Privacy policy

This is a courtesy translation. In case of doubt, the German version at Deutsch is legally binding.

1. Controller

product.republic PRC GmbH, Bischofswerder Weg 9, 16559 Liebenwalde, Germany.
Email: order@floss-cards.de · Phone: +49 151 75023344.
Data protection officer: Tanya Teibtner, email: datenschutz@floss-cards.de

2. Hosting

This website is hosted with Railway (provider in the EU region). When you visit, technically necessary server log data is processed (IP address, date/time, requested resource, browser/OS) to ensure delivery and security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

3. Configurator & order enquiry

When you send an enquiry via the configurator, we process the data you provide (e.g. name/practice, email, phone, chosen configuration, uploaded artwork/logos and a rendered preview image). Purpose: processing your enquiry and preparing a quote. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures/contract). Uploaded files are stored for order processing and deleted once the purpose ceases to apply or in accordance with statutory retention periods. If you write to us in a language other than German, we translate your enquiry, your emails and our replies with the help of our AI service provider (Anthropic); only the text of the message is transmitted. The legal basis is likewise Art. 6(1)(b) GDPR; any transfer to third countries takes place on the basis of appropriate safeguards (e.g. EU standard contractual clauses).

When you open the configurator or the enquiry form, we evaluate your IP address in order to suggest a suitable delivery country and the corresponding shipping costs. The country is determined exclusively in the working memory of our own server, hosted by Railway in the EU, using the locally stored “IP to Country Lite” database from DB-IP (licence: CC BY 4.0). For this function, neither the IP address nor the result is stored, no cookies are set and no data is transmitted to DB-IP or any other external geolocation service. If the country cannot be determined, we use your browser language instead. You can change the suggested delivery country at any time. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is to display suitable shipping information.

4. Email dispatch

We send order and contact confirmations by email via an SMTP service provider. The data required for dispatch is processed in the process.

5. AI adviser (chatbot)

Our AI adviser answers questions about Floss Cards. The messages you enter are transmitted to our AI service provider (Anthropic) to generate an answer and processed there. Please do not enter sensitive personal data in the chat. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in efficient advice). Any transfer to third countries takes place on the basis of appropriate safeguards (e.g. EU standard contractual clauses).

6. Marketing automation & language preference

To process enquiries and measure the reach of the ordering process, event data (e.g. submission/abandonment of a configuration) may be transmitted to an automation tool (Make.com) and to our internal dashboard. The language version of the website you used is stored as well, so that replies, confirmations and — where you have consented — newsletters are sent in the same language. Where procedures requiring consent are used for this, they take place only with your consent (Art. 6(1)(a) GDPR).

7. Web analytics (optional)

Where activated, we use Google Analytics 4 and Microsoft Clarity (Microsoft Ireland Operations Ltd.; heatmaps and session recordings to improve user guidance) only on the basis of your consent (Art. 6(1)(a) GDPR). Data may be transferred to the USA in the process (Art. 46 GDPR, EU standard contractual clauses or Data Privacy Framework). You can withdraw your consent at any time with effect for the future.

8. Cookies

We only use technically necessary means. Cookies/services requiring consent are loaded only after you have agreed.

9. Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability and objection. You can withdraw consent you have given at any time. You also have the right to lodge a complaint with a data protection supervisory authority. Please contact datenschutz@floss-cards.de.