[COMPANY NAME] Model Railway Service

Note: This is a skeleton. Have it legally reviewed before going live.

1. Controller

[FILL IN: Company name]
[FILL IN: Address]
Email: [FILL IN]

2. Hosting / Server Log Files

When you visit this website, our hosting provider automatically processes server log files (IP address, date/time, page accessed, browser type). Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure operation). [FILL IN: name hosting provider]

3. Repair Request Form

If you use our request form, we process the data you provide (name, email, optionally phone and address, plus details about your model) to handle your request and prepare a quote. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures). The data is stored in our self-hosted order management system (Dolibarr). [REVIEW: state ERP hosting location]

4. Retention Period

We store request data for as long as required to process your request; if an order is placed, statutory retention periods apply (6 or 10 years under German law, §§ 147 AO, 257 HGB).

5. No External Services

This website does not load external fonts, analytics or tracking services and does not set cookies. [REVIEW: update if this changes]

6. Your Rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).