Privacy policy

As of: November 2026

1. Introduction and contact details of the controller

Thank you for your interest in Namensleuchte. Below we inform you which personal data we process when you use this website and which rights you have.

Controller within the meaning of the General Data Protection Regulation (GDPR):
Ingo Hangebrauck, Datrax IT Services, Hauptstr. 35, 25782 Schalkholz, Germany
Telephone: +49 172 8718094, email: info@datrax.de

2. Data collected when you visit the website

When you open the pages, our web server automatically processes technically necessary data transmitted by your browser: IP address, date and time, requested address, referrer, browser and operating system. This is necessary to deliver the website and to ensure its security (Art. 6(1)(f) GDPR). The connection is encrypted via SSL/TLS.

3. Hosting and computing service

Hosting: The website and our database are hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, on servers in Germany. A data processing agreement is in place with the provider (Art. 28 GDPR).

3D preview and print file: For the preview and the print file we send the name you entered and the selected settings to our computing service at Google Cloud (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) in the Frankfurt am Main region. Google processes this data on our behalf (Art. 28 GDPR). Your IP address and account details are not transmitted. We store finished previews and print files on our server without any reference to you, so that the same name does not have to be calculated again; print files you create are additionally assigned to your account (section 5). The legal basis is Art. 6(1)(b) GDPR.

Protection against abuse: We only calculate new previews for signed-in users and limit them per day; without signing in we only show previews that are already finished. For visitors who are not signed in, we store a shortened hash value of the IP address, formed with a secret key (for IPv6, of the network connection), together with the time of each newly calculated preview; we do not store the IP address itself for this. The hash value is deleted automatically after 48 hours. For signed-in users we count per account instead, without the IP address. The legal basis is our legitimate interest in protecting the service against overload and costs caused by abuse (Art. 6(1)(f) GDPR).

4. Cookies and local storage

We do not use cookies for advertising or analytics, and no cookies of our own at all. In your browser we only store what is strictly necessary for a function you have expressly used (Section 25(2) no. 2 TDDDG):

• after signing in, the sign-in session (Firebase, IndexedDB) and a marker that you were signed in (localStorage) – both are removed when you sign out;
• when buying credits, the address of your lamp in the designer, so that you return there after payment (sessionStorage, deleted when the tab is closed);
• on the German pages, your cart for printed lamps (localStorage: the selected lamps with a small preview image) – it stays only in your browser until you order, empty it or delete the data.

You can delete local data in your browser at any time.

5. Sign-in and account

For your account we use Firebase Authentication by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You can sign in in two ways:

• With Google: We receive your name, your email address, the address of your profile picture and a user ID from Google. The sign-in itself takes place in a Google window; Google's privacy notice applies to it. Your browser loads your profile picture directly from Google servers to display it in the page header.
• With email address and password: Firebase stores your email address and your password only in encrypted form (as a hash); we never see your password. To confirm your address and to reset your password, Firebase sends you emails on our behalf. You can only sign in once you have confirmed your address via the link in the confirmation email.

We process this data to manage your account, your credit balance, your saved designs and your print files (Art. 6(1)(b) GDPR). For this, our database stores the user ID, your email address and your name, your balance with its transactions, your designs and print files, and the number of your newly calculated previews (section 3). Google processes the sign-in data on our behalf (Art. 28 GDPR).

Your browser loads the Firebase sign-in script from Google servers (www.gstatic.com) – but only when you open the sign-in dialog or were already signed in. Google receives your IP address in the process. A transfer to the USA cannot be ruled out; Google LLC is certified under the EU-US Data Privacy Framework, for which there is an adequacy decision of the EU Commission (Art. 45 GDPR).

6. Buying credits and paying with PayPal

You pay for credits via PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. When you buy, you are redirected to PayPal, where PayPal processes your payment data. We receive the payment status and a transaction number (Art. 6(1)(b) and (c) GDPR). PayPal's privacy notice also applies.

6a. Ordering printed lamps

Printed lamps are offered on our German pages for delivery within Germany only. If you order a printed lamp, we process the order (selected lamps, colours, prices), your name, your delivery address and your email address as well as PayPal's transaction number. You choose the delivery address and email address at PayPal; PayPal sends them to us after payment. If you are signed in, we additionally assign the order to your account. The legal basis is the performance of the purchase contract (Art. 6(1)(b) GDPR) and our statutory retention obligations (Art. 6(1)(c) GDPR).

We send you the order confirmation and the shipping notification from our own mailbox at ALL-INKL.COM – Neue Medien Münnich. For delivery, we pass your name and delivery address on to the shipping company we commission.

6b. Withdrawal via the online function

If you withdraw from a contract via our withdrawal function, we process your name, the details of the contract, your email address and – if you give it voluntarily – the reason. We use them to send you the legally required acknowledgement of receipt and to process the withdrawal (Art. 6(1)(c) GDPR in conjunction with Section 356a BGB). We keep the details as part of the contract records (section 11).

7. Contacting us

If you contact us via the contact form, by email or by telephone, we process your details (name, email address, subject and message) to handle your enquiry. The basis is your consent, which you give with the tick box when submitting the contact form (Art. 6(1)(a) GDPR) and which you can withdraw at any time with effect for the future; otherwise Art. 6(1)(b) or (f) GDPR. Without an email address we cannot reply to you; all other details are voluntary. We delete the details as soon as your enquiry has been dealt with and no retention obligations apply.

The contact form sends your details to our own messaging service kommunikation.datrax.de, which is also operated at ALL-INKL.COM – Neue Medien Münnich and forwards them to us as an email. To protect against abuse, your IP address and the page on which you submitted the form are also transmitted; the IP address is also used to limit the number of messages per hour (Art. 6(1)(f) GDPR).

The same service informs us internally by email about new accounts, purchases, orders and created print files (name, email address and type of event, for orders also delivery address and ordered lamps), so that we can process orders and help quickly with questions (Art. 6(1)(b) and (f) GDPR).

8. Website functions

We deliver fonts, images and the 3D library (three.js) from our own server. No data is transmitted to third parties for this. We do not use web analytics, tracking or advertising services.

9. Rights of the data subject

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent you have given at any time. An email to info@datrax.de is enough for all of this – including if you would like your account to be deleted.

Right to object: If we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein, Holstenstraße 98, 24103 Kiel, Germany.

10. Obligation to provide data and automated decisions

You are under no legal or contractual obligation to provide us with data. You can use the designer without an account; for new previews, buying credits and creating print files you need an account. Printed lamps can be ordered without an account – but without a delivery address and email address we cannot deliver. There is no automated decision-making including profiling (Art. 22 GDPR).

11. Storage period

We store account data, credit balance, designs and your print files for as long as your account exists. We keep purchases, orders and transactions for up to ten years due to commercial and tax law obligations (Section 147 AO, Section 257 HGB). We delete the hash value of the IP address used to limit previews after 48 hours (section 3). Server log files are deleted automatically after a short time.

This English version is a translation for your convenience. In case of doubt, the German version applies.