Legal

Privacy policy / Datenschutzerklärung

[DRAFT — to be reviewed before launch. Controller details to be completed with the Impressum. This draft names every processor actually in the v1 stack.]

Who we are

triposters ([controller name and address — see Impressum]) makes personalised triathlon posters to order. This page explains what personal data we process, why, and your rights under the GDPR.

What we collect, and why

Your order

Name, email address, shipping address, and everything you enter in the order form. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). We keep order records as long as commercial and tax law requires (§ 147 AO: up to 10 years).

Your route file (GPX)

A GPX file is location data — it shows where you (or the person the poster is for) swam, rode and ran. We use it solely to build the poster you ordered, and we don't share it with anyone except as needed for printing. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Your photo

If you upload a photo, we use it solely on your poster. You confirm at order that you hold the rights to it and the consent of the people shown. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Who processes data for us

• Stripe Payments Europe, Ltd. (Dublin, Ireland) — payment processing. Your payment details go directly to Stripe; we never see your card number. Stripe may transfer data to Stripe, Inc. in the USA under the EU–US Data Privacy Framework and standard contractual clauses. See Stripe's privacy policy.
• Cloudflare, Inc. — this website is hosted on Cloudflare Pages, and your uploads are stored on Cloudflare's EU-region storage. Cloudflare processes technical connection data (IP address, request logs) to serve and protect the site. See Cloudflare's privacy policy.
• Our print partner (Prodigi Group) — receives your name, shipping address and the finished poster file, solely to print and ship your order.

Cookies

This site sets no cookies and runs no analytics. The payment page is operated by Stripe and subject to Stripe's cookie policy.

Your rights

You have the right to access, rectify, erase and receive a copy of your personal data, to restrict or object to its processing, and to complain to a supervisory authority (for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen). Email hello@triposters.com for any of these.