Privacy policy

1. Controller

Premont Studio, Alexander Steiner, Homburger Str. 11, 61231 Bad Nauheim, Germany. Email: info@premontstudio.com. We have not appointed a data protection officer and are not required to.

2. Hosting and server logs

This website is hosted by Sliplane GmbH, c/o ECOSIA, Gerichtstraße 23, Innenhof 4, 13347 Berlin, Germany, on servers in Falkenstein/Nürnberg (Germany), on our behalf under a data processing agreement (Art. 28 GDPR). When you visit the website, the server logs your IP address, date and time, the page requested (including any search term), the referrer and your browser's user agent. We need this to deliver the website and to keep it secure (Art. 6(1)(f) GDPR). Logs are deleted after 14 days.

3. No analytics or advertising

We do not use analytics, advertising or social media plugins. Exception: YouTube videos, which load only after you click (section 7). Fonts are served from our own server. Product images are fetched by our server and delivered from our domain, so browsing the shop does not connect your browser to any third party.

4. Cookies and local storage

• Cart (cookie premont_cart): set only when you add a script to your cart. Contains the IDs, URL names and names of the scripts in your cart, expires after 7 days or when the cart is emptied.
• Color scheme (local storage premont-theme): stored only when you choose a color scheme. Contains your choice (light, dark or system), is read when a page loads to apply it and is kept until you delete it in your browser.
• Checkout (session storage premont-basket): stores the Tebex basket ID during checkout and is deleted when you close the tab.

These entries are strictly necessary to provide the features you request (§ 25(2) no. 2 TDDDG, Art. 6(1)(b) and (f) GDPR) and need no consent. You can delete them at any time in your browser.

5. Checkout with Tebex

When you click "Continue to checkout", your browser connects to Tebex Limited, United Kingdom, to create a basket; this transmits your IP address and the scripts in your cart. You then sign in with Cfx.re and pay in the Tebex checkout. Tebex is the seller and processes your data as an independent controller to perform the purchase (Art. 6(1)(b) GDPR), see the Tebex privacy policy. Transfers to the United Kingdom are covered by the European Commission's adequacy decision (Art. 45 GDPR).

If you contact us about a purchase, we may look up the related transaction (e.g. order ID, Cfx.re username, email address) in our Tebex account to help you. We do this on behalf of Tebex.

6. Sign-in with Cfx.re

The sign-in is operated by Cfx.re (Rockstar Games) as an independent controller; its privacy policy applies. Tebex receives your Cfx.re username and ID to deliver the scripts to your account.

7. YouTube videos

Product pages can show videos hosted on YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Until you click "Load video", only a preview image is shown, which our server fetches; your browser does not connect to YouTube. When you click, the player is loaded from youtube-nocookie.com: your IP address and device information are transmitted to Google, YouTube may store data on your device, and data may be transferred to the USA. The purpose is to show you product videos. The legal basis is your consent by clicking (Art. 6(1)(a) GDPR, § 25(1) TDDDG); it applies only to that video and page view. You can withdraw it at any time with effect for the future by reloading the page; this does not affect the lawfulness of processing before withdrawal. Data YouTube has already stored on your device can be deleted in your browser (site data of youtube-nocookie.com and youtube.com). We are jointly responsible with Google for collecting and transmitting your data when the player loads (Art. 26 GDPR); Google alone is responsible for any further processing. The recipient is Google Ireland Limited; data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR). We do not store any data in this process; how long Google stores data is set out in the Google privacy policy.

8. Contact form and email

If you use our contact form or email us, we process your message, your email address and, if you provide it, your name to answer you. The legal basis is Art. 6(1)(b) GDPR if your request concerns a contract or steps prior to one, otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries). The contact form sends your message as an email to us; it is not stored on our website. To protect the form against spam and abuse, your IP address is kept in the server's memory for up to 10 minutes (Art. 6(1)(f) GDPR). The contact form runs on our hosting provider (section 2), and our email provider STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, processes the emails on our behalf (Art. 28 GDPR). We usually delete messages 6 months after your request has been dealt with; messages that must be kept by law are kept until the statutory period ends.

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Email us to exercise them.

Right to object (Art. 21 GDPR): where we process data based on legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation.

You may lodge a complaint with a supervisory authority (Art. 77 GDPR), for example Hessischer Beauftragter für Datenschutz und Informationsfreiheit.

10. Other information

You are not obliged to provide personal data; without it you cannot buy scripts. We do not use automated decision-making or profiling (Art. 22 GDPR).