Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.

Data Collection on this Website

Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the legal notice of this website.

How do we collect your data?
You provide some data directly, for example by email or during the purchase process.

Other data is collected automatically or after your consent when you visit the website by our IT systems. This is mainly technical data (e.g., internet browser, operating system, or time of the page view). This data is collected automatically as soon as you enter this website.

On the checkout page, we record certain browser events for troubleshooting, such as confirmation of the withdrawal notice and JavaScript or Stripe errors. This browser diagnostic function does not read form fields or take screenshots. Separately, the shop processes and logs order and payment notifications as described in section 5.

What do we use your data for?
Part of the data is collected to ensure the error-free provision of the website. Other data can be used to analyze your user behavior. In the case of a purchase, we use your data to process the order and to generate your license keys.

2. General Notes and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Note on the Responsible Body

The responsible body for data processing on this website is:

E-mail: support [at] modulabry.com

Revocation of your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right of Appeal to the Competent Supervisory Authority

In the event of violations of the GDPR, those affected have a right of appeal to a supervisory authority, in particular in the member state of their habitual residence, their place of work, or the place of the alleged violation.

3. Payment Service Provider (Stripe)

We have integrated components from Stripe on our website. Stripe is an online payment service provider. Payments are processed via the so-called Stripe platform.

The European operating company of Stripe is:
Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

The order and payment data needed to process payment is transmitted to Stripe. Where processing is necessary to enter into and perform your purchase contract, it is based on Article 6(1)(b) GDPR. Necessary payment processing does not rely on voluntary consent inferred from selecting a payment method.

During processing via Stripe, the payment data you enter (such as name, e-mail address, credit card number, etc.) is transmitted to Stripe. The data transmission serves the purpose of payment processing and fraud prevention.

Stripe's applicable data protection regulations can be accessed at https://stripe.com/en/privacy.

4. Data Collection when Purchasing a License

When you purchase a license for our Umbraco modules, we collect the following data:

• Buyer's name
• E-mail address
• Company name or domain if applicable (for license generation)

This data is required for the fulfillment of the contract (provision of the license) in accordance with Art. 6 Para. 1 lit. b GDPR. The data will be stored for as long as required by tax and commercial law retention periods.

5. Technical Shop Logs and Licence Delivery

The shop stores its own logs on the webspace to trace order processing, deliver licences and troubleshoot faults. Checkout visits are logged with the IP address and requested product. Delivery logs include the recipient address, subject and delivery status or error messages; the licensee may also be included when an error occurs.

Event notifications sent by Stripe to the shop (webhooks) are currently logged in full, including technical headers. Depending on the event, these may include names, email addresses, billing details, order details, payment status and technical transaction identifiers. These server logs are separate from the browser diagnostics described above.

Where this processing is necessary for order handling and licence delivery, it is based on Article 6(1)(b) GDPR. Technical troubleshooting and shop security are based on Article 6(1)(f) GDPR, our legitimate interest in a reliable and secure service. The shop's own logs are currently stored without automatic deletion based on their age. The 1blu backup and statistics periods described below are not deletion periods for these logs.

6. Cookies and Analysis Tools

Cookies

Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us make our offer more user-friendly, effective, and secure.

We use both "technically necessary" cookies (e.g., for the payment process via Stripe or to store your privacy settings) and "analysis cookies" (Google Analytics) if you have given us your consent to do so.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

Google Analytics

If you have given your consent, this website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We use Google Analytics with activated IP anonymization.

The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 Para. 1 lit. a GDPR. Consent can be revoked at any time via the cookie banner or by deleting cookies in your browser.

7. Provision of the Website (Hosting)

We host the contents of our website with the following provider:
1blu GmbH, Riedemannweg 60, 13627 Berlin, Germany.

According to 1blu, webspace data is stored in Germany. The provider names Frankfurt am Main as its data centre location; Berlin is its business address.

To deliver and secure the website, the host processes technical access data such as IP address, time, requested page, HTTP status, data volume and technical browser information. PHP error logs may also be generated. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in an accessible, secure website.

The host retains logs for technical security and troubleshooting; retention depends on the period needed for those purposes and the hosting provider's configuration. For its access statistics, 1blu describes anonymised IP addresses and monthly storage with deletion after the first week of the following month. This does not establish the same deletion period for unmodified security or error logs. Further information: 1blu privacy notice.

To allow recovery after technical faults, 1blu creates daily webspace backups and keeps snapshots from the last 14 days. These may include personal data in the shop logs. This period applies to webspace backups, not generally to active log files or emails. Information about 1blu webspace backups.

8. Email Contact and Email Provider

If you email us, we process your sender address, message and any attachments to respond to your enquiry. Enquiries concerning a contract or its preparation are handled under Article 6(1)(b) GDPR; other enquiries are handled under Article 6(1)(f) GDPR based on our legitimate interest in communication.

We use 1blu to receive, send and store emails, including licence messages. To provide these services, the provider processes messages including sender and recipient addresses, content and any attachments. Licence delivery serves contract performance under Article 6(1)(b) GDPR.

Correspondence is deleted once the enquiry is concluded and further retention is unnecessary. Statutory retention duties and necessary retention to clarify claims remain applicable. The 14-day webspace backup period is not a general email deletion period.

Last updated: 21 October 2026.