Skip to content
Extension Foundry

Privacy notice

The German version is binding. Die deutsche Fassung ist maßgeblich. Deutsche Fassung

1. Controller

The controller for the processing of personal data on this website (Art. 4(7) GDPR) is:

Bejtovic Capital UG (haftungsbeschränkt)
represented by the managing director Anel Bejtovic
Spohrstraße 63
60318 Frankfurt am Main
E-mail: support@extensionfoundry.com

2. The essentials first

  • This website sets no cookies and stores nothing in your browser. It also reads nothing from your device; a consent under § 25 TDDDG is therefore not needed.
  • It loads nothing from other servers: no fonts, no scripts, no images, no statistics or analytics services.
  • We process personal data only in the cases below: in the web host's access log, when you sign up for the waiting list, and when you write to us.

3. Hosting and access log

This website is hosted by DigitalOcean, LLC, 101 Avenue of the Americas, 10th Floor, New York, NY 10013, USA (Rechenzentrum Frankfurt am Main). With every request for a page, the web host's server stores in the access log: your IP address, date and time, the address requested, the amount of data transferred, the status code, the page visited before (referrer) if your browser sends it, and your browser's identifier (user agent).

The purpose is the secure operation of the website, such as detecting and fending off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure and stable operation. The access log is deleted after 14 days. The web host processes this data on our behalf (Art. 28 GDPR).

We write server errors into a log file outside the web space; it holds no e-mail addresses and no IP addresses.

4. Waiting list for Produktpass

On the Produktpass page you can sign up for a waiting list. We then write to you as soon as the plugin is available in the JTL Extension Store.

What we store

  • your e-mail address,
  • your three answers: your shop system, whether you place batteries on the EU market as a manufacturer or importer, and the number of your battery products,
  • the time of your sign-up and the time of your confirmation,
  • until the confirmation, a check value (hash) of the code in the confirmation link, not the code itself.

We also store the language of the page you signed up on (German or English), so that our e-mails reach you in that language.

We do not store your IP address for the waiting list.

What for

With your e-mail address we write to you as soon as Produktpass is available in the JTL Extension Store. We count your three answers to decide how we develop the plugin further: how many of those signed up use JTL-Shop 5 and place batteries on the market as a manufacturer or importer. The evaluation holds numbers only.

The details are voluntary; without an e-mail address, answers and consent, no sign-up is possible (Art. 13(2)(e) GDPR).

Confirmation (double opt-in)

After the sign-up we send you an e-mail with a link. Only when you confirm your sign-up on that link's page are you on the waiting list. A sign-up that you do not confirm within 7 days we delete with all its details; the deletion runs once a day. This way we make sure that nobody enters someone else's e-mail address. We send the e-mails through the mailbox of our e-mail provider Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, who acts on our behalf (Art. 28 GDPR).

Legal basis and withdrawal

The legal basis for the e-mail and for evaluating your answers is your consent (Art. 6(1)(a) GDPR), which you give with the tick in the form and the confirmation. You can withdraw it at any time with effect for the future (Art. 7(3) GDPR): every one of our e-mails has a link with which you delete your sign-up at once; you can also write to us. We send advertising by e-mail only with your express consent (§ 7(2) No. 2 UWG).

How long

A confirmed sign-up stays until you delete it, at most 12 months after the launch of Produktpass in the JTL Extension Store, and while Produktpass is not available in the JTL Extension Store, at most 24 months after your confirmation; then we delete it (Art. 13(2)(a) GDPR).

Proof of your consent

We must be able to prove that you consented (Art. 7(1) GDPR). For that we record every step: the sign-up with your three answers and the wording of the consent, the confirmation and the withdrawal, each with the time and your e-mail address. This proof stays when you sign up again later. A new sign-up that you do not confirm within 7 days we delete with its answers.

  • If you never confirmed a sign-up, we delete its proof with it: at once through the link, or after 7 days.
  • If you confirmed, we keep the proof after your withdrawal or after the end of the sign-up for 3 more years, as long as the regular limitation period (§ 195 BGB), to be able to defend against claims (Art. 6(1)(f) and Art. 17(3)(e) GDPR), and then delete it.

Protection against misuse

So that nobody uses the form on a mass scale, we limit the number of requests per connection. For that the server forms a check value from your IP address (for IPv6 only from its first 64 bits) with a secret key that changes every hour, and counts the requests of that hour. The check value is deleted when the hour is over, at the latest at the daily cleanup; your IP address is not stored. We send at most 3 confirmation e-mails a day to the same e-mail address. A field invisible to people detects simple programs that fill in forms automatically. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protecting the waiting list and the recipients against misuse.

We do not pass your details on to third parties and use them only for the waiting list and the evaluation above. Whether data is transferred to a country outside the EU: Ja: Unser Webhoster DigitalOcean und unser E-Mail-Anbieter Resend sind US-Unternehmen. DigitalOcean betreibt den Server in Frankfurt am Main; beide sind unter dem EU-US Data Privacy Framework zertifiziert, ergänzend gelten die Standardvertragsklauseln der EU-Kommission.

5. Counter for links to the JTL Extension Store

Links from our ads and posts lead through an address of this website (/go/…) to the plugin in the JTL Extension Store or to the plugin's page. We count, per plugin, campaign and day, how often the link was called; campaigns we did not set up count together as "andere" (other). We store only this number: no IP address, no cookie, nothing that points to you. The request appears in the web host's access log like any other (section 3). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is knowing which advertising leads to visits to the JTL Extension Store.

6. When you write to us

If you send us an e-mail, for example to support, we process your address and your message to answer your request (Art. 6(1)(b) GDPR for questions about a purchase, otherwise Art. 6(1)(f) GDPR). We delete them when the request is settled, at the latest three years after the end of the year in which it was settled; if it concerns a purchase, we keep them as long as commercial and tax law require (§ 257 HGB, § 147 AO: six years).

7. Your rights

You have the right

  • of access to your data (Art. 15 GDPR),
  • to rectification (Art. 16 GDPR),
  • to erasure (Art. 17 GDPR),
  • to restriction of processing (Art. 18 GDPR),
  • to data portability (Art. 20 GDPR),
  • to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR),
  • to withdraw a consent at any time (Art. 7(3) GDPR),
  • to lodge a complaint with a supervisory authority (Art. 77 GDPR), for example with Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Wiesbaden.

For that, write to us at support@extensionfoundry.com.

There is no automated decision-making or profiling (Art. 22 GDPR).