Privacy Policy
1. Controller
The controller responsible for data processing under the GDPR is: PUREGLOSS – Vladyslav Lysyi Rüdesheimer Ring 129 53879 Euskirchen, Germany Phone: +49 176 22038169 Email: info@puregloss.eu
2. General information
We take the protection of your personal data very seriously and treat it confidentially in accordance with the GDPR, BDSG-neu and TTDSG. Personal data is only collected to the extent necessary for the performance of our contractual and legal obligations or where you have expressly consented.
3. SSL/TLS encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can identify an encrypted connection by the "https://" address bar and the lock icon in your browser.
4. Server log files / hosting
This website is hosted by Emergent Labs, Inc. The provider automatically collects server log files containing your IP address (stored in truncated form), date/time of the request, requested URL, referrer URL, browser and operating system. This data is used exclusively for technical delivery, security and error analysis. Legal basis: Art. 6 (1) (f) GDPR. Storage period: max. 30 days.
5. Contact (email, phone, WhatsApp)
When you contact us by email, phone or messenger, we store your details (name, contact data, message) to process your enquiry and for follow-up questions. Legal basis: Art. 6 (1) (b) GDPR (pre-contract / contract) or Art. 6 (1) (f) GDPR (legitimate interest). Data is deleted once the purpose no longer applies, at the latest after applicable statutory retention periods (§ 257 HGB, § 147 AO – up to 10 years).
6. Quote/enquiry form
Via our form you can request a non-binding quote. We process: name, phone number, email (optional), city/location, vehicle/object details, uploaded photos, preferred contact channel and your message. Data is used solely to prepare the quote and coordinate an appointment. Legal basis: Art. 6 (1) (b) GDPR.
7. Booking form
For a binding booking we additionally collect your requested address (service location), date and time. This data is essential to perform our mobile detailing/cleaning service. Legal basis: Art. 6 (1) (b) GDPR.
8. WhatsApp
Our website contains buttons that open a direct chat via WhatsApp (WhatsApp Ireland Limited, part of the Meta group). Only when you actively click a WhatsApp button is a connection established to WhatsApp/Meta servers and your message and phone number transmitted to them. Part of the data processing takes place outside the EU (USA). Legal basis: Art. 6 (1) (a) GDPR (consent via active click) and Art. 6 (1) (b) GDPR. Details: https://www.whatsapp.com/legal/privacy-policy-eea.
9. PUREGLOSS CLUB (bonus programme)
When you join the PUREGLOSS CLUB we process: name (optional), email address, language preference, join timestamp and a system-generated voucher code. Purpose: issuing and managing the one-time €25 welcome voucher, providing the associated PDF, proof of consent and immediate customer communication regarding the bonus programme. Legal basis: Art. 6 (1) (a) and (b) GDPR. You may withdraw your consent at any time with effect for the future (info@puregloss.eu).
10. Newsletter / promotions
For sending promotional information we store your email address, the moment of consent, plus your IP address and browser user-agent as proof of consent. Subscription only happens after active confirmation of the GDPR consent checkbox. You can unsubscribe at any time by writing to info@puregloss.eu; we will delete your data immediately, no later than within 7 days. Legal basis: Art. 6 (1) (a) GDPR.
11. Email delivery (Resend)
We use Resend (Resend, Inc., San Francisco, CA, USA) to send transactional and promotional emails. Your email address, message content and delivery metadata (timestamps, bounce status) are processed. A data-processing agreement pursuant to Art. 28 GDPR is in place. Legal basis: Art. 6 (1) (b) and (f) GDPR. Transfer to a third country (USA) is safeguarded by EU standard contractual clauses under Art. 46 GDPR. Details: https://resend.com/legal/privacy-policy.
12. Cookies and local storage
This website uses only strictly necessary local storage ("localStorage") to ensure core functionality (language preference, CLUB popup state, consent preference). This data stays inside your browser and is never transmitted to us. NO marketing, tracking, analytics or third-party cookies are set. Legal basis: § 25 (2) No. 2 TTDSG (strictly necessary).
13. Fonts
For visual consistency we use the typeface "Cabinet Grotesk", delivered by Fontshare (Indian Type Foundry Pvt. Ltd., Ahmedabad, India). Loading the site establishes a connection to Fontshare's servers, during which your IP address may be transmitted. Legal basis: Art. 6 (1) (f) GDPR. Google Fonts are no longer used; all other typefaces are loaded from the user's operating system (system fonts), so no data transfer takes place.
14. Image material
This website contains before/after photos, portfolio images and stock photos. Personal identifiers (licence plates, individuals inside vehicles) are anonymised or removed before publication.
15. File uploads
Photos uploaded via our enquiry form are stored on our infrastructure and used solely to prepare your quote. Legal basis: Art. 6 (1) (b) GDPR. Deletion occurs at the latest 12 months after your enquiry is closed.
16. Recipients / third-party disclosure
Personal data is only shared with: our email service provider (Resend), our hosting provider (Emergent Labs, Inc.) and – if you use it – WhatsApp/Meta. All providers are contractually obliged to comply with the GDPR. There is NO transfer to any other third parties for advertising purposes.
17. Retention
Personal data is stored only as long as necessary for the purpose or as required by statutory retention obligations (typically 6 years under § 257 HGB, 10 years under § 147 AO for tax-relevant documents).
18. Your rights as a data subject
Under the GDPR you have the following rights: • access (Art. 15) • rectification (Art. 16) • erasure (Art. 17) • restriction (Art. 18) • data portability (Art. 20) • objection (Art. 21) • withdrawal of consent with effect for the future (Art. 7 (3)) To exercise your rights, an informal message to info@puregloss.eu is sufficient.
19. Right to complain to the supervisory authority
You have the right to lodge a complaint with a supervisory authority regarding the processing of your personal data. The competent authority for our registered office is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW) Kavalleriestraße 2-4, 40213 Düsseldorf Phone: +49 211 38424-0 Email: poststelle@ldi.nrw.de https://www.ldi.nrw.de
20. Updates
This privacy policy is currently valid. Due to updates on our website or changes in legal requirements it may be necessary to change this privacy policy. The latest version can always be viewed at https://puregloss.eu/datenschutz.
21. Signup security log (PUREGLOSS Club)
For every new PUREGLOSS Club signup we additionally store technical information for security, fraud prevention, spam prevention and abuse detection. This includes: your IP address, an approximate location (country, region, approximate city) derived from that IP address — never an exact position —, browser and device information (User-Agent, operating system, device type), and the signup timestamp. The location is always approximate and is not used to identify you individually. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing a secure, abuse-free service). This information is visible only internally and is not shared with third parties, except for the technically necessary IP geolocation service.