Pilot Programme 2026: we are currently looking for our first retail partners in the DACH region. Get started →

Privacy Policy

1. General Information

We process personal data only to the extent necessary to provide this website or to enable communication with visitors. This privacy policy explains which data we process, the legal basis for such processing and the rights you are entitled to.

2. Website & Server Log Files

Provider: IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. This website is hosted via the IONOS Deploy Now service on servers located in Germany.

Purpose: technical provision, stability and security of the website.

Legal basis: Art. 6 para. 1 lit. f GDPR.

Data processed: IP address, date and time of access, the file or URL accessed, the amount of data transferred, referrer URL, browser type and version, and the operating system.

Storage period: a maximum of 7 days, after which the data is deleted or anonymized, unless security related events require longer retention.

Recipient: IONOS SE as hosting provider and processor under Art. 28 GDPR.

Visitor statistics: From these server log files, IONOS produces aggregated, log-based visitor statistics (no cookies, no client-side script). No information beyond the log file data listed above is collected.

Domain & DNS: The domain is registered with united domains AG, Gautinger Straße 10, 82319 Starnberg, Germany. DNS queries for this domain are answered by the name servers of IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.

Fonts: All fonts used on this website (Ubuntu, Roboto) are served locally from our own server. No connection to third-party servers is made, in particular not to Google Fonts; no personal data is transmitted to third parties.

Further information: https://www.ionos.de/terms-gtc/terms-privacy/

3. Contact

Purpose: Handling and responding to your inquiry when you contact us by email or through a contact form. After successful submission, you will automatically receive a confirmation email.

Legal basis: Art. 6 para. 1 lit. f GDPR, legitimate interest in communication, supplemented by Art. 6 para. 1 lit. b GDPR, pre-contractual measures.

Data processed: Name, email address, optionally company, and content of your message.

Delivery: The form message is delivered to us by email via the infrastructure of united domains AG (email hosting).

Storage period: deletion after the communication is concluded, at the latest after 6 months, unless statutory retention obligations apply.

4. Spam protection in the contact form

Purpose: Protecting the contact form against automated submissions (spam).

Method: The form uses a server-side method without any third-party services: a field that is invisible to humans (“honeypot”) and a check of the time between page load and submission. No cookies are set and no data is transferred to third parties.

Legal basis: Art. 6 para. 1 lit. f GDPR, legitimate interest in the security and functionality of the form.

Data processed: the details you enter in the form (see section 3) and a technical timestamp of the page load. No separate storage takes place beyond the handling of your inquiry.

5. Microsoft Teams

Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Purpose: conducting online meetings.

Legal basis: Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR for general communication.

Data processed: name, email address, meeting content, IP address, and technical connection data.

Third country transfer: a transfer to servers in third countries, for example the USA, cannot be excluded. Microsoft provides appropriate safeguards under Art. 46 GDPR, in particular standard contractual clauses.

Further information: https://www.microsoft.com/en-us/privacy/privacystatement

6. Cookies & Tracking

Purpose: technically necessary cookies ensure the operation of this website and are used without consent. Cookies beyond that, in particular for web analytics, are only set with your active consent.

Process: on your first visit to this website, a consent banner appears where you can specify which categories of cookies you wish to allow.

Withdrawal: you can change or withdraw your choice at any time via the Cookie Settings link at the bottom of the page. The lawfulness of processing carried out until withdrawal remains unaffected.

7. Google Analytics 4

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose: analyzing user behavior to improve the website and measure the performance of our content, if you have given your consent.

Legal basis: your consent under Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG.

Recipient: Google Ireland Limited as processor under the Google Data Processing Terms pursuant to Art. 28 GDPR, accepted on 09 July 2026.

Data processed: shortened IP address, device and browser information, pages visited, time spent, click paths, and a pseudonymous user identifier. No data is combined with other Google data.

Storage period: user data is automatically deleted after 14 months.

Third country transfer: Google generally processes the data of European users on servers within the EU. In the context of support access, a transfer to the USA cannot be fully excluded. Google relies on the EU Standard Contractual Clauses under Art. 46 GDPR for this.

Withdrawal: you can withdraw your consent at any time with future effect by opening the Cookie Settings link at the bottom of the page and changing your selection.

Further information: https://policies.google.com/privacy

8. Data Security

The transmission of this website is encrypted (SSL / TLS). We implement appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.

9. Your Rights

Data subject rights: under the GDPR, you have the right to access under Art. 15, rectification under Art. 16, erasure under Art. 17, restriction under Art. 18, data portability under Art. 20, and objection under Art. 21.

Contact for exercising your rights: datenschutz@retailgs.com

Supervisory authority: Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden Württemberg, Postfach 10 29 32, 70025 Stuttgart, Germany. Email: poststelle@lfdi.bwl.de. Website: https://www.baden-wuerttemberg.datenschutz.de/

10. Changes to this Privacy Policy

We may update this privacy policy if legal requirements, service providers or website functions change. The version published at the time of your visit applies.