Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

BroDesigns OOD
ul. „Petar Enchev” 15
9000 Varna
Bulgaria
Email: contact@brodesigns.de
Phone: +49 176 43489846

2. General information on data processing

We process the personal data of our users only to the extent necessary to provide a functioning website along with our content and services. Processing regularly takes place only with the user’s consent (Art. 6 (1) (a) GDPR), for the performance of a contract (Art. 6 (1) (b) GDPR), to comply with legal obligations (Art. 6 (1) (c) GDPR) or on the basis of legitimate interests (Art. 6 (1) (f) GDPR).

3. Hosting and server log files

This website is hosted by All-Inkl.com, Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When the website is accessed, the host automatically collects technical access data (including IP address, date and time of access, page accessed, browser used), which is stored in server log files. This processing is technically necessary in order to provide the website and takes place on the basis of our legitimate interest in secure and stable operation (Art. 6 (1) (f) GDPR). The log files are stored for a maximum of seven days for security reasons, for example to investigate cases of misuse, and are deleted afterwards.

4. Cookies

This website uses only technically necessary cookies that are required to operate the checkout and shopping cart system, for example a cookie that recognises a started cart or checkout details already entered, stored for up to 30 days. These cookies are exempt from the consent requirement pursuant to § 25 (2) no. 2 TDDDG, because without them a cart could not work across several page views. These cookies do not track users across websites or for marketing purposes. The legal basis is our legitimate interest in a functioning ordering process (Art. 6 (1) (f) GDPR).

5. Analytics

We use our own server-side analytics system that records only anonymised, aggregated figures on page views and conversion steps. Data is collected via the server-side PHP session, not via cookies, without fingerprinting, without cross-device recognition and without being passed on to third parties or external analysis services such as Google Analytics. No assignment to an identifiable person takes place.

6. Registration and customer account

When a licence is purchased, a customer account is created automatically if one does not already exist. In doing so, we process the name, email address and the order data required to perform the contract. The basis is the performance of the contract (Art. 6 (1) (b) GDPR). Orders, invoices and active licences can be viewed via the customer account. The account can be deleted on request to contact@brodesigns.de, unless statutory retention obligations prevent this (see clause 8).

7. Order processing and payment service providers

To process payments we use the following payment service providers, to which the data required for payment processing (including name, billing address, order amount, payment data) is transmitted as part of the ordering process:

Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland, for payments by credit card and further methods offered by Stripe. Details: stripe.com/privacy
PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, for payments via PayPal. Details: paypal.com/webapps/mpp/ua/privacy-full

The legal basis is the performance of the contract (Art. 6 (1) (b) GDPR). The respective payment service providers process the data as independent controllers in accordance with their own privacy notices.

8. Invoicing and retention obligations

A PDF invoice containing the name, billing address and order details is generated automatically for every order. Invoice-related data is subject to commercial and tax retention obligations (including § 147 AO, § 257 HGB) of up to ten years and is retained for this period, in anonymised form or in the form required for the retention obligation, even after a deletion request.

9. Licence checks and updates

The plugins purchased here check the validity of their licence against our licence server and ask it for updates. In doing so, the licence key, the domain on which the plugin is installed and the installed version are transmitted. This processing is necessary in order to provide the licensed service and to deliver updates (Art. 6 (1) (b) GDPR). No content of the customer’s website is transmitted.

10. Contacting us

If you contact us by email, for example at contact@brodesigns.de, the data you provide (sender address, content of the message) is stored in order to process your enquiry. The legal basis is Art. 6 (1) (b) GDPR if the contact relates to an existing or prospective contract, otherwise our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR).

11. Your rights

Subject to the statutory provisions, you have the following rights: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing based on legitimate interests (Art. 21 GDPR). An informal message to contact@brodesigns.de is sufficient to exercise these rights. You also have the right to lodge a complaint with a data protection supervisory authority.

12. Storage period

We store personal data only for as long as this is necessary for the respective processing purpose or as prescribed by statutory retention periods. Once the purpose no longer applies or the retention period expires, the data is routinely deleted or anonymised.

13. Changes to this privacy policy

We adapt this privacy policy as soon as the legal framework or the services we use change. The version current at the time of your visit applies.

Last updated: 15 September 2026