German/English). This cookie is necessary for the function you request (Section 25(2) no. 2 of the German TDDDG, Art. 6(1)(f) GDPR) and contains no personal profiles. A cookie banner is therefore not required.
6. FONTS
The fonts used on this site (Bebas Neue, Archivo, Space Mono) are hosted locally on our server. No connection to Google or other font providers is established when you visit this website, and no data is transferred to third parties in this respect.
7. CONTACT BY E-MAIL
If you contact us by e-mail, we process the information you provide (e-mail address, content of your message) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a (prospective) contract, and otherwise Art. 6(1)(f) GDPR. The data is deleted once your enquiry has been dealt with conclusively, unless statutory retention obligations apply.
8. DATA TRANSFERS TO THIRD COUNTRIES
The website itself is hosted on servers in Germany. As the controller is based in the USA and Cloudflare, a US provider, is used, data may be transferred to the USA. Such transfers are based on the EU-U.S. Data Privacy Framework and/or the EU Commission's standard contractual clauses (Art. 44 et seq. GDPR).
9. STORAGE PERIOD
Personal data is stored only for as long as necessary for the purposes stated above or as required by statutory retention obligations. It is then deleted or anonymised.
10. YOUR RIGHTS
Under the GDPR you have the following rights:
· Access to your stored data (Art. 15 GDPR)
· Rectification of inaccurate data (Art. 16 GDPR)
· Erasure (“right to be forgotten”, Art. 17 GDPR)
· Restriction of processing (Art. 18 GDPR)
· Data portability (Art. 20 GDPR)
· Objection to processing based on legitimate interests (Art. 21 GDPR)
· Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
An informal e-mail to [email protected] is sufficient to exercise these rights.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) — for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (LfDI), Lautenschlagerstraße 20, 70173 Stuttgart, Germany, or the supervisory authority of your habitual residence.
11. RIGHT TO OBJECT (ART. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR. We will then no longer process the data unless there are compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
12. VERSION & CHANGES
This privacy policy is effective as of July 2026. We will update it as soon as the website changes (e.g. launch of the online shop with cart, payment and shipping providers) or the legal situation requires it.