Privacy Policy

Table of Contents

1. Privacy Policy
2. Responsible Authority
3. Users‘ Rights - Information
4. Inventory Data
5. Usage Data
6. Hoster
7. Onepage GmbH
8. Advertisements
9. First Contact through Electronic Request
10. Storage Period
11. Cookies
12. Cookies and consent
13. Transfer of data
14. Transfer to Third Parties
15. Transfer to other countries, particularly USA
16. Users‘ Rights
17. Deletion, Correction, Limitation
18. Objection
19. Data Transfer
20. Complaint
21. Consent
22. Changes to the Privacy Policy
23. Data Entry
24. Encryption of Data Entry
25. Contact Forms
26. General contact form
27. Offer
28. Social Media
29. Social Media Links
30. General Information
31. Facebook
32. Instagram
33. WhatsApp Business
34. YouTube
35. Social Media Videos
36. Youtube (Two Click)
37. Map services
38. Link to Google Maps
39. OpenStreetMap
40. Various
41. Zapier
42. Our Social Media Fan Page(s) - General Information

Responsible Authority

We are happy about you visiting our website. We would like to introduce you to the responsible authority in terms of data protection law as applicable:

Katrin Kallweit

c/o Postflex, #10411, Emsdettener Str. 10
48268 Greven
Phone: +49 163.1565619
E-mail: hello@webcolours.de

Users‘ Rights - Information

You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.

Inventory Data

We collect inventory data as far as it is necessary to establish, negotiate or amend a contract (including one without remuneration) between us and the user.

This can be: customer data (for example name, address), contact data (for example e-mail address, phone number), service data (for example services ordered, duration, payment).

Upon establishing the user relationship, we will ask you for this data (for example name, address and e-mail address) and will also tell you which of the information is required to establish the user relationship.

Usage Data

When you access our website, usage data is generated that is technically necessary to deliver the site. This may include: details of the access (e.g. pages opened, time and duration of the visit), content data (e.g. data, text or images you enter or upload) and technical details (e.g. browser, device, IP address).

Hoster

Onepage GmbH

Our Website is presented in the Internet by a service provider. We use the service Onepage GmbH, Hanauer Landstraße 172
60314 Frankfurt am Main

Deutschland.

We have concluded a data processing agreement with our provider.

With this contract, our provider is obliged to process the data according to our instructions.

You can find more information on data processing at our provider in his privacy policy at https://onepage.io/de/datenschutzerklarung.

The legal basis for this data processing is on the one hand our legitimate interest in a technologically perfect online offering and its design and optimization in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, and, on the other hand, our contractual or pre-contractual legal relationship in accordance with Art. 6 para. 1 (b) GDPR.

Each time this website is used, our provider processes information in so-called server log files, which your browser transmits automatically whenever a website is accessed. This data consists of:

This data is processed in order to deliver the website, to ensure its secure and trouble-free operation and to analyse errors; this includes detecting and warding off attacks and abusive access. We do not evaluate the log files in order to identify you personally; they are attributed to a person only where this is necessary to investigate an attack or a malfunction. The log files are deleted as soon as they are no longer required for these purposes; they are retained for longer only insofar as a security incident needs to be investigated.

Advertisements

Insofar as we send you advertising by email, we do so only with your consent or – for our own similar offers to existing customers – insofar as the law permits this without consent. You may object to the use of your email address for advertising at any time.

First Contact through Electronic Request

If you contact us in electronic form (for example by mail, fax, phone, messenger, etc.), we store and process the data which you have given us (for example name, contact information, content of the request). This is based on our legitimate interest in an effective communication with customers in accordance with Article 6 para. 1 (f) GDPR and, as far as it concerns a request to enter into or to perform a contract, also with Article 6 para. 1 (b) GDPR.

We will only pass on this data to third parties as far as required for the performance of the contract (in accordance with Article 6 para. 1 (b) GDPR), by the overwhelming interest in effective services (in accordance with Article 6 para. 1 (f) GDPR) or based on your consent (in accordance with Article 6 para. 1 (a) GDPR) or if there is another legal permission or obligation.

You may ask us at any time and without any cost to provide information about the purpose of the processing, the origin and the recipient, if any, of your data. You may also request that we correct, delete or limit the processing of your personal data. You may object against the (further) processing of your data at any time and you have a right for the data to be made transferable as well as the right to file a complaint with the competent supervisory agency.

In general, your data will only remain stored as long as required by the purpose of the respective data processing. A longer storage is an option, in particular when required in order to pursue our rights, for other legitimate interests of ours or when there is a statutory duty to keep the data longer (for example record-keeping under tax law, statute of limitations).

Storage Period

Generally, your data will only remain stored as long as required by the purpose of the respective data processing. Storage beyond that is possible in particular if it is still required for pursuing our rights or for other legitimate interests of ours.

For your inventory data which were necessary to perform a contract (including one without remuneration), this means that we store this data until the complete performance or termination of the contractual relationship plus the statutory limitation periods plus an adequate extra time for potential interruptions of the limitation period.

For your usage data which was collected in the course of your use of the website, this means that we will store it only for the time still required for the proper functionality and the security of our website and as long as we still have a legitimate interest.

Beyond that, we still store your data for as long as we are required to do so by law. This concerns in particular commercial and tax-law retention obligations; in this respect, we store your data for their duration.

Cookies

In addition to technically necessary cookies, our website also uses cookies and comparable technologies that are not strictly necessary — for example for statistics, reach measurement, marketing or the integration of external content. We only use these if you have consented beforehand. We obtain your consent through a cookie notice (cookie banner) before any such cookies are set.

You can withdraw or adjust your consent at any time with effect for the future — through the cookie settings on our website. Which cookies are used in detail, what purpose they serve and how long they are stored can be seen in the cookie settings or in the cookie notice.

You can withdraw your consent at any time with effect for the future: Revoke consents.

Independently of this, you can also control the storage of cookies through your browser: you can block cookies entirely or in individual cases and delete cookies that have already been stored at any time. The manufacturers of common browsers explain how to do this:

If you block cookies completely, this may limit the functionality of our website and other websites. Information on advertising cookies from third-party providers and how you can manage them can be found at www.youronlinechoices.eu.

Transfer of data

Transfer to Third Parties

We do not transfer your data to third parties unless permitted by law.

Transfer of customer data may either

If your data are transferred to third parties, this is mentioned in this privacy policy.

Transfer to other countries, particularly USA

Insofar as we transfer personal data to countries outside the European Union, in particular the USA, in accordance with the provisions set out below, we will only carry out such a transfer where an adequate level of data protection, appropriate safeguards or your consent, and thus a transfer permitted under the GDPR, is in place.

Users‘ Rights

You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.

Deletion, Correction, Limitation

You may at any time demand from us that we correct (or complete) incorrect data as well as a limitation of the processing of data or deletion of your data. This applies in particular if the reason for processing the data is no longer valid, if a required consent has been revoked and there is no other legal basis or if our data processing is unlawful. We will then correct, block or even delete your personal data without delay as far as permitted by law.

Objection

The right to object to advertisement is governed by our text regarding consent:

Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time.

You just need to contact us without any particular formal requirement, for example by e-mail to the address given in our legal notice or – where we offer this – via a contact form or an unsubscribe link.

Your withdrawal has no effect on the legality of the data processing carried out up to that point.

Data Transfer

Subject to the conditions of Art. 20 GDPR, you may request that we provide you with the data you have provided to us in a structured, commonly used and machine-readable format or – where technically feasible – transmit it to another controller.

Complaint

If you feel that our data processing has violated any of your rights, you may file a complaint with the competent regulatory agency (here you find a list of the agencies).

Consent

Whenever we ask you for your consent for the processing of your data, we will inform you in clear language and in an easily accessible way about the cases for which you will be granting your consent. Any consent that we ask you for is voluntary.

Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. You just need to contact us without any particular formal requirement, for example by e-mail to the address given in our legal notice or – where we offer this – via a contact form or an unsubscribe link. Your withdrawal has no effect on the legality of the data processing carried out up to that point.

Changes to the Privacy Policy

If and when factual or legal reasons will compel us to amend the Privacy Policy, we will update this page accordingly. This will not change the consent provided by the user.

Data Entry

Encryption of Data Entry

When you enter data on our website, whether in a contact form, during the registration process, when you log in or for payment purposes, the website, where you enter the data, is encrypted. Thus, third parties can not read what you enter. You will recognise the encryption by the lock symbol in your browser and by the URL beginning with “https“ instead of “http“.

Contact Forms

General contact form

When you fill out a contact form or when you send us an e-mail or another electronic message, your information will be stored for the processing of the request, for possible follow-up questions or for other related questions and will only be used to follow up with the request.

Your data will be transferred in an encrypted manner, preventing third parties from reading your data while it is being entered.

Basis for this storage is the safeguarding of our legitimate interests in regard to communication with interested users pursuant to Art. 6 para. 1 (f) GDPR and in the case of inquiries prior to entering into a contract also the performance of a contract pursuant to Art. 6 para (b) GDPR.

Your data remains stored for as long as the processing of the request requires, in particular as long as the storage is still necessary to perform the contract, to pursue our rights or for our other legitimate interests or we are compelled by law to keep your data stored (for example based on tax-law requirements to maintain files).

Offer

On our website, you find a contact form, through which you may request a specific offer for our goods and services. We will ask for for the necessary data as in the form, so we can prepare the offer.

Your data will be entered in an encrypted manner, so that third parties cannot read your data while being entered.

The legal basis for this storage is our legitimate interest in communication with interested users in accordance with Art. 6 para. 1 (f) GDPR and in case of contractual requests also the storage of contractual data in accordance with Art. 6 para. 1 (b) GDPR.

These data remain saved until you will terminate your access by sending an e-mail to the e-mail address listed in the "About Us" section. After that, they will remain stored in connection with the necessary performance of the contract (see the section on user/contract data).

Social Media

We refer with links to our social media presences.

When you follow any such link to the social media site, your data will be broadcasted to that site.

The social media site will normally store a cookie in your browser and to your account information there, especially, if you are logged into your social media account on the site.

The social media site can analyse your use of the platform and your browsing habits and will use these for targeting advertisements based on your interests.

That can lead to ads being shown to you when browsing in- and outside of the social media site.

Please inform yourself about the use of your data on these sites and use them only, when you agree to that use of your data, that happens on that social media site, in particular, when you are not using that social media site for the first time.

We have added links to all the privacy policies of the social media site for your information.

Our website uses links to our presence in the social network of Facebook by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland. It is just a normal link. Thus, when you open our site, Facebook will not learn of your visit to our website. But once you click on the link, you will be led to Facebook, allowing Facebook to learn that you have visited out site.

Your data will be forwarded by Facebook Ireland on the base of the standard contractual clauses to Facebook USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

The collection and use of your data which is possibly carried out by Facebook after clicking on the link is beyond our knowledge or control. You may find further information in Facebook’s privacy policy at https://en-gb.facebook.com/policy.php.

Our website uses links to our presence in the social network of Instagram by Instagram LLC, now Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland.

It is just a normal link. Thus, when you open our site, Instagram will not learn of your visit to our website. But once you click on the link, you will be led to Instagram, allowing Instagram / Facebook to learn that you have visited out site.

Your data will be forwarded by Meta Platforms Ireland on the base of the standard contractual clauses to Meta Platforms USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

The collection and use of your data which is possibly carried out by Instagram/Facebook after clicking on the link is beyond our knowledge or control. You may find further information in Instagram’s privacy policy at

https://privacycenter.instagram.com/policy.

WhatsApp Business

For our communication with interested parties, users and customers, we use the WhatsApp messenger. It is provided by WhatsApp Inc., 1601 Willow Road, Menlo Park, California 94025, USA. The legal basis for our use of WhatsApp depends on your way of using it.

Questions regarding our services will be processed based on the permission for contractual data in accordance with Art. 6 para. 1 (b). If we have used WhatsApp to ask you to consent to communication with us via WhatsApp, we will process your data based on that consent pursuant to Art. 6 para. 1 (a) GDPR.

We also use WhatsApp based on our legitimate interest in a technologically perfect online offering and its design and optimisation in a fast and technologically always available user and customer communication in accordance with Art. 6 para. 1 (f) GDPR.

The whole communication via WhatsApp is peer-to-peer encrypted. Hence, third parties cannot access the communication. We don't know what access WhatsApp has itself, but WhatsApp does collect and store so-called metadata, like information about who sent a message to whom at what time.

WhatsApp will only use your data for sending messages and for analyzing the messenger on our behalf.

Beyond that, WhatsApp will only use your data in order to improve their own services.

WhatsApp will however not use the data to contact you directly, nor pass on your information to third parties.

Your data may however be forwarded by WhatsApp to the USA and to Facebook, which owns WhatsApp.

For the details of how your data will be handled by WhatsApp, we refer you to the privacy policy of WhatsApp.

When using this provider, it may happen that your data is transferred to the USA. However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions.

To ensure the best possible data protection when using WhatsApp, we only use the business version of WhatsApp and have configured WhatsApp in such a way that it does not apply its automatic data matching with the phone book of the mobile device used. We have also concluded a data-processing agreement with WhatsApp, according to which WhatsApp will only process your information in accordance with our instructions.

Your messages will remain stored as long as required by the processing of the communication, in particular as long as required for the performance of the contract, for pursuing our rights or for our other legitimate interests or if we are bound by law to keep your data longer (for example pursuant to tax-law requirements to keep documents).

Our website uses links to our presence in the social network of YouTube by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. It is just a normal link. Thus, when you open our site, YouTube will not learn of your visit to our website. But once you click on the link, you will be led to YouTube, allowing YouTube to learn that you have visited out site.

The data collected by Google may be transferred by Google to countries outside of the EU, in particular to the USA.

However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

You may find further information in YouTube’s privacy policy at

https://www.google.de/intl/de/policies/privacy/.

Social Media Videos

Youtube (Two Click)

We use YouTube, a service provided by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland in order to embed videos.

To protect your data, we use a two-click solution: the video is only loaded once you click the button.

Only then does Google learn your IP address and about your visit to our website.

If you have consented to this transfer via the button or through our cookie notice, the legal basis is your consent pursuant to Art. 6 para. 1 (a) GDPR.

If you confirm the plugin while being logged in at YouTube, Google may attribute your use to your user account.

You can withdraw your consent at any time with effect for the future by opening the cookie settings on our website and adjusting your selection.

The lawfulness of the processing carried out until the withdrawal remains unaffected.

The data collected by Google may be transferred by Google to countries outside of the EU, in particular to the USA.

However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

Google also processes the data generated when a video is played for its own purposes.

You may find further information in YouTube’s privacy policy at

https://www.google.de/intl/de/policies/privacy/.

Regarding the general approach to cookies and their deactivation, we refer you to our general information in this Privacy Policy.

Map services

On behalf of our legitimate interest in a technically flawless online service and its economically efficient design and optimization acc. to art. 6 para. 1 lit. f GDPR on our entry on Google Maps, a map service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), we link an interactive map with which you can find us.

Visiting our website, does not already lead to Google knowing about your visit on our website. However, like with any other link, once you click the link, this will lead to your data being processed by Google.

This also tells Google about your visit to our website and your search for our location. Google can analyze your user behavior with your data and use it for (interest-based) advertising. This can lead to the corresponding advertisement being shown to you.

We have no knowledge of the collection and use of your data by Google after clicking on the link, and we have no influence on this. You can find further information in Google's privacy policy at https://www.google.de/intl/de/policies/privacy/.

OpenStreetMap

Based on your consent pursuant to Art.6 para. 1 (a) GDPR, we use the HTMP geo-location API provided by the open-source OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, UK, to use your location for location-specific offers.

If you use the location detection function via HTML5 geolocation API, the OpenStreetMap API transmits the location data you entered to the OpenStreetMap search engine, which determines the coordinates of your current location and converts it into an address. Depending on the technical integration, OpenStreetMap may also receive your IP address in this process.

Further information about the use of your data by OpenStreetMap can be found in the privacy policy of OpenStreetMap https://wiki.osmfoundation.org/wiki/Privacy_Policy.

If you don't want your data to be transmitted, you don't need to activate the location data.

Various

Zapier

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use Zapier, a service provided by Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA, in order to integrate different databases and tools. In the course of this, your customer information (but not your payment information) will be transmitted to Zapier.

When using this provider, it may happen that your data is transferred to the USA. However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. This applies in particular since the US Presidential Decree of 07.10.2022. 

For the handling of your data at Zapier, we refer you to the Privacy Policy of Zapier at https://zapier.com/privacy/.

Our Social Media Fan Page(s) - General Information

Beside our website, we also use fan page(s) on social media platforms.

Above, we have already informed you about the data processing on our website and we have in particular made sure that the fact alone that you access our website is not yet forwarded to the social media platform.

Following the ECJ ruling dated 5 June 2018 about social media presences, we want to inform you about the data processing during your visit to our social media fan page(s):

On the basis of our legitimate interest in a timely customer communication pursuant to Art. 6 para. 1 (f) GDPR as well as for advertising and public relations purposes, we present ourselves and our offers on social media fan page(s).

Our social media fan page(s) usually can be accessed online independently of you having a user account with the relevant platform or not. But in either case, your data will be processed by the social media platform.

Each time the social media platform is accessed, your IP address will be collected and stored. Usually, a cookie will also be placed on your page, which will save your visit and further data about your visit to the social media platform.

If you are logged in with the social media platform, your visit will also be spotted by a cookie or through other technological means and will be attributed to your user account.

Thus, the social media platform is usually able to analyse your user behaviour.

In this process, a user profile with your interests is generated, which the social media platform will use to provide you with a user experience tailored to your interests, in particular advertisement tailored to your interests within and outside of the social media platform – even across different devices, if applicable.

Your data may also be used for market research.

For the details, we refer you to the following privacy policies of the social media platform(s) used by us.

We can usually also use the data of the social media platform in order to allow you to use our fan page in accordance with your interests or to approach you with advertising.

When you interact with our fan page and if you are logged in with the relevant social media platform, according to the social media page's terms of use, we can usually also recognise your user profile and see your content.

If you do not want this, we point you to our explanations about cookies above, with general information about cookies and their deactivation. There, we have laid out in general terms how you can prevent or limit cookies being stored on your devices. Further information about the respective social media platform can be found hereinafter.

According to the aforementioned ECJ ruling dated 5 June 2018, we are always jointly responsible for our social media fan page(s) together with the relevant social media platform.

This means that you may also exercise your general rights, which we have listed in detail above under the heading “Users' Rights”, against us. To that purpose, we refer you to our contact details at the beginning of this Privacy Policy.

Please keep in mind, though, that we have no conclusive knowledge of the exact scope of the processing of your data by the social media platform and have even less influence on it. Therefore, we kindly ask you to contact the relevant social media platform in the first place regarding your rights.

We generally leave your data on the social media platform and do not import it onto our server. But if that should occur, our general information regarding the storage period will apply.

Further information about the processing of your data and the storage period on the social media platform can be found in the respective privacy policy of the social media platform, which we have listed hereinafter.

We ask for your attention

This website was created on behalf of a company based in Indonesia (Bali).

The design and formulation of this presence is a pure CHARITY project without any payments.

If you have any legal comments and/or complaints, we ask you to let us know without taking immediate legal action.

We assure you that we will immediately correct any deficiencies in the website. Thank you!

Last updated: 2026-10-19