Privacy Notice

1. Controller

Larafox GmbH, Allgäustr. 45, 42651 Solingen, Germany, represented by managing director Denis Vilensky. Email: info@larafox.de; phone: +49 151 22604968.

2. Hosting and server logs

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When the website is accessed, Vercel processes data including the IP address, date and time, requested resource, referrer, browser, device and operating-system information. This is necessary for secure, fast and stable delivery. The legal basis is Article 6(1)(f) GDPR and our legitimate interest in operating a secure website.

Vercel may process data in the United States and other third countries. Where required, transfers are supported by adequacy decisions, the EU-US Data Privacy Framework and/or EU Standard Contractual Clauses. Details are available in Vercel's privacy and data-processing terms.

3. Contact inquiries and form

If you contact us by form, email or phone, we process the information supplied, including name, organisation, contact details, area of interest and message, to assess and answer your inquiry. The legal basis is Article 6(1)(b) GDPR for pre-contractual measures and otherwise Article 6(1)(f) GDPR. Our legitimate interest is handling business inquiries.

The form submits to our own /api/contact endpoint. If it is unavailable, no successful submission is reported and an email alternative is offered. Required fields are marked.

4. Cookies, local storage and consent

We currently use no analytics, advertising or marketing services. Non-essential services are activated only after prior consent. Your selection is stored as a consent record under larafox_consent_v1 in browser local storage for up to 180 days. The legal basis for optional access is Section 25(1) TDDDG together with Article 6(1)(a) GDPR; storing the choice is necessary to provide the consent-management service expressly requested (Section 25(2)(2) TDDDG).

You can change or withdraw your decision at any time using “Cookie settings” in the footer. Withdrawal does not affect processing lawfully carried out before withdrawal. See our Cookie Policy for details.

5. Retention

Server logs are deleted or anonymised according to Vercel's operational retention periods. We keep inquiries only as long as needed for handling, documentation and reasonable follow-up. Unless statutory retention duties or continuing legal claims apply, contact data no longer needed is generally deleted no later than 24 months after communication ends. Commercial and tax records may be subject to statutory retention periods.

6. Recipients

Recipients may include hosting and IT providers and, where needed for an inquiry, suppliers, logistics providers or business partners. We disclose data only where necessary, legally permitted or required by law. Processors are engaged under Article 28 GDPR.

7. Your rights

Subject to statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18), portability (Article 20) and objection (Article 21). Consent may be withdrawn at any time for the future (Article 7(3)).

Right to object: Where we rely on legitimate interests, you may object at any time for reasons arising from your particular situation. You may object to direct marketing at any time without stating reasons.

8. Right to complain

You may lodge a complaint with a data-protection authority. Larafox GmbH is generally supervised by the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany; www.ldi.nrw.de.

9. Security and updates

The website is transmitted over encrypted HTTPS. We use appropriate technical and organisational measures to protect personal data. This notice will be updated when functions, providers or legal requirements change.