Privacy policy

This is a courtesy translation. In case of doubt, the German version at Deutsch is legally binding.

1. Controller

product.republic PRC GmbH, Bischofswerder Weg 9, 16559 Liebenwalde, Germany.
Email: order@floss-cards.de · Phone: +49 151 75023344.

2. Hosting

This website is hosted with Railway (provider in the EU region). When you visit, technically necessary server log data is processed (IP address, date/time, requested resource, browser/OS) to ensure delivery and security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

3. Configurator & order enquiry

When you send an enquiry via the configurator, we process the data you provide (e.g. name/practice, email, phone, chosen configuration, uploaded artwork/logos and a rendered preview image). Purpose: processing your enquiry and preparing a quote. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures/contract). Uploaded files are stored for order processing and deleted once the purpose ceases to apply or in accordance with statutory retention periods.

4. Email dispatch

We send order and contact confirmations by email via an SMTP service provider. The data required for dispatch is processed in the process.

5. AI adviser (chatbot)

Our AI adviser answers questions about Floss Cards. The messages you enter are transmitted to our AI service provider (Anthropic) to generate an answer and processed there. Please do not enter sensitive personal data in the chat. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in efficient advice). Any transfer to third countries takes place on the basis of appropriate safeguards (e.g. EU standard contractual clauses).

6. Marketing automation & language preference

To process enquiries and measure the reach of the ordering process, event data (e.g. submission/abandonment of a configuration) may be transmitted to an automation tool (Make.com) and to our internal dashboard. The language version of the website you used is stored as well, so that replies, confirmations and — where you have consented — newsletters are sent in the same language. Where procedures requiring consent are used for this, they take place only with your consent (Art. 6(1)(a) GDPR).

7. Web analytics (optional)

Where activated, we use Google Analytics 4 and Microsoft Clarity (Microsoft Ireland Operations Ltd.; heatmaps and session recordings to improve user guidance) only on the basis of your consent (Art. 6(1)(a) GDPR). Data may be transferred to the USA in the process (Art. 46 GDPR, EU standard contractual clauses or Data Privacy Framework). You can withdraw your consent at any time with effect for the future.

8. Cookies

We only use technically necessary means. Cookies/services requiring consent are loaded only after you have agreed.

9. Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability and objection. You can withdraw consent you have given at any time. You also have the right to lodge a complaint with a data protection supervisory authority. Please contact order@floss-cards.de.