Privacy Policy

We process personal data only to the extent necessary to provide this website or to enable communication with visitors. This privacy policy explains which data we process, the legal basis for such processing and the rights you are entitled to. No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

Provider: IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. This website is hosted via the IONOS Deploy Now service on servers located in Germany.

Purpose: technical provision, stability and security of the website.

Legal basis: Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the error-free presentation and the security of the website.

Data processed: IP address, date and time of access, the file or URL accessed, the amount of data transferred, referrer URL, browser type and version, and the operating system.

Storage period: The server log files are deleted by IONOS at the latest after 8 weeks, unless security-relevant events require longer retention. The IP addresses are only stored in shortened form.

Recipient: IONOS SE as hosting provider and processor under Art. 28 GDPR.

Visitor statistics: From these server log files, IONOS produces aggregated, log-based visitor statistics (no cookies, no client-side script). The IP address is anonymized immediately after transmission and processed without personal reference. No information beyond the log file data listed above is collected.

Domain & DNS: The domain is registered with united domains AG, Gautinger Straße 10, 82319 Starnberg, Germany. DNS queries for this domain are answered by the name servers of IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.

Fonts: All fonts used on this website (Ubuntu, Roboto) are served locally from our own server. No connection to third-party servers is made, in particular not to Google Fonts; no personal data is transmitted to third parties.

Further information: https://www.ionos.de/terms-gtc/terms-privacy/

Purpose: Handling and responding to your inquiry when you contact us by email or through a contact form. After successful submission, the confirmation is shown to you directly on the page; no confirmation email is sent.

Legal basis: Art. 6 para. 1 lit. f GDPR, legitimate interest in communication, supplemented by Art. 6 para. 1 lit. b GDPR, pre-contractual measures.

Data processed: Name, email address, optionally company, and content of your message.

Delivery: The form message is delivered to us by email via the infrastructure of united domains AG (email hosting).

Storage period: deletion after the communication is concluded, at the latest after 6 months, unless statutory retention obligations apply.

Purpose: Protecting the contact form against automated submissions (spam).

Method: The form uses a server-side method without any third-party services: a field that is invisible to humans (“honeypot”), a check of the time between page load and submission, a limit on the frequency of requests per IP address, and a check of the details for typical spam patterns (such as known spam names and links). No cookies are set and no data is transferred to third parties.

Legal basis: Art. 6 para. 1 lit. f GDPR, legitimate interest in the security and functionality of the form.

Data processed: the details you enter in the form (see section 3) and a technical timestamp of the page load and, to limit the frequency of requests, a hash value of your IP address that is only held temporarily on the server and is automatically deleted at the latest on the next form request after one hour has passed. No separate storage takes place beyond the handling of your inquiry.

For video calls with prospects and partners we use either Microsoft Teams or Google Meet, depending on the participants' preference.

Provider (Microsoft Teams): Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Provider (Google Meet): Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose: conducting online meetings.

Legal basis: Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR for general communication.

Data processed: name, email address, meeting content, IP address, and technical connection data.

Third country transfer: a transfer to servers in third countries, in particular the USA, cannot be excluded. Microsoft Corporation and Google LLC are certified under the EU-US Data Privacy Framework, so an adequacy decision by the European Commission applies to transfers to the USA (Art. 45 GDPR). In addition, both providers offer EU Standard Contractual Clauses under Art. 46 GDPR.

Further information: https://www.microsoft.com/en-us/privacy/privacystatement · https://policies.google.com/privacy

Purpose: without your consent, this website does not set any cookies. Cookies for web analytics (see section 7) are only set with your active consent.

Technically necessary storage: to save your choice made in the consent banner, the entries rgs_consent and rgs_consent_timestamp are stored in your browser's local storage (not a cookie). They contain only your consent decision and the time of that decision. The entries are automatically deleted after 12 months and your choice is asked for again; until then they remain in place, unless you change your choice beforehand via the “Cookie Settings” link or delete the website's data yourself in your browser. The legal basis is Section 25(2) No. 2 TDDDG, as this storage is strictly necessary to honour your decision, together with Art. 6 para. 1 lit. c GDPR in conjunction with Art. 7 para. 1 GDPR (evidence of consent).

Process: on your first visit to this website, a consent banner appears where you can specify which categories of cookies you wish to allow.

Withdrawal: you can change or withdraw your choice at any time via the Cookie Settings link at the bottom of the page. The lawfulness of processing carried out until withdrawal remains unaffected.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose: analyzing user behavior to improve the website and measure the performance of our content, if you have given your consent.

Legal basis: your consent under Art. 6 para. 1 lit. a GDPR in conjunction with Section 25(1) TDDDG.

Recipient: Google Ireland Limited as processor under the Google Data Processing Terms pursuant to Art. 28 GDPR, accepted on 09 July 2026.

Data processed: shortened IP address, device and browser information, pages visited, time spent, click paths, and a pseudonymous user identifier. No data is combined with other Google data.

Storage period: user data is automatically deleted after 14 months.

Third country transfer: Google generally processes the data of European users on servers within the EU. In the context of support access, a transfer to the USA cannot be fully excluded. Google LLC is certified under the EU-US Data Privacy Framework, so an adequacy decision by the European Commission applies to this (Art. 45 GDPR). The EU Standard Contractual Clauses under Art. 46 GDPR apply in addition.

Withdrawal: you can withdraw your consent at any time with future effect by opening the Cookie Settings link at the bottom of the page and changing your selection.

Further information: https://policies.google.com/privacy

The transmission of this website is encrypted (SSL / TLS). We implement appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.

Data subject rights: under the GDPR, you have the right to access under Art. 15, rectification under Art. 16, erasure under Art. 17, restriction of processing under Art. 18, and data portability under Art. 20. Your right to object under Art. 21 GDPR is described separately in section 10.

Contact for exercising your rights: datenschutz@retailgs.com

Right to complain: you have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR). The competent authority for us is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Postfach 10 29 32, 70025 Stuttgart, Germany. Email: poststelle@lfdi.bwl.de. Website: https://www.baden-wuerttemberg.datenschutz.de/

We may update this privacy policy if legal requirements, service providers or website functions change. The version published at the time of your visit applies.