✨ New: OnFinds 3.8 is live – AI Visual Tagging is here! Learn more
OnFinds
Legal

Privacy Policy

This English translation is provided for convenience only. The German version of this document is legally binding.

We appreciate your interest in OnFinds. The protection of your personal data is important to us. Below, we inform you in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) about the processing of personal data in connection with the use of this website.

1. Controller

The controller responsible for data processing on this website is:

SALEPIX GmbH
Sandstraße 104
40789 Monheim
Germany

Represented by the Managing Director: Dmitrij Grüne
Phone: +49 (0)2173 999-4691
Email: info@onfinds.com

For data protection matters, you can also reach us at info@salepix.de.

2. Your Rights as a Data Subject

With regard to the personal data concerning you, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)

If you have given consent, you may withdraw it at any time with effect for the future. The lawfulness of processing carried out prior to withdrawal remains unaffected. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

3. Access Data and Server Log Files

Each time this website is accessed, your browser automatically transmits information to the server, which is stored in so-called server log files. This includes in particular the page accessed, the date and time of access, the amount of data transferred, the browser type and operating system used, and the IP address.

This processing is based on our legitimate interest in the technically error-free, secure, and stable operation of the website (Art. 6 (1) (f) GDPR). The log files are deleted after a short period, unless they are needed to investigate misuse or malfunctions.

4. Hosting

This website is operated by an external service provider (host) in Germany, which processes the data on our behalf. This processing is based on our legitimate interest in the secure and efficient provision of the website (Art. 6 (1) (f) GDPR) and on a data processing agreement pursuant to Art. 28 GDPR.

5. Cookies and Consent Management

On this website, we use technically necessary cookies that are required for the operation and security of the website, for example to manage the session and to store your cookie preferences. This processing is based on our legitimate interest in a functional website (Art. 6 (1) (f) GDPR) and Section 25 (2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You can configure your browser to notify you when cookies are set and to reject or delete cookies.

We only integrate statistics and marketing services if you have previously given your express consent via our cookie banner (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). The banner distinguishes between three categories:

  • Necessary – required for the operation of the website, always active.
  • Statistics – anonymized reach measurement (our own statistics and Google Analytics).
  • Marketing – reach measurement, remarketing, and conversion measurement via Google Ads and the Meta Pixel (Facebook/Instagram).

To manage consent, we use Google Consent Mode v2 in "Basic" mode: as long as you have not given consent, no statistics or marketing tags are executed; in this state, no data whatsoever is transmitted to Google or Meta (not even cookieless signals).

Your consent is voluntary and can be withdrawn or adjusted at any time with effect for the future. To do so, click the "Cookie Settings" link in the page footer. In the event of significant changes to the services used, we will obtain your consent again.

6. Our Own Reach Measurement

If you have consented to the "Statistics" category, we analyze access to our website in anonymized form (e.g., pages viewed, time spent on the site) in order to understand how our website is used and to improve it. The IP address is anonymized in the process; no link to an identifiable person is established. The legal basis is your consent (Art. 6 (1) (a) GDPR).

7. Google Analytics 4

If you have consented to the "Statistics" category, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies to analyze the use of the website. The IP address is truncated before any analysis (IP anonymization). The information collected is generally transmitted to a Google server and stored there; this may involve a transfer to the USA.

The legal basis is your consent (Art. 6 (1) (a) GDPR). For data transfers to the USA, Google relies, among other things, on standard contractual clauses of the EU Commission and on the EU-US Data Privacy Framework. Further information can be found in Google's privacy policy: https://policies.google.com/privacy

8. Google Tag Manager

To manage the tags we use, we employ the Google Tag Manager provided by Google Ireland Limited. The Tag Manager itself does not set any cookies for analytics or marketing purposes and does not collect any personal data in this respect; it serves exclusively to deploy other services (tags). The statistics and marketing tags managed via the Tag Manager are only executed after you have given your consent for the respective category (Consent Mode v2, Basic).

9. Google Ads – Remarketing and Conversion Measurement

If you have consented to the "Marketing" category, we use Google Ads services (Google Ireland Limited) for remarketing and to measure conversions. Cookies and similar technologies are used to recognize you when you visit our website, to show you interest-based advertising on third-party websites, and to measure the success of our advertising campaigns. This may involve the transfer of data to the USA.

The legal basis is your consent (Art. 6 (1) (a) GDPR). Further information can be found in Google's privacy policy: https://policies.google.com/privacy

10. Meta Pixel (Facebook and Instagram)

If you have consented to the "Marketing" category, we use the "Meta Pixel" provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta"). The pixel allows us to evaluate the effectiveness of our advertisements on Facebook and Instagram (conversion measurement) and to show you interest-based advertising on these platforms (remarketing). In the process, cookies (including _fbp) are set and information about your use of our website is transmitted to Meta; a transfer to the USA is possible.

For the data collected via the pixel, we and Meta are joint controllers (Art. 26 GDPR); the legal basis is your consent (Art. 6 (1) (a) GDPR). Further information on data processing by Meta can be found in Meta's privacy policy: https://www.facebook.com/privacy/policy

11. Contact and Inquiry Forms

If you send us an inquiry via a form on this website, we process the data you provide (e.g., name, email address, company, subject, and your message) in order to handle and respond to your inquiry. In addition, we store technical data such as your IP address and browser identifier to prevent misuse.

This processing is carried out to respond to your inquiry and, where applicable, to take pre-contractual measures (Art. 6 (1) (b) GDPR), and on the basis of our legitimate interest in handling inquiries (Art. 6 (1) (f) GDPR). Your inquiries are logged and stored in our system until they are no longer required to fulfill the purpose or until you request their deletion; statutory retention periods remain unaffected.

12. Support and Communication via WhatsApp

We offer you the option of contacting us for support inquiries via the messenger service WhatsApp. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a company of the Meta group.

If you contact us via WhatsApp, we process your mobile phone number, your WhatsApp profile name, and the content of your messages in order to handle and respond to your inquiry. The legal basis is Art. 6 (1) (b) GDPR (handling inquiries in the context of existing or prospective contracts) and our legitimate interest in fast and straightforward communication (Art. 6 (1) (f) GDPR).

Please note: WhatsApp becomes aware that communication is taking place between you and us and processes technical metadata of the communication. Data may also be transferred to servers in countries outside the EU, in particular to the USA. Meta is certified under the EU-U.S. Data Privacy Framework; in addition, standard contractual clauses of the EU Commission are used. For details, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/privacy-policy-eea

The use of WhatsApp is voluntary. If you do not wish to transmit any data to WhatsApp, equivalent contact channels are available to you: phone, email, and the ticket system in your customer account. We store your inquiries until they are no longer required to fulfill the purpose; statutory retention periods remain unaffected.

13. Bot Protection via Cloudflare Turnstile

To protect our forms against automated submissions (bots) and misuse, we use the "Turnstile" service provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile checks whether a submission originates from a human. In the process, technical information about your browser and your device as well as your IP address are transmitted to Cloudflare and evaluated.

This processing is based on our legitimate interest in preventing spam and abusive use (Art. 6 (1) (f) GDPR). The use of Cloudflare may involve the transfer of data to the USA. Cloudflare provides appropriate safeguards for this, including standard contractual clauses of the EU Commission. Further information can be found in Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

14. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" in your browser's address bar.

15. Storage Period

We process and store personal data only for as long as is necessary to achieve the respective processing purpose or as required by statutory retention obligations. Once the purpose no longer applies or the periods have expired, the data is deleted.

Upon termination of the contract – including automatic termination after a subscription pause – we delete the data generated on the platform for the customer (e.g. AI-generated product tags, automatically created synonyms, search statistics and reports). Billing-relevant data such as invoices and accounting records are stored for the duration of the statutory retention periods.

16. Currency of this Privacy Policy

This privacy policy is currently valid. Due to the further development of our website or changes in legal requirements, it may become necessary to amend this privacy policy.