Privacy policy

1. Controller and scope

Controller: Advintage UG (limited liability), Teutonenweg 38d, 22453 Hamburg, Germany; info@slickz.eu. We process personal data in accordance with the GDPR and applicable German data-protection law. Personal data is any information that can identify you directly or indirectly.

2. Data we collect

We process information that you actively submit, including your name, company, contact details and message, as well as technical data required to deliver and protect the website. For abuse prevention and rate limiting, this may include your IP address and browser user agent. Necessary storage is used to operate the website; optional analytics cookies are set only with your consent.

Your deliberate language and currency choices are stored separately for up to 12 months through the functional preferences “slickz_locale” and “slickz_currency”. “slickz_market_suggestion” remembers a dismissed combined language and currency suggestion for up to 30 days. The browser language and any region code are evaluated only locally in the browser for this suggestion; we do not use IP geolocation, and the information is neither transmitted nor logged.

Your currency choice is stored as a functional preference for up to 12 months in a first party cookie and local storage. Exchange rate data is cached locally. The choice is not linked to language or location.

3. Google Analytics and consent

Google Analytics 4, provided by Google Ireland Limited, is loaded only after your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. It may set _ga and _ga_* cookies for up to two years. Google Analytics 4 does not store IP addresses. Google Signals and ad personalisation are disabled. A transfer to the United States cannot be excluded; Google LLC participates in the EU-US Data Privacy Framework. You can withdraw consent at any time through the cookie settings, which also removes existing analytics cookies.

With separate consent, we use Google Ads, provided by Google Ireland Limited, to attribute successful enquiries to ad clicks. Click identifiers and conversion data may be processed, with _gcl_ cookies stored for up to 90 days. Ad personalisation and Google Signals remain disabled. Form contents, names, email addresses and uploads are not sent as tracking data. Cookie choices are stored for 180 days; consented campaign information in session storage expires after 30 minutes without measured activity. Withdrawal stops the relevant measurement and removes its cookies and local tracking storage.

ChatGPT Ads (OpenAI): We load the OpenAI Pixel and report successfully submitted enquiries only with your separate consent. OpenAI receives event and click identifiers, our website domain and technical connection data such as your IP address and browser information. The Pixel can automatically detect supported contact details such as email addresses and phone numbers. It normalizes and hashes them in your browser using SHA-256 before sending the hashes for ad attribution. It does not send unhashed contact details through this matching process. The __oppref and __obref cookies expire after up to 30 and 365 days respectively. The Pixel also stores the consent choice in your browser. Data may be processed in the USA. You can withdraw consent in the cookie settings at any time; further measurement stops and both measurement cookies are deleted. Our server also reports confirmed enquiries, click and browser identifiers and your SHA-256-hashed email address to OpenAI. This also requires your consent.

4. Hosting and service providers

The website is hosted by Vercel and uses Supabase for database and private file storage; the services used for this project are configured for processing in the European Union. Transactional email is sent through IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. Enquiry content is passed to IONOS solely for delivery, and data-processing agreements are used where required.

5. Forms, chat, applications and uploads

Contact and application forms process the details you enter so that we can answer enquiries, prepare quotations or handle applications. Chat drafts may be stored on our server while you type and locally in your browser for up to 24 hours; they are removed locally after successful submission. Configurator enquiries can include company, contact, delivery and configuration details. Uploaded logos and design files are held in private Supabase storage for product design and order handling. Enquiry processing is based on consent or pre-contractual measures; security processing is based on our legitimate interest in preventing abuse.

6. Retention and your rights

We retain data only for as long as its purpose or statutory duties require. Accounting and order records may be retained for up to ten years; contact and application enquiries are removed after completion unless a legal duty applies, and consent-based processing ends after withdrawal. You may request access, correction, deletion, restriction and portability, or object to processing, by contacting info@slickz.eu. You may also complain to a data-protection authority; our competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information.