Datenschutz

vendo lol

Managing Director: Ram Dheeraj Srigiri
Linienstraße 20, 10178 Berlin, Germany
E-mail: hello@vendo.lol

Responsible for data processing under Art. 4 no. 7 GDPR. No data protection officer is required given the size of the company; please address any request directly to the address above.

This site is hosted on servers located within the European Union. Hosting is carried out on our behalf as a processor under a data processing agreement pursuant to Art. 28 GDPR.

Each time you open a page, our server automatically records technical access data that your browser transmits:

• IP address (processed in shortened form where possible)
• Date and time of the request, time zone
• Requested page and referring URL
• Browser type and version, operating system

Legal basis is Art. 6 para. 1 lit. f GDPR — our legitimate interest in delivering the site without errors and in security diagnostics. These log entries are not merged with other data sources and are deleted after seven days at the latest.

This website sets no advertising, marketing or social-media cookies and loads no analytics or tracking tools. Fonts are served from our own servers, not from a third-party CDN, so no data is passed on to font providers. Only technically necessary storage, if any, is used, and it never requires your consent under § 25 para. 2 no. 2 TDDDG.

The enquiry form on this site does not submit data to us over the internet: it assembles a message in your own mail program and sends it from there. Whether a message reaches us, and which data it contains, is therefore in your hands.

If you write to us by e-mail, we process the data you provide (name, venue, city, contact details and the content of your message) to answer and handle the enquiry. Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual or contractual steps) and Art. 6 para. 1 lit. f GDPR (general correspondence). We delete the data once the enquiry is concluded and no statutory retention duties remain — commercial and tax letters are retained for the periods required by law (§ 257 HGB, § 147 AO).

When you buy a pair of sunglasses from a machine, the payment itself is processed by our payment service provider; card, wallet and transaction data are collected by that provider under its own privacy notice. We receive the transaction reference, the amount, the machine and the time — enough for accounting and stock reporting, not enough to build a profile of you. Transaction data are retained for the statutory periods and then deleted.

Our machines report technical status to us: stock level, temperature, error codes, device location and refill needs. This is device data, not personal data, and it is used to keep the machines working.

Under the GDPR you have the following rights with respect to your data:

• Art. 15 — access the data we hold about you
• Art. 16 — have incorrect data corrected or completed
• Art. 17 — have your data erased
• Art. 18 — restrict the processing of your data
• Art. 20 — receive your data in a portable format (data portability)
• Art. 21 — object to processing based on legitimate interests
• Art. 7 para. 3 — withdraw a consent you have given, at any time

Exercise any of these by writing to hello@vendo.lol or to the postal address above. We respond within one month.

You also have a right of complaint to a supervisory authority, in particular the competent data protection authority of the German federal state in which you normally reside or where our company is based.

This site is delivered over an encrypted HTTPS connection. Access to operational systems and to transaction data is limited to the people who need it for their work, and every account is protected with two-factor authentication.

This privacy policy is a statement of current practice. If we change the way this site works — for example by adding a feature that processes personal data — we update this page and describe the change here before it goes live.