Privacy Policy

Welcome to ReiterWelt. We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our platform. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site.

We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

The data controller responsible for your personal data is:

REITER WELT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ

Address: 82-300 Elbląg, Adama Mickiewicza 13/4, Poland

Email: info@reiterwelt.pro

NIP: PL5783158871

REGON: 524058502

KRS: 0001011181

We collect information that you provide directly to us, including:

• Account Information: Name, email address, username, password
• Quote Requests: Company name, contact details, product preferences
• Usage Data: IP address, browser type, pages visited, time spent on pages
• Cookies: See our Cookie Policy for detailed information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process and manage your account
• Send you quotes, invoices, and order confirmations
• Communicate with you about products, services and promotional offers
• Analyze usage patterns to improve user experience
• Provide an in-app AI assistant that helps you enter and retrieve information; the content you provide to it is processed by our AI provider (Anthropic) on our behalf. It supports our team but does not make solely-automated decisions that produce legal or similarly significant effects about you.
• Comply with legal obligations and enforce our terms

In accordance with GDPR, we process your personal data based on:

• Contract (Art. 6(1)(b)): to deliver our services and handle your quote, booking or order requests
• Consent (Art. 6(1)(a)): to send you marketing emails (news and offers) — only where you ticked the marketing box; you may withdraw this at any time
• Legitimate interest (Art. 6(1)(f)): to capture and follow up sales enquiries, maintain our CRM, and secure our systems against abuse (rate limiting, bot protection); we have weighed these interests against your rights
• Legal obligation (Art. 6(1)(c)): to retain invoices and accounting records for the periods required by law

We engage the following processors, who may receive your personal data to provide their service on our behalf. Each is bound by a data processing agreement. Where a processor is located outside the EU/EEA, transfers are safeguarded as described in the 'International Data Transfers' section.

• Supabase: Database, authentication and file storage (EU region) - Privacy Policy
• Vercel: Application hosting and aggregate usage analytics (USA) - Privacy Policy
• Google (Calendar, Drive, Gmail APIs): Creating consultation-call calendar events and invitations; storing invoice and transport documents; processing business correspondence (USA) - Privacy Policy
• Resend: Sending transactional email (USA) - Privacy Policy
• Google Firebase: Delivering push notifications (USA) - Privacy Policy
• Telegram: Internal notifications to our sales team (non-EU) - Privacy Policy
• Meta Platforms (WhatsApp Business): Notifications via WhatsApp where applicable (USA) - Privacy Policy
• Meta Platforms (Meta Pixel): Ad conversion tracking for our advertising campaigns, only active if you accept marketing cookies (USA) - Privacy Policy
• Google Analytics: Website traffic and conversion analytics, only active if you accept analytics cookies (USA) - Privacy Policy
• Sentry (Functional Software): Application error monitoring and diagnostics (USA) - Privacy Policy
• Upstash: Rate limiting and abuse prevention (stores IP address) - Privacy Policy
• European Commission (VIES): Validating EU VAT identification numbers (EU) - Privacy Policy
• ipapi.co: Approximate geolocation of your IP to select a display language (USA) - Privacy Policy
• Cloudflare (Turnstile): Bot and abuse protection on sign-in pages (USA) - Privacy Policy
• Anthropic: Powering the in-app AI assistant, which processes the content you enter (USA) - Privacy Policy
• Voyage AI: Generating search embeddings from customer, offer and task records so the assistant can retrieve them (USA) - Privacy Policy
• Shopify: Online store orders — customer name, contact and delivery details are synchronised into our system (Canada/USA) - Privacy Policy
• Taiga (Kaleidos): Internal production task tracking; order titles may contain a customer name (EU) - Privacy Policy

We retain your personal data only for as long as necessary for the purposes set out in this Privacy Policy.

Account Data: Retained as long as your account is active and for 3 years after account closure

Quote and Order Data: Retained for 7 years for accounting and legal purposes

Sales enquiries and marketing leads: Retained for as long as there is a legitimate interest in following up (based on our ongoing business relationship and the nature of the enquiry), subject to periodic review. Technical consent evidence such as the IP address recorded with a lead is kept only for as long as needed to demonstrate consent and is then removed.

Analytical Data: Retained for 2 years

When you ask us to erase your data, we honour the request except where we are legally required to keep certain records (for example invoices for accounting purposes), in which case we remove the identifying details and keep only what the law requires.

You have the following rights regarding your personal data:

• Right to access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data
• Right to restriction: Request restriction of processing
• Right to portability: Receive your data in a structured format
• Right to object: Object to processing of your data
• Right to withdraw consent: Withdraw consent at any time
• Right to lodge a complaint: File a complaint with a supervisory authority

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

These measures include encryption, access controls, regular security assessments, and staff training.

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Your core data (account, orders, files) is stored on servers in the European Union with Supabase.

However, some of our processors are located in the United States or other third countries and receive personal data to provide their service — in particular Google (Calendar, Drive, Gmail), Resend, Sentry, Cloudflare, Anthropic, Voyage AI, Shopify and, for internal alerts, Telegram and Meta/WhatsApp. This means transfers of your personal data outside the EU/EEA do take place.

For these transfers we rely on the European Commission's Standard Contractual Clauses and, where the recipient is certified, the EU-U.S. Data Privacy Framework adequacy decision. You may request a copy of the relevant safeguards by contacting us at the address in the 'Contact Us' section.

Our services are not intended for persons under 16 years of age.

We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

It is advised to review this Privacy Policy periodically for changes.

If you have questions about this Privacy Policy or wish to exercise any of your rights — including access, rectification, erasure, or withdrawing consent — please contact us. We handle data-protection requests without undue delay and within one month.

Data protection contact: office@reiterwelt.eu

General enquiries: info@reiterwelt.pro

Address: 82-300 Elbląg, Adama Mickiewicza 13/4, Poland

If you have concerns about the processing of your personal data, you have the right to lodge a complaint with the Polish data protection authority (UODO):

Urząd Ochrony Danych Osobowych (UODO)

ul. Stawki 2, 00-193 Warsaw, Poland

Website: https://uodo.gov.pl