Privacy policy

1. Controller

Roboterwerk GmbH, Haiming 12, 83119 Obing, Germany, email info@roboterwerk.de, phone +49 8624 891864. We have not appointed a data protection officer.

2. Your rights

Right to object: Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). You can withdraw any consent at any time with effect for the future. You may lodge a complaint with a supervisory authority, for example the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany, or the authority in your country of residence.

3. Shop platform (Shopify)

Our shop runs on Shopify; the provider for European merchants is Shopify International Limited, Dublin, Ireland. When you visit the shop, Shopify processes technically necessary data (e.g. IP address, browser data, time of access) and, when you order, your order data. Data may be transferred to countries outside the EU, in particular Canada and the USA, on the basis of adequacy decisions or standard contractual clauses. Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(f) GDPR (legitimate interest in operating the shop securely).

4. Orders

To process your order we need your name, address, email address and order details. Legal basis: Art. 6(1)(b) GDPR. We keep invoices and accounting records for 8 years and commercial books for 10 years because of commercial and tax law obligations (§ 147 AO, § 257 HGB; Art. 6(1)(c) GDPR).

5. Engraving and printing details, uploaded files

For ID plates we collect your e-ID and optional text lines (e.g. name, phone). For the drone licence card you upload your aviation authority certificate as a PDF and, for the photo version, a photo of yourself. For the registration card you enter your details (registration number, name, insurance policy, year of issue) directly in the input fields. We use this data solely to produce your order (Art. 6(1)(b) GDPR). The input fields are provided by the app "Infinite Options" by ShopPad Inc. (USA), the file upload by the app "Upload-Lift" by Cloudlift. Both providers process the data on our behalf; data may also be transferred to countries outside the EU, in particular the USA. We delete uploaded files and photos 4 weeks after your order has been shipped.

6. Payment

Depending on the payment method you choose, we pass the necessary payment data to the provider: Shopify Payments (credit card, Apple Pay, Google Pay and others), PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg, or Klarna Bank AB (publ), Stockholm. These providers partly act as independent controllers and may carry out credit or fraud checks. Legal basis: Art. 6(1)(b) GDPR.

7. Shipping

For delivery we pass your name and address to Deutsche Post / DHL (Art. 6(1)(b) GDPR). We do not pass your email address to DHL; for shipments with tracking, you receive the tracking number from us by email together with your invoice.

8. Invoices

We create and send invoices with easybill (easybill GmbH, Düsselstraße 21, 41564 Kaarst, Germany); your order and invoice data, including your email address and tracking number, are transmitted for this purpose (Art. 6(1)(b) and (c) GDPR).

8a. Withdrawal via our website

For the withdrawal function we use the app "EU Widerrufs-Button" by 401layers UG (haftungsbeschränkt), Dorothea-Erxleben-Straße 1a, 40721 Hilden, Germany, as processor (Art. 28 GDPR). It processes your name, email address, order number, your withdrawal details as well as timestamps and technical data (e.g. IP address) to prove timely receipt. Data is stored in the EU and deleted automatically after 6 months. Legal basis: Art. 6(1)(c) GDPR (legal obligation under § 356a BGB).

9. Cookies and consent

We set technically necessary cookies (e.g. for the cart) without consent. All other cookies and measurement services are only loaded after you consent via our cookie banner (Art. 6(1)(a) GDPR, § 25 TDDDG). You can change your choice at any time via "Cookie settings" in the footer.

10. Advertising and statistics (only with consent)

  • Meta Pixel (Meta Platforms Ireland Ltd., Dublin): measures whether visitors come from Facebook or Instagram ads and make a purchase, and enables relevant advertising. We are jointly responsible with Meta for collecting and transmitting the data to Meta (Art. 26 GDPR). Data may be transferred to the USA (EU-US Data Privacy Framework).
  • Google tag / Google Ads (Google Ireland Ltd., Dublin): measures the success of Google ads (conversion tracking). Data may be transferred to the USA (EU-US Data Privacy Framework).
  • Google Analytics 4 (Google Ireland Ltd., Dublin): creates statistics on how visitors use our shop (e.g. pages viewed, origin, device). Google Analytics is only loaded if you have consented to statistics or marketing; without consent, no analytics cookies are set. Data may be transferred to the USA (EU-US Data Privacy Framework).

11. Contact

If you contact us, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR). To prevent spam and abuse, Shopify uses Google reCAPTCHA in contact and comment forms and on the pages for login, account creation and password reset (Google Ireland Ltd., Dublin; Art. 6(1)(f) GDPR, legitimate interest in preventing spam). Data may be transferred to the USA.

12. Retention

We store personal data only as long as necessary for the respective purpose or as required by statutory retention periods.

13. Obligation to provide data

The data required for ordering, engraving and printing are necessary; without them we cannot perform the contract. We do not use automated decision-making within the meaning of Art. 22 GDPR; for checks by payment providers, please see their privacy notices.