Privacy Policy
Privacy Policy
Last updated: October 2026
Responsible for data processing on this website:
Lukas Fabian Jenet – Crittex
Schwedelbacher Straße 11
67686 Mackenbach, Germany
Email: crittex.mail@gmail.com
1. General Information
The protection of your personal data is important to us.
We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Your data is collected and processed only to the extent necessary for providing our website, processing your orders, and communicating with you.
2. Collection and Use of Personal Data
We collect personal data when:
● you place an order via Crittex.eu,
● you contact us by email, message, or via an inquiry form (e.g. Telegram),
● or you voluntarily provide information for custom-made products or contracts.
The following data may be collected and processed:
● Name, address, and contact details (email, phone number)
● Billing and shipping address
● Payment data (depending on the selected payment method)
● Design preferences, sketches, or notes for individual projects
● Size information and images, if stored in the user profile or otherwise provided
Your data will only be used for the purposes stated in this policy.
3. Purpose of Processing
We use your data for:
● order processing and delivery,
● payment processing and invoicing,
● communication regarding custom-made products,
● compliance with legal and tax obligations.
Your data will not be shared with third parties unless:
this is necessary to fulfill your order (e.g. shipping providers, payment processors)
or there is a legal obligation to do so.
4. Payment and Shipping Service Providers
We work with external service providers to process payments and deliveries:
Payment providers: PayPal, Klarna, or credit card companies.
Shipping providers: DHL (GoGreen) or equivalent providers.
These companies receive only the information necessary to provide their respective services.
5. Protection Against Misuse (Cloudflare Turnstile)
To protect the platform against automated access, spam, and misuse, we use Cloudflare Turnstile, a security service provided by:
Cloudflare, Inc.
101 Townsend St, San Francisco, CA 94107, USA
Cloudflare Turnstile verifies whether a request originates from a human user. Technical information may be processed, including:
- IP address (shortened or risk-based),
- browser and device information,
- time and context of the request.
Processing is carried out solely for ensuring platform integrity and security.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in preventing misuse and attacks).
Cloudflare acts as a data processor.
Data transfer to third countries (USA) cannot be excluded. Such transfers are based on appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular the conclusion of EU Standard Contractual Clauses.
Further information: https://www.cloudflare.com/privacypolicy/
6. Use of Telegram Messenger
For custom-made products and communication, we use Telegram Messenger, a service provided by Telegram FZ-LLC.
Data entered via these forms is transmitted securely and used exclusively to process the individual request.
Telegram FZ-LLC may process data in accordance with its own privacy policy:
7. Cookies and Server Log Files
Crittex.eu does not use tracking cookies or tools to analyze visitor behavior. Functional cookies are used for features such as login, shopping cart, and chat. When you access the website, the web server collects technical data, specifically the IP address, browser type, and the date and time of access.
This data is processed to provide the website, analyze errors, and protect against misuse. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and reliable operation of the website.
The server log files are deleted after 30 days, unless longer storage is necessary to investigate a specific security incident. Translated with DeepL.com (free version)
Age Verification (Technically Necessary Cookie)
To protect minors, we use a technically necessary cookie that stores whether users have confirmed their age (e.g. “18 years or older”).
This cookie serves exclusively to prevent repeated display of the age verification. It does not contain personal data and is not used for analytics, tracking, or marketing purposes.
8. “CrittexChatBubble” Chat Feature
You can use the chat feature to contact Crittex directly. You do not need your own Telegram account to do so.
To process your messages, your messages, the selected conversation topic, the language, the times of the messages, and technical conversation identifiers are stored on our server. For registered customers, the conversation is also linked to the customer account and customer number.
Once you give your consent, your messages are transmitted to Crittex via a Telegram bot. The conversation topic and, for registered customers, the customer number are transmitted. Guests are identified by a randomly generated conversation ID. Names and email addresses are not automatically transferred from the customer account. Any information you include in a message yourself is part of the transmitted message content.
The voluntary use of the chat and the transmission of messages are based on your consent in accordance with Art. 6(1)(a) of the GDPR. You may revoke this consent at any time with future effect by using the contact information provided. Alternatively, you can reach us via the contact options listed in the legal notice.
When you open the chat window, the “crittex_chat_browser” cookie is set with a duration of 30 days. It enables the secure assignment and reopening of your chat session. Translated with DeepL.com (free version)
9. Data Retention
Personal data is stored only as long as necessary to fulfill contractual or legal obligations.
Invoice and tax data must be retained for up to 10 years in accordance with German tax law (§ 147 AO).
After expiration of the retention period or if the purpose no longer applies, data will be securely deleted.
Document Management and Invoice Archiving / Paperless-NGX-Archive
We process personal data in connection with order processing, the provision and archiving of invoices, and internal document management. In particular, we process master and contact data, customer numbers, order and invoice data, as well as document-related administrative and allocation data.
The processing is carried out for the purpose of contract performance, the documentation of orders and invoices, internal administration, and compliance with statutory retention obligations. The legal basis for this processing is Art. 6(1)(b) GDPR and, where statutory retention obligations apply, additionally Art. 6(1)(c) GDPR.
The data is protected by appropriate technical and organisational measures. These include, in particular, measures to ensure the confidentiality, integrity, availability, and resilience of systems, as well as access restrictions based on a role and authorisation concept. Where we use external service providers for hosting, maintenance, or technical operation, this is done exclusively on the basis of a data processing agreement pursuant to Art. 28 GDPR.
The data is stored in data centers operated by Hetzner Online GmbH within the European Union, in particular at the locations Helsinki, Finland, and Nuremberg, Germany. The data is stored only for as long as necessary for contract performance and for as long as statutory retention obligations apply.
10. Product Availability Notification
On our website, users may register on the product page with their email address to receive a notification once an out-of-stock product becomes available again.
Within this function, we process the email address provided by the user as well as the information regarding which product the notification is requested for.
Processing is carried out exclusively for the purpose of sending a one-time notification about the availability of the respective product.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent).
The email address will be stored until:
- the notification has been sent, or
- the data subject withdraws their consent.
Data will not be shared with third parties unless necessary for technical processing (e.g. hosting or email service provider).
Data subjects have the right to withdraw their consent at any time with future effect.
11. Your Rights
Under the GDPR, you have the following rights:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
If you believe your data is being processed unlawfully, you may lodge a complaint with your local data protection authority.
12. Data Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.
All communication and data transmission on Crittex.eu is encrypted (SSL/TLS).
13. Changes to this Privacy Policy
We reserve the right to amend this privacy policy to comply with legal requirements or to reflect changes in our services.
The current version is available at: https://crittex.eu/de/Rechliches/Datenschutz/
Contact for data protection inquiries:
If you have questions regarding the processing of your data, please contact:
Email: crittex.mail@gmail.com