Privacy Policy

This website complies with European data protection legislation (GDPR / DSGVO).

Data Controller

Visundi GmbH

Sankt Johanner Strasse 41-43

66111 Saarbrücken, Germany

Represented by: Philippe Koren

Email: info@visundi.com

Phone: +49 (0) 681 96 98 91 00

Summary of Processing Activities

ProcessingData CollectedLegal BasisRetentionPurpose
Server logsIP (anonymized), date/time, pages visited, user agentArt. 6(1)(f) GDPR — legitimate interest7 to 14 daysSecurity, maintenance, incident detection
Contact formLast name, first name, email, phone (optional), messageArt. 6(1)(b) GDPR — pre-contractual measures3 years after the last exchangeResponding to user enquiries
Quote request formCompany name, contact name, email, estimated volumeArt. 6(1)(b) GDPR — pre-contractual measures6 years (tax retention requirement)Preparing professional quotations
Technical cookiesSession ID, language preference, consent status§ 25 TTDSG — legitimate interestSession + 30 daysTechnical operation of the site
Analytics cookiesPages visited, duration, interactions (anonymized)Art. 6(1)(a) GDPR — consent14 to 26 monthsAudience analysis and site improvement
Marketing cookiesBrowsing behaviour, advertising identifiersArt. 6(1)(a) GDPR — consentUntil consent is withdrawnAdvertising personalization
YouTubeIP, user agent, date/time (after explicit click)Art. 6(1)(a) GDPR — consentAccording to Google's policyDisplaying embedded videos
NewsletterEmail, name (optional), language preferenceArt. 6(1)(a) GDPR — consentUntil unsubscriptionSending information and news

Data is neither sold nor shared with commercial third parties outside the processing activities described above.

Legal Basis for Processing

The processing of your data is based on the following legal grounds:

  • Article 6(1)(b) GDPR — Performance of a contract or pre-contractual measures (contact and quote requests)
  • Article 6(1)(f) GDPR — Legitimate interest (site security, anonymized server logs)
  • Article 6(1)(a) GDPR — Explicit consent (optional cookies, newsletter, YouTube)

Online Shop, Payments and Sub-processors

When you place an order in our online shop, we collect the data required to fulfil it: items ordered, amount, name, delivery and billing addresses, email address and phone number.

Legal basis: Article 6(1)(b) GDPR — performance of a contract. Retention: 10 years, in accordance with the accounting and tax retention obligations applicable in Germany and France.

We use the following sub-processors:

  • Stripe Inc. / Stripe Payments Europe Ltd. — online payment processing. Card details are entered directly with Stripe and are never stored on our servers. Delivery and billing addresses and the phone number are collected when an order is placed. Location: European Union / United States.
  • Cloudflare Inc. — execution of the payment worker and technical processing of the site's forms. Location: United States.
  • Resend Inc. — sending of transactional emails (order confirmations, contact form messages). Location: United States.

Transfers of data outside the European Union are governed by the European Commission's Standard Contractual Clauses (SCC) concluded with these providers.

Transfers to Third Countries

Some processing activities involve the transfer of data to third countries, in particular the United States:

  • YouTube (Google LLC): after you explicitly click on a video, data is transmitted to Google servers in the United States. This transfer is governed by the European Commission's Standard Contractual Clauses (SCC) and by the additional security measures implemented by Google.
  • Stripe, Cloudflare and Resend: these providers (see the section "Online Shop, Payments and Sub-processors") process data in the United States in the course of payment handling, technical form processing and transactional email delivery.

These transfers are governed by the European Commission's Standard Contractual Clauses (SCC) concluded with these providers.

Your Rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

  • Right of access (Art. 15) — To know what data we hold about you
  • Right to rectification (Art. 16) — To correct inaccurate data
  • Right to erasure (Art. 17) — To request the deletion of your data
  • Right to restriction of processing (Art. 18)
  • Right to data portability (Art. 20) — To receive your data in a structured format
  • Right to object (Art. 21) — To object to the processing of your data
  • Right to withdraw consent (Art. 7(3)) — To withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal
  • Right to lodge a complaint (Art. 77) — To file a complaint with a competent supervisory authority

To exercise these rights, contact us at: info@visundi.com

Cookies and Trackers

This site uses technically necessary cookies required for its operation (session, language, consent), which do not require prior consent (§ 25 TTDSG).

Statistics cookies (Matomo) and marketing cookies are only activated with your explicit, prior consent, which can be withdrawn at any time.

Embedded YouTube videos use a two-click solution: no connection to YouTube servers is established before you explicitly click the play button.

Supervisory Authority

In the event of a dispute, you may contact the competent data protection authority:

Independent Data Protection Centre of Saarland (UDZ)
Fritz-Dobisch-Straße 12
66111 Saarbrücken
Phone: +49 (0) 681 947 81-0
Fax: +49 (0) 681 947 81-20
Email: info@datenschutz.saarland.de
Web: www.datenschutz.saarland.de

Data Security

We implement technical and organizational measures to protect your data:

  • SSL/TLS encryption across the entire site (HTTPS)
  • Anonymization of IP addresses in logs
  • Restricted access to personal data (least privilege principle)
  • Regular security updates

Language Clause

The German version of this privacy policy is authoritative. The French and English versions are provided for information purposes only. In case of any discrepancy, the German version prevails.

Last updated: July 2026