Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. Data protection officer

The requirements for appointing a data protection officer under Art. 37 GDPR and § 38 BDSG are currently not met. Please send any data protection questions to the contact details in section 1.

3. Hosting and server log files

This website is hosted on the web space of STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit it, STRATO processes technically necessary connection data – in particular IP address, date and time of the request, requested resource, referrer and user agent – to deliver the pages and to operate the server securely.

Processing this data is technically necessary to deliver the website. Server log files are only stored for as long as necessary for these purposes and are deleted afterwards.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and reliable provision of the website. A data processing agreement under Art. 28 GDPR is in place with STRATO. Processing takes place in data centres in Germany.

4. Requests via the consultation form and by email

When you contact us via the consultation form or by email, we process your name, email address and message and – if you choose to provide them – your shop URL, Shopware version and the extension you are interested in. When sent via the form, the selected language and the page from which you sent it are also transmitted, so that we can assign your request correctly.

We use this data solely to answer your request and, where applicable, to prepare an offer. The legal basis is Art. 6(1)(b) GDPR where your request is aimed at concluding a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering requests).

When you submit the form, it opens your email program with a prefilled message to hello@scalableloops.ai. Data is only transmitted once you send this email yourself; it is sent via your own email provider.

Our mailbox is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Workspace). A data processing agreement under Art. 28 GDPR is in place with Google. Processing by Google LLC in the USA cannot be ruled out; it is safeguarded by the certification under the EU-U.S. Data Privacy Framework (Art. 45 GDPR) and by standard contractual clauses (Art. 46 GDPR).

We delete requests that do not lead to an order no later than 12 months after they have been fully dealt with, unless statutory retention obligations apply. If your request leads to an order, we retain business letters received and sent for six years and accounting vouchers (e.g. invoices) for eight years (§ 257 HGB, § 147 AO). The period begins at the end of the calendar year in which the document was received, sent or created.

Providing your data is neither a statutory nor a contractual requirement. Without your name, email address and message, however, we cannot answer your request.

5. No cookies, no analytics, no tracking

This website sets no cookies, stores no information in your browser (for example in local storage) and uses no analytics, advertising or tracking services. Beyond the technically necessary retrieval of the pages, there is no access to your device within the meaning of § 25 TDDDG.

The product previews shown on this website – such as cookie banners, reviews or video players – are illustrations only. They load no third-party content and transmit no data.

6. Fonts

The fonts used are part of this website and are delivered together with it from our web space at STRATO (section 3). No connection to Google Fonts or other font providers is made.

7. Links to other websites

This website contains links to external services, for example the Shopware Store of shopware AG. Data is only transmitted to the respective provider once you follow such a link; from then on, that provider’s privacy policy applies.

8. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). An informal message to the contact details in section 1 is sufficient.

No automated decision-making, including profiling (Art. 22 GDPR), takes place.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

10. Changes

We update this privacy policy when the website or the legal requirements change. The version published here applies.