Privacy policy

Controller

Collekton GmbH, Germany (see the imprint for the full address), is the controller for data processing on collekton.com. Contact: legal@collekton.com.

Hosting and server logs

This site is served as static files from Amazon Web Services (S3 and CloudFront, region eu-central-1 / Frankfurt). When you access it, AWS processes the technical data your browser sends — IP address, time, requested URL, user agent — in server logs for delivery and security (legal basis: Art. 6 (1) (f) GDPR, legitimate interest in operating the site securely). Logs are not used to identify visitors and are deleted on a rolling basis.

Local storage — no tracking

The site stores your language choice in your browser's local storage. This value never leaves your device. We use no analytics, no advertising trackers, and no third-party cookies.

Account and address reservation

If you create an account or reserve a COLLEKTON address, your name, email address, password (stored as a hash), and two-factor secret are processed by our identity service at id.collekton.com to provide the account (Art. 6 (1) (b) GDPR — performance of a contract). We delete the data if the account is never activated and you request removal.

Location (directory)

The public directory can find pages near you. Your location is only read after you explicitly request it, is used for that one query to our API (api.collekton.com), and is not stored (Art. 6 (1) (a) GDPR — consent, revocable at any time in your browser settings).

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

To exercise any of these rights, write to legal@collekton.com.