Privacy Policy
Last Updated: March 13, 2026
This website is owned and operated by Amawi Technologies GbR, which is the data controller of your personal data.
We have adopted this Privacy Policy, which determines how we process the information collected by Amawi Technologies, and explains why we may need certain personal data about you. Please read this Privacy Policy before using this website.
We take care of your personal data and undertake to guarantee its confidentiality and security in accordance with the General Data Protection Regulation (GDPR).
1. Data Controller
Amawi Technologies GbR
Ulmenweg 3
37077 Göttingen
Germany
Email: info@amawitech.com
2. Personal Information We Collect
2.1 Information You Provide
When you contact us or make purchases, we may collect:
- Name and contact information (email, phone number, address)
- Order and payment information (processed by third-party payment providers)
- Communication preferences
- Any other information you choose to provide
2.2 Automatically Collected Information
When you visit Amawi Technologies, we automatically collect certain information about your device, including:
- Web browser type and version
- IP address
- Time zone and locale settings
- Pages visited and interaction patterns
- Referring website or search terms
3. Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds:
- Contract Performance: To fulfill orders and provide customer support
- Legitimate Interest: To improve our website, products, and services
- Legal Obligation: To comply with applicable laws and regulations
- Consent: For marketing communications (where required)
4. How We Use Your Data
We process personal data only for specific, explicit, and legitimate purposes:
- Processing and fulfilling orders
- Communicating about orders, products, and services
- Providing customer support
- Improving website functionality and user experience
- Detecting and preventing fraud or abuse
- Complying with legal obligations
5. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. Order information is typically retained for accounting and legal purposes for a period of 10 years as required by German commercial law.
6. Your Rights Under GDPR
Under the General Data Protection Regulation, you have the following rights:
- Right to be informed about the collection and use of your personal data
- Right of access to your personal data
- Right to rectification of inaccurate or incomplete data
- Right to erasure ("right to be forgotten") under certain circumstances
- Right to restrict processing under certain circumstances
- Right to data portability to receive your data in a structured format
- Right to object to processing based on legitimate interests
- Rights related to automated decision-making and profiling
- Right to withdraw consent at any time (where processing is based on consent)
- Right to lodge a complaint with a supervisory authority
To exercise these rights, contact us at info@amawitech.com. We will respond to your request within 30 days.
7. Data Sharing and Third Parties
We do not sell your personal data. We may share data with:
- Service Providers: Payment processors, shipping companies, hosting providers (operating under data processing agreements)
- Legal Requirements: When required by law or to protect our legal rights
- Business Transfers: In the event of a merger, acquisition, or sale of assets
7.1 Cloudflare (CDN & Security)
This website is served through Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), which acts as a reverse proxy providing content delivery, DDoS protection, and security services. As part of this service, Cloudflare processes IP addresses, HTTP request metadata, and other network-level data on our behalf under a Data Processing Addendum (DPA). Legal basis: Art. 6(1)(f) GDPR — legitimate interest in secure and performant website delivery. For details, see Cloudflare's Privacy Policy.
7.2 Plausible Analytics
This website uses Plausible Analytics, a privacy-friendly, GDPR-compliant analytics tool. Plausible does not use cookies, does not collect personal data, and does not track users across sites or devices. Only aggregate, anonymized statistics are collected (e.g., page views, referral sources, browser type). Plausible is self-hosted on our own server within the EU. No data is shared with third parties. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in understanding website usage without processing personal data. For details, see Plausible's Privacy Policy.
7.3 Rybbit Analytics
This website uses Rybbit, a self-hosted analytics tool for understanding e-commerce and conversion behavior. Rybbit is hosted on our own server within the EU and does not share data with third parties. Data collected (e.g., page interactions, session flow) is used solely to improve website functionality and user experience. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in optimizing our online offering.
7.4 Shopify (E-Commerce)
This website embeds a Shopify Buy Button to enable product purchases. The Buy Button loads scripts from Shopify's CDN (sdks.shopifycdn.com, cdn.shopify.com). When you interact with the Buy Button or complete a purchase, your data is processed by Shopify Inc. (150 Elgin St, Ottawa, Ontario, Canada) under their own privacy policy. Legal basis: Art. 6(1)(b) GDPR — processing necessary for the performance of a contract. For details, see Shopify's Privacy Policy.
7.5 Sentry (Error Monitoring)
This website uses Sentry (Functional Software, Inc. dba Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA) to monitor and diagnose technical errors. When an error occurs, Sentry receives technical information such as the browser type, operating system, page URL, and a stack trace of the error. We have configured Sentry to not collect personal data: IP addresses, email addresses, and user identifiers are explicitly excluded before any data is sent. Error data is processed on Sentry's EU servers (Frankfurt) under a Data Processing Agreement (DPA). Legal basis: Art. 6(1)(f) GDPR — legitimate interest in maintaining a functioning, error-free website. For details, see Sentry's Privacy Policy.
8. International Data Transfers
We process your data primarily within the EU. The only exception is Cloudflare, which as a CDN and security provider processes network-level data (IP addresses, HTTP metadata) on servers that may be located outside the EU. This is covered by a Data Processing Addendum (DPA) and Cloudflare's certification under the EU-U.S. Data Privacy Framework. Shopify is based in Canada, which has an EU adequacy decision — meaning Canadian law is recognized as providing an equivalent level of data protection. No other data is transferred outside the EU.
9. Cookies
Our analytics tools (Plausible and Rybbit) are cookieless — they do not set cookies, do not use persistent identifiers, and do not require cookie consent. The only cookies on this site are set by the Shopify Buy Button when you interact with the shop or complete a purchase. These cookies are necessary for the shopping functionality and are governed by Shopify's Privacy Policy. You can manage your cookie preferences at any time via the cookie banner or your browser settings.
10. Children's Privacy
Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.
11. Links to Other Websites
Amawi Technologies may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review their privacy policies before providing any personal information.
12. Information Security
We take technical data protection seriously. All data transmitted between your browser and this website is encrypted via HTTPS/TLS. Our analytics (Plausible, Rybbit) are self-hosted on our own server infrastructure hosted in Germany (Hetzner) — your usage data never leaves the EU. Access to any stored data is restricted to authorized personnel only. We collect only what is necessary for the stated purpose and retain it only as long as required.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.
14. Supervisory Authority
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with your local data protection supervisory authority. For users in Germany, this is your state's data protection authority (Landesdatenschutzbehörde).
15. Contact Information
For questions about this Privacy Policy, to exercise your rights, or for any data protection concerns, please contact us at:
Amawi Technologies GbR
Ulmenweg 3
37077 Göttingen
Germany
Email: info@amawitech.com