Privacy Policy
Effective date: June 3, 2026
1. Data Protection at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on the subject of data protection can be found in this Privacy Policy.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the section "Information on the Data Controller" in this Privacy Policy.
How do we collect your data?
Some data is collected when you provide it to us. This may include data entered into a contact form.
Other data is collected automatically or after your consent when you visit the website through our IT systems. This mainly includes technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you access this website.
What do we use your data for?
Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze user behavior. If contracts can be concluded or initiated through the website, the transmitted data will also be processed for contract offers, orders, or other inquiries.
What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request correction or deletion of this data.
If you have given consent to data processing, you may revoke this consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You may contact us at any time regarding this or any other questions relating to data protection.
Analytics Tools and Third-Party Tools
When visiting this website, your browsing behavior may be statistically evaluated. This is primarily done using analytics programs.
Detailed information about these analytics programs can be found in this Privacy Policy.
2. Hosting
We host the content of our website with the following provider:
Webflow
The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA ("Webflow").
When you visit our website, Webflow collects various log files, including your IP address.
Webflow is a tool for creating and hosting websites. Webflow stores cookies and other recognition technologies required for displaying the website, providing certain website functions, and ensuring security (necessary cookies).
Further information can be found in Webflow's Privacy Policy:
https://webflow.com/legal/eu-privacy-policy
The use of Webflow is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website possible.
Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG/TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's device. Consent may be revoked at any time.
Data transfers to the United States are based on the Standard Contractual Clauses approved by the European Commission.
Webflow is certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available at:
https://www.dataprivacyframework.gov
Data Processing Agreement
We have concluded a Data Processing Agreement (DPA) with Webflow. This legally required agreement ensures that Webflow processes personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General Information and Mandatory Disclosures
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.
When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally.
This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purpose this occurs.
Please note that data transmission over the Internet (e.g., communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Information on the Data Controller
The controller responsible for data processing on this website is:
Revolune GmbH
Carl-Zeiss-Str. 22
73447 Oberkochen
Germany
Managing Director
Florian Leiss
Phone: [Insert phone number]
Email: [Insert email address]
The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
Storage Period
Unless a more specific storage period is stated in this Privacy Policy, your personal data will remain with us until the purpose for data processing no longer applies.
If you submit a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., retention periods under tax or commercial law). In such cases, deletion will take place once those reasons no longer apply.
Legal Bases for Data Processing
If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR.
If special categories of personal data are processed, processing is based on Article 9(2)(a) GDPR.
If you have expressly consented to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR.
Where consent is required for the storage of cookies or access to information on your device, processing is additionally based on Section 25(1) TDDDG.
Consent may be revoked at any time.
Where your data is required for the performance of a contract or pre-contractual measures, processing is based on Article 6(1)(b) GDPR.
Where processing is required to comply with a legal obligation, it is based on Article 6(1)(c) GDPR.
Processing may also be based on our legitimate interests pursuant to Article 6(1)(f) GDPR.
The specific legal basis applicable in each case is explained throughout this Privacy Policy.
Recipients of Personal Data
As part of our business activities, we work with various external parties. This may require the transfer of personal data to such parties.
We only disclose personal data where:
- this is necessary for contract performance,
- we are legally obliged to do so,
- we have a legitimate interest pursuant to Article 6(1)(f) GDPR, or
- another legal basis permits the disclosure.
Where we use data processors, personal data is disclosed only on the basis of a valid Data Processing Agreement.
In the case of joint processing, a Joint Controller Agreement is concluded.
To process payments for products and services purchased through our website, we may transfer personal data to payment service providers, including Stripe, Inc. Such transfers occur only to the extent necessary for payment processing and fulfillment of contractual obligations.
Withdrawal of Your Consent
Many data processing operations are only possible with your express consent.
You may withdraw consent at any time.
The legality of data processing carried out before the withdrawal remains unaffected.
Right to Object Pursuant to Article 21 GDPR
If data processing is based on Article 6(1)(e) or (f) GDPR, you have the right at any time, on grounds relating to your particular situation, to object to the processing of your personal data.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if processing serves the establishment, exercise, or defense of legal claims.
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing.
Right to Lodge a Complaint
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, workplace, or place of the alleged infringement.
Right to Data Portability
You have the right to receive data that we process automatically on the basis of your consent or in fulfillment of a contract in a commonly used, machine-readable format.
Where technically feasible, you may also request direct transfer to another controller.
Right of Access, Rectification and Erasure
Within the framework of applicable legal provisions, you have the right at any time to obtain information about your stored personal data, its origin, recipients, and purpose of processing, and, where applicable, a right to rectification or deletion.
Right to Restriction of Processing
You have the right to request restriction of processing of your personal data in the circumstances provided for by Article 18 GDPR.
SSL/TLS Encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us.
You can recognize an encrypted connection by the change in the browser address line from "http://" to "https://" and by the lock symbol in your browser.
When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.
4. Data Collection on This Website
Cookies
Our websites use so-called "cookies." Cookies are small data packages that do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit ends. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.
Cookies may originate from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies enable the integration of certain services provided by third parties within websites.
Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them. Other cookies may be used to analyze user behavior or for marketing purposes.
Cookies that are necessary to carry out electronic communication processes, provide certain functions requested by you, or optimize the website are stored on the basis of Article 6(1)(f) GDPR unless another legal basis is specified.
Where consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be revoked at any time.
You can configure your browser so that you are informed about the use of cookies, allow cookies only in individual cases, exclude cookies in certain cases or generally, and activate automatic deletion of cookies when closing the browser.
Disabling cookies may limit the functionality of this website.
Additional information about cookies and services used on this website can be found in this Privacy Policy.
Contact Form
If you send us inquiries via the contact form, the information you provide in the inquiry form, including the contact details entered there, will be stored by us for the purpose of processing your inquiry and in case of follow-up questions.
We do not share this data without your consent.
The processing of this data is based on Article 6(1)(b) GDPR if your inquiry is related to the performance of a contract or pre-contractual measures.
In all other cases, processing is based on our legitimate interest in effectively handling inquiries directed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if such consent has been requested.
The data you enter into the contact form remains with us until you request its deletion, revoke your consent, or the purpose for storing the data no longer applies.
Mandatory statutory provisions, particularly retention periods, remain unaffected.
HubSpot Forms
We use forms provided by HubSpot on this website. The provider is HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA.
When you submit information through a HubSpot form, the data entered (such as your name, email address, company name, telephone number, and message) is transmitted to and stored by HubSpot.
We use this information to process your inquiry, communicate with you, manage customer relationships, and provide requested information, products, or services.
The processing of your data is based on Article 6(1)(b) GDPR if your inquiry is related to the performance of a contract or pre-contractual measures.
In all other cases, processing is based on our legitimate interest in efficient communication and customer management pursuant to Article 6(1)(f) GDPR or on your consent pursuant to Article 6(1)(a) GDPR where required.
HubSpot may process personal data on servers located in the United States. Data transfers are based on the EU-U.S. Data Privacy Framework (DPF) and, where applicable, the Standard Contractual Clauses approved by the European Commission.
Further information can be found in HubSpot's Privacy Policy:
https://legal.hubspot.com/privacy-policy
HubSpot Chatbot and Live Chat
This website uses HubSpot's chatbot and live chat functions to communicate with visitors and respond to inquiries.
When using the chat feature, personal data may be collected and processed. This may include:
- Name
- Email address
- Company information
- IP address
- Chat content
- Device and browser information
- Usage data related to the chat service
The information collected is used to process your inquiry, provide customer support, improve our services, and maintain communication with you.
The processing is based on Article 6(1)(b) GDPR where the communication concerns contractual or pre-contractual matters.
In all other cases, processing is based on our legitimate interest in providing efficient customer service pursuant to Article 6(1)(f) GDPR or on your consent pursuant to Article 6(1)(a) GDPR where required.
The chat service may use cookies and similar technologies that are necessary for providing chat functionality and analyzing service usage. Where legally required, such technologies are activated only after obtaining your consent.
HubSpot may process personal data in the United States. Data transfers are protected through participation in the EU-U.S. Data Privacy Framework and/or the use of Standard Contractual Clauses approved by the European Commission.
Further information can be found in HubSpot's Privacy Policy:
https://legal.hubspot.com/privacy-policy
Order Processing
When you place an order through our website, we process the personal data necessary to fulfill the contract. This may include:
- Name
- Billing and shipping address
- Email address
- Order details
- Payment status
- Communication regarding the order
The processing is carried out on the basis of Article 6(1)(b) GDPR for the performance of a contract.
We retain order-related information for the duration required by applicable tax, accounting, and legal retention obligations.
Stripe Payment Processing
We use Stripe to process payments for products and services offered through our website. The provider is Stripe, Inc., 354 Oyster Point Boulevard, South San Francisco, CA 94080, USA.
When you make a purchase through our website, personal data required for payment processing is transmitted directly to Stripe. Depending on the transaction, this may include:
- Name
- Billing address
- Email address
- Order details
- Payment amount
- Payment method information
Payment data is processed directly by Stripe. We do not store or have access to complete credit card information.
The processing of payment-related data is carried out for the purpose of fulfilling a contract pursuant to Article 6(1)(b) GDPR.
Stripe may process personal data in the United States and other countries. Data transfers are safeguarded through the EU-U.S. Data Privacy Framework (DPF) and, where applicable, the Standard Contractual Clauses approved by the European Commission.
Further information can be found in Stripe's Privacy Policy:
Inquiries by Email or Telephone
If you contact us by email or telephone, your inquiry, including all resulting personal data (e.g., name, contact information, and inquiry details), will be stored and processed for the purpose of handling your request.
We do not pass this data on without your consent.
The processing of this data is based on Article 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or the implementation of pre-contractual measures.
In all other cases, processing is based on our legitimate interest in effectively handling inquiries (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) where required.
The data transmitted to us through contact inquiries remains with us until you request deletion, revoke your consent, or the purpose for storage no longer applies.
Mandatory statutory retention obligations remain unaffected.
5. Newsletter
Newsletter Subscription
If you would like to receive the newsletter offered on this website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter.
No additional data is collected unless provided voluntarily.
We use this data exclusively for sending the requested information and do not share it with third parties unless stated otherwise in this Privacy Policy.
The processing of data entered into the newsletter subscription form is based exclusively on your consent pursuant to Article 6(1)(a) GDPR.
You may revoke your consent to the storage of your data, your email address, and its use for sending the newsletter at any time, for example by using the unsubscribe link included in every newsletter.
The legality of data processing already carried out remains unaffected by the revocation.
Storage of Newsletter Data
The data you provide for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after cancellation or once the purpose no longer applies.
We reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Article 6(1)(f) GDPR.
Data stored by us for other purposes remains unaffected.
After you unsubscribe from the newsletter distribution list, your email address may be stored in a blacklist by us or the newsletter service provider if this is necessary to prevent future mailings.
The data stored in the blacklist is used solely for this purpose and is not combined with other data.
This serves both your interest and our interest in complying with legal requirements when sending newsletters.
Storage in the blacklist is not limited in time.
You may object to this storage if your interests outweigh our legitimate interest.
Newsletter Delivery via HubSpot
If you subscribe to our newsletter, your data may be processed using HubSpot, a customer relationship management and marketing automation platform provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA.
HubSpot allows us to manage newsletter subscriptions, distribute newsletters, analyze recipient interactions, and improve our communication with subscribers.
When you subscribe to our newsletter, the following information may be processed:
- Email address
- Name (if provided)
- Subscription date and time
- IP address
- Consent information
- Newsletter interaction data (e.g., opens and clicks)
The processing of this data is based on your consent pursuant to Article 6(1)(a) GDPR.
You may withdraw your consent at any time by clicking the unsubscribe link included in every newsletter or by contacting us directly.
HubSpot may analyze newsletter usage, including whether newsletters are opened and which links are clicked. This analysis helps us improve our content and communication.
HubSpot may process personal data on servers located in the United States.
Data transfers are based on the EU-U.S. Data Privacy Framework (DPF) and, where applicable, on the Standard Contractual Clauses approved by the European Commission.
Further information can be found in HubSpot's Privacy Policy:
https://legal.hubspot.com/privacy-policy
Newsletter Advertising to Existing Customers
If you purchase goods or services from us and provide your email address in the process, we may subsequently use this email address to send newsletters containing direct marketing for our own similar products or services, provided we informed you of this possibility in advance.
The legal basis for this processing is Article 6(1)(f) GDPR in conjunction with applicable national laws governing direct marketing to existing customers.
You may object to the use of your email address for these purposes at any time.
A corresponding unsubscribe link is included in every newsletter.
After unsubscribing, your email address may be stored in a suppression list to ensure that no further newsletters are sent to you.
The data stored for this purpose is used exclusively to prevent future mailings and is not combined with other information.
This storage is based on our legitimate interest in complying with legal requirements regarding email marketing.
You may object to this storage if your interests outweigh our legitimate interest.
6. Plugins and Tools
Google Fonts (Local Hosting)
This website uses Google Fonts for the uniform display of fonts. These fonts are provided by Google but are hosted locally on our servers.
No connection to Google servers is established when loading the fonts.
For more information about Google Fonts, please visit:
https://developers.google.com/fonts/faq
Google's Privacy Policy is available at:
https://policies.google.com/privacy
Data Security
We implement appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.
However, please note that data transmission over the Internet can never be guaranteed to be completely secure. While we strive to protect your personal information, we cannot guarantee absolute security of information transmitted through our website.
International Data Transfers
Some of the services used on this website may transfer personal data to countries outside the European Union or the European Economic Area, including the United States.
Where such transfers occur, we ensure that appropriate safeguards are in place to protect your personal data. These safeguards may include:
- Participation in the EU-U.S. Data Privacy Framework (DPF)
- Standard Contractual Clauses approved by the European Commission
- Additional technical and organizational security measures where required
Further information regarding international data transfers can be found in the privacy policies of the respective service providers.
Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy at any time to ensure that it complies with current legal requirements or to reflect changes in our services.
The version published on this website at the time of your visit shall apply.
Contact Regarding Data Protection
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:
Revolune GmbH
Carl-Zeiss-Str. 22
73447 Oberkochen
Germany
Managing Director
Florian Leiss
Phone: [Insert phone number]
Email: [Insert email address]
Your Rights Under the GDPR
Under applicable data protection law, you have the following rights:
- Right of access (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to erasure (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object (Article 21 GDPR)
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
The exercise of these rights is free of charge unless requests are manifestly unfounded or excessive.
Supervisory Authority
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
The competent supervisory authority is generally the authority responsible for your place of residence, place of work, or the location of the alleged infringement.
Source
This Privacy Policy is based on a privacy policy originally generated using eRecht24 and has been adapted and translated into English for use on this website.