Legal information

Privacy

Demo information — replace with verified operator information before launch.

Controller and contact

DEMO: beerpack Demo GmbH, Beispielstraße 1, 12345 Musterstadt, Germany. Contact/privacy: privacy@example.invalid. These are placeholders. Please do not enter real customer personal data during the demo.

Accounts, addresses and subscriptions

Email, name, password hash, contact and billing addresses, optional company/VAT information, licenses, subscriptions and orders are processed for registration, account management and billing. Article 6(1)(b) GDPR is the intended basis. Purchases and invoices are currently simulated; no payment takes place.

Hosting, security and email

Uberspace hosts the website, database and outgoing email. The hosting provider may process connection data. Login attempts are rate-limited for 15 minutes using a hashed address reference; hourly cleanup removes expired records. The application keeps no HTTP access log. Security serves the legitimate interest in safe operation (Article 6(1)(f) GDPR). The processing agreement and provider log retention must be verified before launch.

Cookies and local preferences

Session cookies support login and CSRF cookies protect forms. Customer sessions expire after 30 minutes. A language cookie stores your choice; the browser supplies preferred languages. Light/dark appearance is stored locally. There are currently no analytics, advertising or tracking services and no externally loaded fonts.

Stripe and payment data

Stripe is planned but not connected. No credit card data is entered, stored or transferred to Stripe. Before activation, the Stripe recipients, legal bases, possible international transfers, tax and invoice processing must be documented.

Retention

Account data is retained during the demo; deletion requests are handled manually. Invoice copies preserve addresses valid at purchase. Automatic backups before deployments are removed after 30 days. Statutory retention and a binding deletion policy must be established before real sales.

Your rights

You can correct addresses and download account data in the customer center. Subject to applicable conditions, GDPR Articles 15–21 provide access, rectification, erasure, restriction, portability and objection rights, as well as the right to complain to a supervisory authority. No solely automated decision has legal effect. The actual privacy contact must be added before launch.

Invitations and promotion codes

At your request, invitation and campaign codes are saved for registration and checkout. Successful redemptions record the code, discount, customer and billing reference. The inviter only sees a redemption count, never the referred customers’ details. Article 6(1)(b) GDPR is the basis for this requested discount feature. No automatic marketing emails are sent to invited people.