Privacy policy

Who is responsible

The controller under the GDPR is TODO: company legal name, TODO: street and number, TODO: postal code and city, TODO: country. Contact: contact@elutrolab.com.

Visiting this website

The site is hosted by Vercel Inc. with server functions in the EU (Frankfurt). To deliver pages, the host processes your IP address, the requested page, time and browser details in server logs for a short period (Art. 6(1)(f) GDPR, legitimate interest in a secure and working website). Vercel is certified under the EU-US Data Privacy Framework and bound by a data processing agreement.

Fonts and the 3D model are served from our own domain. Opening the page sends no data to Google Fonts, a CDN for 3D libraries or any advertising network.

Quote requests

When you request a quote we process the details you enter (name, work email, company, country, optional phone, VAT ID, setup and message), the configuration you chose, the language of the page, and the campaign parameters of your first visit (for example utm_source, referrer and landing page). We use them to answer your request and prepare an offer (Art. 6(1)(b) GDPR, steps prior to a contract) and to see which channels bring enquiries (Art. 6(1)(f) GDPR).

Requests are delivered by email through Resend (Resend Inc., USA), which sends on our behalf under a data processing agreement and standard contractual clauses. We keep enquiries that do not lead to a contract for up to 24 months, and longer only where commercial or tax law requires it.

If you tick the box for product updates we email you at most once a month until you unsubscribe (Art. 6(1)(a) GDPR). You can withdraw at any time by replying to any update or writing to us.

Analytics, only with your consent

If you accept analytics, we use Amplitude (Amplitude Inc., USA) with data stored in its EU data centre in Frankfurt. Amplitude records which sections you view, how you use the 3D model and configurator, and whether a quote request was sent, together with a random device ID, browser, language and approximate location. We never send your name, email or anything you type into the form. Session replays, where enabled, mask all form inputs.

With the same consent we may show some visitors a different version of a headline, button label or form layout to compare which works better (A/B tests with Amplitude Experiment). The version shown to you is stored with your random device ID; nothing else changes.

Legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Without consent the Amplitude code is not loaded at all. You can change your choice at any time: Cookie settings.

Storage on your device

• elutrolab-consent (local storage): your analytics choice. Necessary to respect it.
• elutrolab-attribution (local storage): campaign parameters of your first visit, sent with a quote request.
• elutrolab-selection (session storage): the configuration you picked, cleared when you close the tab.
• NEXT_LOCALE (cookie): the language you chose in the language menu. Necessary to show the site in that language.
• Amplitude cookies and local storage, only after you accept analytics.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. You can withdraw consent at any time with effect for the future. You can also complain to a data protection supervisory authority, in particular in the EU member state where you live or work.