Privacy policy

This privacy policy explains which types of personal data we process, for which purposes, and to what extent. It applies to our website, related online services, and our external social media profiles. The terms used are not gender-specific.

Fourier GmbH
Gannerbarg 23
21149 Hamburg
Germany

Managing Director: Dr. Andreas Cerbe
Commercial register: Hamburg Local Court, HRB 170352
Email: info@drezzl.com

We are not legally required to appoint a data protection officer under Section 38 of the German Federal Data Protection Act (BDSG). You may direct all privacy enquiries to the contact details above.

We process contact data, usage data, and technical metadata, communication, procedural, and log data. The persons affected are visitors to our website, people who join the waitlist, communication partners, and users of our social media profiles.

Processing serves to provide and secure the website, operate the waitlist, communicate about the DREZZL launch and product updates, respond to enquiries, and maintain our public presence.

We process personal data under the following provisions of the General Data Protection Regulation (GDPR):

• Consent (Art. 6 (1) (a) GDPR): you have consented to processing for one or more specified purposes.
• Contract and pre-contractual steps (Art. 6 (1) (b) GDPR): processing is necessary to perform a contract or take steps at your request before entering into one.
• Legal obligation (Art. 6 (1) (c) GDPR): processing is required to comply with a legal obligation.
• Legitimate interests (Art. 6 (1) (f) GDPR): processing is necessary for our legitimate interests or those of a third party, unless your interests or fundamental rights override them.

German national data protection law, in particular the BDSG, also applies.

When you access this website, technical data required to deliver and secure the service may be processed. This may include your IP address, request date and time, requested files, transferred data volume, referrer URL, browser, operating system, device information, and access status.

We process this data to deliver the website, ensure stability and security, prevent misuse, and administer the technical infrastructure. The legal basis is our legitimate interest in providing a secure and reliable service under Art. 6 (1) (f) GDPR. Server logs are generally erased or anonymised after no more than 30 days, unless longer retention is required to investigate a security incident.

The website is built, hosted, and operated using Lovable services. Lovable provides infrastructure including hosting, computing, and database services and uses subprocessors for parts of that infrastructure. The service provider is Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden. Further information is available in the Lovable privacy policy, its data processing agreement, and its subprocessor list.

Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, provides content delivery, performance, and security services. Requests may be routed through Cloudflare systems, which process IP addresses, request and connection data, and device information. More information is available in the Cloudflare privacy policy and data processing agreement.

If you join the DREZZL waitlist, we process the email address you provide, your selected language, the consent wording shown at registration, the registration and confirmation timestamps, your IP address, user agent, subscription status, and a technical confirmation token. We use this information to manage the waitlist, document your consent, and send information about the DREZZL launch and product updates.

The legal basis for sending promotional email updates is your consent under Art. 6 (1) (a) GDPR in conjunction with Section 7 (2) of the German Act Against Unfair Competition (UWG). Registration records are processed under Art. 6 (1) (f) GDPR based on our legitimate interest in proving that the process was properly completed and preventing misuse.

The waitlist is designed to use a double opt-in procedure: after registration, the email address must be confirmed through a confirmation link before the subscription becomes active. This prevents third parties from registering another person’s address. Pending and confirmed records are stored in our protected database; public reading, editing, or deletion of subscriber records is not permitted.

You may withdraw your consent at any time with effect for the future by emailing info@drezzl.com. Once regular email updates begin, they will also provide an unsubscribe option. Withdrawal does not affect the lawfulness of processing carried out before it.

We erase subscriber data when consent is withdrawn or the purpose no longer applies, unless legal requirements permit or require further retention. We may retain limited evidence of a previous consent or objection for up to three years to establish, exercise, or defend legal claims. An email address may also be retained in a suppression list where necessary to honour an objection permanently.

The website stores your light or dark appearance preference locally on your device. This is technically necessary to remember your chosen display setting. No advertising or analytics cookies are currently used on this website.

We may disclose personal data to service providers that process it on our behalf, particularly hosting, infrastructure, database, security, and email service providers. Where required, these providers are bound by data processing agreements under Art. 28 GDPR.

If personal data is transferred outside the European Union or European Economic Area, we rely on a valid adequacy decision, the EU–US Data Privacy Framework where applicable, EU Standard Contractual Clauses, or another lawful safeguard under Arts. 44–49 GDPR. Information on the Data Privacy Framework is available at dataprivacyframework.gov.

Our website links to DREZZL profiles on Instagram and TikTok. These are ordinary external links; no social media content is embedded and no data is sent to those platforms merely because you visit this website. If you follow a link, the platform provider processes data under its own responsibility and may process data outside the EU or EEA.

Instagram is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. See the Instagram privacy policy. TikTok is provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. See the TikTok privacy policy.

We erase personal data when consent is withdrawn, the processing purpose no longer applies, or no other legal basis remains. Data may be retained longer where required by law or necessary to establish, exercise, or defend legal claims. During such retention, processing is limited to the relevant purpose.

Subject to the statutory requirements, you have the following rights:

• access to your personal data under Art. 15 GDPR;
• rectification of inaccurate data under Art. 16 GDPR;
• erasure under Art. 17 GDPR;
• restriction of processing under Art. 18 GDPR;
• data portability under Art. 20 GDPR;
• objection to processing under Art. 21 GDPR; and
• withdrawal of consent at any time under Art. 7 (3) GDPR.

Where we process data for direct marketing, you may object at any time without giving reasons. To exercise your rights, contact info@drezzl.com.

You have the right to lodge a complaint with a data protection supervisory authority, particularly in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement. The competent authority for our registered office is the Hamburg Commissioner for Data Protection and Freedom of Information.

We update this privacy policy when changes to our services, processing activities, or legal requirements make this necessary. Please review the current version periodically. If a change requires your consent or individual notification, we will inform you separately.

Based on a template created with the free privacy policy generator by Dr Thomas Schwenke at Datenschutz-Generator.de, translated and adapted to this website’s current processing activities.