This is a courtesy translation. Only the German version is legally binding. View the German version →

Legal

PrivacyPolicy.

As of: 06/2026 · Applies to the website eywora.de and the Eywora platform.

1. Controller

The controller for data processing within the meaning of the GDPR (DSGVO) is:

signundsinn GmbH
Jean-Paul-Richter-Str. 3
81369 München
Germany

E-mail: info@eywora.com
Phone: +49 (0)89 215 2710 99

2. Definitions

This policy uses the terminology of the GDPR (in particular Art. 4 GDPR). "Personal data" means any information relating to an identified or identifiable natural person. "Processing" covers any operation performed on personal data (collection, storage, use, transfer, deletion, etc.).

3. Legal bases

We process personal data on the following legal bases:

  • Art. 6(1)(a) GDPR (consent): where you have actively given consent (e.g. via the contact form).
  • Art. 6(1)(b) GDPR (performance of a contract): to provide our platform services and pre-contractual steps.
  • Art. 6(1)(c) GDPR (legal obligation): e.g. tax retention obligations.
  • Art. 6(1)(f) GDPR (legitimate interest): e.g. to ensure the secure operation of our website.

4. Hosting and server logs

This website is hosted in Germany. Each request generates technical log data required for secure and stable operation:

  • IP address (truncated, deleted after 7 days)
  • Date and time of the request
  • URL requested and HTTP status code
  • User-agent (browser, operating system)

The legal basis is Art. 6(1)(f) GDPR. No merging with other data sources takes place.

5. Contact and forms

If you contact us via our contact or demo form, by e-mail or by phone, we process the data you provide (name, e-mail, phone number, company, content of your message) to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual) or Art. 6(1)(f) GDPR.

We store enquiries for as long as is necessary to process them, at most until the end of the statutory retention periods.

6. Cookies and tracking

This website uses only technically necessary cookies (e.g. to store your theme preference). No third-party tracking, no cross-site tracking, no re-targeting takes place.

Should we use analytical cookies in the future, we will obtain your consent via a consent banner. Until then: no consent required, as only essential storage is used.

7. Web analytics

We do not use external web analytics services such as Google Analytics, Hotjar or comparable tools. We optionally operate a self-hosted Matomo (anonymised IP, no cookies, no profiling). If this is active, we will indicate this here separately.

8. Processing within the Eywora platform

As a customer of the Eywora platform, you make product and catalogue data available to us. Processing takes place exclusively on your instructions on the basis of a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR.

Eywora does not collect any data on the shop's end customers. Search queries are processed anonymously (no user IDs, no IP storage in analytics modules). Analytics aggregates are produced exclusively at the search level, not at the person level.

9. Data Processing

Insofar as we process personal data of our customers in the context of our platform services, this takes place on the basis of a Data Processing Agreement. The standard DPA text can be found at Data Processing Agreement.

10. Transfers to third countries

We process data exclusively on servers located in Germany. No transfers to third countries (outside the EU/EEA) take place.

Should we need to engage service providers in individual cases whose processing takes place outside the EU, this will only happen on the basis of EU Standard Contractual Clauses (SCC) and with additional protective measures.

11. Retention periods

We store personal data only for as long as is necessary for the respective processing purpose:

  • Server logs: 7 days
  • Contact enquiries: until completion of processing, at most 12 months
  • Contract data: until the end of statutory retention obligations (usually 10 years)
  • Newsletter subscriptions: until unsubscribe

12. Your rights

You have the right at any time to:

  • Access to your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on legitimate interest (Art. 21 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal e-mail to info@eywora.com is sufficient to exercise your rights.

13. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority about the processing of your personal data. The competent authority is the supervisory authority of the federal state of your habitual residence, or the supervisory authority at our registered office: Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach.

14. Changes to this policy

We reserve the right to adapt this privacy policy when legal requirements or our processing activities change. The current version is indicated by the date above.