Services Gallery Process About Contact Account Request a quote
DE EN
Home/Privacy
Legal

Privacy policy

Please note: this English text is a translation provided for convenience. Only the German version is legally binding: Datenschutzerklärung. Where the two differ, the German wording applies.

1. Controller

The controller for the processing of data on this website is:

Kathrin Pacher · KP Luxury Engraving
Oberhoferstraße 7, 87471 Durach, Germany
E-mail: info@luxuryengraving.de

2. General information on data processing

Protecting your personal data matters to me. I process your data solely on the basis of the applicable law (GDPR, BDSG — the German Federal Data Protection Act). Personal data are collected only where this is necessary in order to provide the website and my services, or where you have given your consent.

3. Access data / server log files

When you open this website, the hosting provider automatically stores information in what are known as server log files, transmitted by your browser. These are in particular:

  • IP address (shortened/anonymised where possible)
  • date and time of access
  • page or file requested, and the volume of data transferred
  • browser type and operating system used
  • referrer URL

This processing serves to keep the website running without disruption and to keep it secure. The legal basis is legitimate interest under Art. 6 (1)(f) GDPR.

4. Getting in touch

If you send me a message through the contact form, by e-mail, by telephone or via WhatsApp, I process the data you provide (for example your name, e-mail address, telephone number and the content of your message) in order to deal with your enquiry. The legal basis is Art. 6 (1)(b) GDPR (steps taken prior to entering into a contract) or Art. 6 (1)(f) GDPR (legitimate interest in replying).

5. Request and quote form

The request form lets you tell me what you would like engraved. In doing so I process the data you provide (the object selected, your description, any photographs uploaded, the quantity, a delivery or postal address where applicable, and your contact details) in order to prepare an individual quote for you and to carry out the order. The legal basis is Art. 6 (1)(b) GDPR. The images you upload are used solely to deal with your request and are not passed on to third parties. Request data and photographs are deleted as soon as they are no longer needed for that purpose, provided no statutory retention obligations (for invoices and business records, for instance) prevent this. You can delete templates stored in your customer account yourself at any time.

6. Customer account

You may set up a customer account. For this I process your name, your e-mail address (your login identifier), optionally your telephone number and — once you accept a quote — your invoicing address, together with a password chosen by you (stored only as a cryptographic hash) and the templates and images you upload. These data serve to administer your account, your requests and your orders. The legal basis is Art. 6 (1)(b) GDPR. You can delete your account yourself at any time; invoicing data are retained because statutory retention obligations require it (8 years), and your requests are anonymised.

6b. Gift vouchers

When a gift voucher is ordered we process your name and e-mail address as the purchaser, together with the voucher amount and the voucher code generated. The legal basis is performance of the contract (Art. 6 (1)(b) GDPR).

You may optionally give the name of the person receiving the gift and a personal message. These details do not come from the recipient themselves; we use them solely to produce the voucher and do not pass them on to any third party (Art. 14 GDPR). If you would rather not provide them, simply leave the fields empty — the voucher works without them.

6c. Protection against misuse (rate limiting)

To prevent automated bulk requests, attempts to guess passwords and misuse of our forms, we count the number of operations per IP address within a limited window of time. The IP address is stored for the duration of that window (between 15 minutes and a few hours, depending on the operation) and is then deleted automatically. The legal basis is our legitimate interest in the security and availability of this website (Art. 6 (1)(f) GDPR). The data are not combined with other data, and your behaviour is not analysed.

7. Hosting

This website is operated by an external service provider (the host). The host processes the data arising through the website (in particular server log files and form data) on our behalf. A data processing agreement under Art. 28 GDPR is concluded with the host. The legal basis is Art. 6 (1)(f) GDPR.

8. Fonts

This website uses web fonts to present the pages consistently. These fonts are stored entirely on our own server and are loaded from there. No connection to third-party servers is made in the process — in particular, no connection to Google Fonts is established, and your IP address is not transmitted to Google or to any other provider.

9. Cookies

This website uses no tracking or marketing cookies. Only technically necessary data are processed, namely those required to operate the website and — if you use an account — to log you in.

9a. Anonymous visitor statistics

To improve what we offer we collect anonymous visitor statistics (legal basis: Art. 6 (1)(f) GDPR — legitimate interest in measuring reach). The method is deliberately data-minimising: no cookies are set and no information is stored on or read from your device. Your IP address is not stored; instead a check value that changes daily and cannot be reversed is generated on the server, which makes recognition beyond the day in question technically impossible. All that is recorded is the pages opened, the areas clicked, the approximate country of origin (derived from your browser's time zone), the type of device and the referring website. The data are not combined with other data, no profiles are created and nothing is passed on to third parties. Visitors whose browser sends a “Do Not Track” signal are excluded from the count entirely. You may object to this processing at any time (Art. 21 GDPR) — please use the contact details given in the imprint, or switch on “Do Not Track” in your browser.

10. Disclosure of data

Your data are passed to third parties only where this is necessary in order to perform the contract — for example to a delivery company so that your finished engraving can be sent to you — or where you have consented. No disclosure beyond that takes place, and your data are never sold.

11. Retention period

I store personal data only for as long as they are needed for the purpose in question, or for as long as statutory retention periods (under commercial and tax law, for instance) require. The data are deleted thereafter.

12. Your rights

You have the right at any time to:

  • access to the data stored about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure of your data (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to the processing (Art. 21 GDPR)
  • withdraw consent you have given, with effect for the future

An informal message to info@luxuryengraving.de is all it takes to exercise these rights.

13. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. One of the authorities responsible is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA — the Bavarian data protection supervisory authority).

14. SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption. You can tell that a connection is encrypted by the “https://” in your browser's address bar.

15. Being up to date, and changes

This privacy policy will be amended as soon as the legal position or the processing operations change (for example once the hosting provider has been settled on).

Last updated: October 2026