Privacy

This notice explains how SINEE GmbH processes personal data in connection with babicztools.com, orders, customer accounts, licence delivery and activation. It also applies where the BABICZ TOOLS software communicates with our licence provider during activation or trial registration.

Controller and contact

The controller within the meaning of Article 4(7) GDPR is SINEE GmbH, Am Hans Teich 4, 51674 Wiehl, Germany. Email: info@sinee.de. Phone: +49 2262 717 50 46. See the Imprint for company details.

Hosting and technical access data (Vercel)

Our website is hosted through Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you access the website, technical request information may be processed, including your IP address, date and time of access, the URL requested and browser or device information. This is necessary to deliver pages, maintain availability and protect against abuse and attacks.

The legal basis is our legitimate interest in providing a functional, secure website (Article 6(1)(f) GDPR). Vercel may process data as our service provider. Vercel is based in the United States. Where personal data are transferred to the United States, the EU-U.S. Data Privacy Framework, under which Vercel is certified, may be used for covered transfers; Vercel also describes the use of EU Standard Contractual Clauses where applicable. Details: Vercel privacy notice.

Shop, checkout and customer account (Shopware)

To process orders for BABICZ PRE and BABICZ BUS, we use the details you provide at checkout, such as your name, email address, billing address and order information. We use these data to establish and perform the contract, issue invoices, deliver the licence and provide order-related support (Article 6(1)(b) GDPR). Data necessary to fulfil tax, accounting and record-keeping duties are also processed pursuant to Article 6(1)(c) GDPR.

Orders and customer accounts are managed through our Shopware system connected with sinee.de. The same customer account can be used for SINEE shops. Account data are kept while the account is active and as needed for ongoing licence management. Order, invoice and payment documentation is retained in accordance with applicable tax and commercial law, depending on the category of record, generally for six, eight or ten years. Longer retention may be necessary for the establishment, exercise or defence of legal claims. Otherwise the data are deleted when they are no longer required for their purpose.

Payment processing (PayPal)

Payments are processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. We transmit the information required for the payment transaction, including the payment amount and an order identifier. PayPal processes payment data, such as card details entered on its payment page, under its own responsibility and privacy rules. The legal basis for our use of payment information is Article 6(1)(b) GDPR. For details, see PayPal's privacy statement.

Transactional emails (Amazon SES)

We use Amazon Simple Email Service (Amazon SES), an AWS service, to send login codes, order confirmations, serial numbers and other emails needed to perform our contract with you. For this purpose, your email address, message contents and necessary delivery metadata are processed. The legal basis is Article 6(1)(b) GDPR. To the extent processing is necessary to comply with legal notification duties, Article 6(1)(c) GDPR also applies.

The AWS provider for European customers is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. We use the Frankfurt, Germany (eu-central-1) AWS region for Amazon SES. The AWS Data Processing Addendum forms part of the AWS Service Terms. Access to certain operational or account data from outside the European Economic Area cannot be categorically excluded; AWS provides contractual safeguards, including EU Standard Contractual Clauses where applicable. See AWS privacy notice and AWS Service Terms.

Licence issue, activation and trial registration (KEYZY)

We use the external licensing service KEYZY, LLC (Keyzy) to issue serial numbers, administer activations and validate trial licences. For the issuance of licences, our shop transfers the relevant product identifier and order reference to Keyzy. When you activate the plug-in or register for a trial, the software communicates directly with Keyzy to check the licence. In this process, the licence or serial number and, for trials, the name and email address entered for registration are transmitted. Technical connection and device information may also be processed in connection with requests to the activation service.

Keyzy is a provider based in the United States, and licence-related data may be processed there. We use the service to provide, activate and administer software licences (Article 6(1)(b) GDPR). For information about Keyzy and the data processing it carries out, see Keyzy privacy policy. You can also contact us at info@sinee.de with questions about the processing and any applicable international transfer safeguards.

Online withdrawal

If you use our online withdrawal function, we process the information you enter to identify your contract, receive and document your withdrawal and send you an acknowledgement. This includes your name, contact email address, the order information you provide and the content and receipt timestamp of your statement. Processing required by law is based on Article 6(1)(c) GDPR; any related reimbursement processing is based on Article 6(1)(b) or (c) GDPR as applicable. Confirmation emails are sent through the service described above. Withdrawal declarations and acknowledgements are kept for the period required to process the request, comply with applicable retention obligations, and document the handling of the withdrawal in the event of legal claims.

Contact by email

If you contact us by email, we process your address and message to respond to your request. The legal basis is Article 6(1)(b) GDPR where the request concerns a contract or steps before a contract and otherwise our legitimate interest in responding to inquiries (Article 6(1)(f) GDPR). Messages are deleted when no longer required for that purpose and when relevant statutory retention requirements permit deletion.

Cookies and similar technologies

The site uses cookies or comparable browser storage required for account authentication and the functions requested by customers. The email sign-in process uses a six-digit verification code, with temporary verification data kept for ten minutes, and a login session that can remain active for up to 90 days. The strictly necessary storage serves account access and security, not personalised advertising. Consent is not required for storage that is strictly necessary for the service requested (§ 25(2) TDDDG). The processing of related personal data is based on Article 6(1)(b) GDPR and, for security purposes, Article 6(1)(f) GDPR. The website does not intentionally deploy advertising tracking tools.

Your rights

Subject to the applicable statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection to processing based on legitimate interests (Article 21). Where processing is based on consent, you may withdraw that consent at any time with effect for the future (Article 7(3)).

You can exercise your rights by contacting info@sinee.de. You also have the right to complain to a data protection supervisory authority under Article 77 GDPR. Our competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany (ldi.nrw.de). You may also contact another competent authority, for example in your country of residence.

Certain information, such as a valid email address and billing details, is contractually necessary to complete a purchase. If it is not provided, we cannot process the order. We do not use the personal data described in this notice to make decisions based solely on automated processing that produce legal or similarly significant effects within the meaning of Article 22 GDPR.