Privacy

METAFIN S.R.L., Via A. Grandi 56, 60131 Ancona (AN), Italy

Represented by Stefania Tollis

Email: info@badwasch.de · PEC: postmaster@pec.metafin.net

We process personal data only as far as needed to provide the website, answer enquiries, prepare quotes, handle orders and run your customer account (Art. 6(1)(b), (c) and (f) GDPR). We use no analytics, tracking or advertising cookies and do not share data for advertising.

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA; the database is run by Neon Inc. on servers in Frankfurt am Main. Data processing agreements under Art. 28 GDPR are in place with both; transfers to the USA rely on the EU-US Data Privacy Framework or standard contractual clauses.

When you visit the pages, technically necessary data (IP address, time, page, browser type) is processed briefly. To prevent abuse we keep an irreversible hash of your IP address for at most 24 hours (Art. 6(1)(f) GDPR).

Cart, wishlist and language are stored in your browser (localStorage and the “locale” cookie). For signing in we set the session cookie “bw_session” (30 days). Both are strictly necessary for the function you request and need no consent.

For information and quote requests we process the details you provide (name, email, phone, message, chosen products and configurations, project and delivery details) as pre-contractual measures (Art. 6(1)(b) GDPR).

To plan delivery we derive the approximate location from postcode, city and country using OpenStreetMap’s Nominatim service (OpenStreetMap Foundation, United Kingdom; EU adequacy decision). We also store with requests the approximate city our hosting provider derives from the IP address (Art. 6(1)(f) GDPR: planning and abuse prevention).

Support messages in your account are kept for as long as the account exists.

In your account we store name, email, optional phone, your last used address and your requests, orders and their status. Your password is stored only as a cryptographic hash. You can ask us to delete your account by email at any time.

For orders we process contact, delivery and billing details and the items ordered to perform the contract (Art. 6(1)(b) GDPR) and keep them for up to 10 years as required by commercial and tax law (Art. 6(1)(c) GDPR; Art. 2220 Italian Civil Code).

Online payments are handled by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. You enter your payment details directly on Stripe’s payment page; we never receive full card details. Stripe also processes data as an independent controller, e.g. for fraud prevention (stripe.com/privacy).

If you choose Klarna, Stripe passes the necessary data to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, which may run identity and credit checks; Klarna’s privacy notice applies (klarna.com).

For delivery, the carrier receives your name, address, phone number and delivery notes.

Emails are sent via IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (processor). You receive the newsletter only with your consent (Art. 6(1)(a) GDPR) and can unsubscribe at any time via the link in every issue.

Fonts are served from our own server; there is no connection to third-party servers.

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw consent at any time for the future. Write to info@badwasch.de.

You may lodge a complaint with a supervisory authority, e.g. the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy (garanteprivacy.it), or the authority in your country of residence.