Privacy Policy

1. Data controller

The data controller for this website is:
CIRBOXA GmbH, Rotdornweg 23A, 21224 Rosengarten, Germany
Email: info@cirboxa.com · Phone: +49 176 81510037

2. Hosting via Netlify

This website is hosted with Netlify, Inc. When you visit the site, technical access data such as IP address, date and time of access, browser information, and server log data are processed to ensure secure and stable operation (Art. 6(1)(f) GDPR).

3. Contact form (Netlify Forms)

If you use our contact form, the data you provide (first name, business email address, company, returns volume, plus optional details such as phone number, shop system, product category, current returns location, services needed, and message) is processed to handle your enquiry. Form submissions are technically processed via Netlify Forms. The legal basis is Art. 6(1)(b) GDPR (handling a request prior to a contract) and Art. 6(1)(f) GDPR (legitimate interest in efficient enquiry handling).

4. Appointment booking

If you use the appointment booking link, you will be redirected to Calendly, a service provided by Calendly LLC. Data processing there is governed by Calendly's Privacy Notice. Data is only transferred to Calendly after you open the external link.

5. Contact by email or phone

If you contact us by email or phone, your information is stored and processed to handle your enquiry (Art. 6(1)(b) and (f) GDPR).

6. Analytics and advertising tools

This website uses Google Ads conversion tracking provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The Google tag AW-991385249 is loaded on the website’s pages. After an enquiry has been successfully submitted through the contact form, a conversion is reported to Google Ads on the confirmation page. This is used to measure whether a visit leads to a relevant action, particularly a contact or lead enquiry. Technical information such as the page viewed, time of access, browser and device information, IP address and – depending on a previous advertising interaction and browser settings – advertising or click identifiers and cookies may be processed. CIRBOXA does not send names, email addresses or other information entered in the form to Google through the conversion event. Optional advertising storage and advertising-related data processing are controlled by your consent choice. Until you accept, the Google Consent Mode signals for advertising storage, advertising user data and personalised advertising remain denied; analytics storage also remains denied. Your choice is stored locally in your browser. You can change it at any time using “Privacy settings” in the footer. Further information about Google's processing of data is available in Google's Privacy Policy.

7. Retention period

Personal data is only stored for as long as necessary for the respective purpose or as required by statutory retention periods.

8. Your rights

You have the right to access, rectify, erase, and restrict the processing of your personal data, as well as a right to object to processing and a right to data portability. You also have the right to lodge a complaint with a data protection supervisory authority.

Note: This privacy policy has been updated based on the existing website content. For full legal certainty, we recommend a review by legal counsel specialised in data protection law.