melion.app

Privacy Notice

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our service. Personal data refers to all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is F16R Tech UG (haftungsbeschränkt), Wingertsau 31, 68259 Mannheim, Germany, Tel.: +49 176 2472 9126, Email: mail@f16r.tech. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website purely for informational purposes—i.e., if you do not register or otherwise transmit information to us—we only collect the data that your browser sends to the website server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referrer from which you accessed the site
  • Used browser
  • Used operating system
  • Used IP address (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not shared or used for other purposes. However, we reserve the right to review the server log files retrospectively if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to us), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the prefix "https://" and the padlock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

3.1 Amazon Web Services

For hosting our website and displaying page content, we use the system of the following provider: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter AWS).

When you visit our website, your personal data is processed on AWS's servers. Personal data may also be transferred to AWS's parent company in the USA. The data transfer to the USA is based on the EU Standard Contractual Clauses. You can find details here: https://aws.amazon.com/blogs/security/aws-gdpr-data-processing-addendum.

You can find more information in AWS's privacy policy: https://aws.amazon.com/privacy/?nc1=f_pr.

The use of AWS is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the most reliable presentation of our website. If consent has been requested, processing is carried out solely on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, as far as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF is committed to complying with these data protection standards. More information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5776

3.2 AWS CloudFront

We use the content delivery network Amazon CloudFront CDN. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg (hereinafter "Amazon").

Amazon CloudFront CDN is a globally distributed content delivery network. The transfer of information between your browser and our website is technically routed through the content delivery network. This allows us to increase the global accessibility and performance of our website.

The use of Amazon CloudFront CDN is based on our legitimate interest in providing our web offering as error-free and secure as possible (Art. 6 para. 1 lit. f GDPR).

The data transfer to the USA is based on the EU Commission's Standard Contractual Clauses. You can find details here: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum.

More information on Amazon CloudFront CDN can be found here: https://aws.amazon.com/privacy.

The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF is committed to complying with these data protection standards. More information is available from the provider at the following link:https://www.dataprivacyframework.gov/participant/5776.

4) Contact

In the context of contacting us (e.g. via contact form or email), personal data is processed solely for the purpose of handling and responding to your request and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted when the circumstances indicate that the relevant matter has been conclusively resolved and provided that no statutory retention obligations prevent deletion.

5) Data Processing When Opening a Customer Account

In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary when you provide it to us for opening a customer account. You can find out which data is required for account opening from the input fields of the corresponding form on our website.

A deletion of your customer account is possible at any time and can be carried out in the customer account settings or by sending a message to the above-mentioned address of the responsible party. After deletion of your customer account, your data will be deleted provided that all contracts concluded through the account have been fully processed, no statutory retention periods prevent deletion, and we no longer have a legitimate interest in retaining the data.

6) Use of Customer Data for Direct Advertising

Registration for our Email Newsletter

If you sign up for our email newsletter, we will regularly send you information about our offers. You will only receive it once your email address has been confirmed and you have explicitly given us your consent to receive the newsletter.

By confirming, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. In this process, we store your IP address assigned by your Internet Service Provider (ISP) as well as the date and time of registration to be able to trace any possible misuse of your email address at a later date. The data collected during newsletter registration is used strictly for this purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter, in your account settings, or by sending a corresponding message to the controller named above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have explicitly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.

7) Data Processing for Contract Execution

7.1 To execute the contract, we cooperate with the following service provider(s), who support us fully or partially in the fulfillment of concluded contracts. According to the information below, certain personal data will be transmitted to these service providers.

7.2 Use of Payment Service Providers (Payment Services)

Stripe

One or more online payment methods from the following provider are available on this website: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

If you choose a payment method from the provider where you pay in advance (e.g., credit card payment), your payment data provided during the ordering process (including name, email address, address, bank and card information, currency, and transaction number) as well as information about the contents of your order will be transmitted to this provider in accordance with Art. 6 para. 1 lit. b GDPR. The transmission of your data in this case occurs exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

If you select a payment method where the provider pays in advance (e.g., invoice or installment purchase or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and if applicable, data on an alternative payment method).

To safeguard our legitimate interest in assessing the creditworthiness of our customers, these data will be forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 para. 1 lit. f GDPR. The provider checks, based on the personal data you provide as well as other data (such as shopping cart, invoice amount, order history, payment experiences), whether the payment option you selected can be granted with regard to payment and/or default risks.

The credit check may include probability values (so-called score values). As far as score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things but not exclusively, address data.

You can object to this processing of your data at any time by sending a message to us or directly to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contract-compliant processing of payments.

7.3 Electronic Cancellation Option for Ongoing Obligations with Consumers

Consumers who have entered into contracts for paid continuing obligations (such as subscription contracts) on this website have the option to cancel them via an electronic button in the user account settings, in accordance with the applicable notice periods.

8) Tools and Miscellaneous

sevDesk

For the completion of our accounting, we use the service of the cloud-based accounting software from the following provider: sevDesk GmbH, Hauptstraße 115, 77652 Offenburg, Germany.

The provider processes incoming and outgoing invoices as well as, if applicable, the bank transactions of our company in order to automatically record invoices, match them to transactions, and from this create the financial accounting in a semi-automated process.

If personal data is also processed in this context, the processing is based on our legitimate interest in efficient organization and documentation of our business operations in accordance with Art. 6 para. 1 lit. f GDPR.

9) Rights of the Data Subject

9.1 The applicable data protection law grants you, as the data subject, the following rights against us as the controller with regard to the processing of your personal data (rights to information and intervention), whereby the respective legal basis for exercising these rights is referenced:

  • Right of access pursuant to Art. 15 GDPR;
  • Right to rectification pursuant to Art. 16 GDPR;
  • Right to erasure pursuant to Art. 17 GDPR;
  • Right to restriction of processing pursuant to Art. 18 GDPR;
  • Right to notification pursuant to Art. 19 GDPR;
  • Right to data portability pursuant to Art. 20 GDPR;
  • Right to withdraw consent pursuant to Art. 7 para. 3 GDPR;
  • Right to lodge a complaint pursuant to Art. 77 GDPR.

9.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON A BALANCE OF INTERESTS DUE TO OUR OVERARCHING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING MAY BE PERMITTED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA FOR DIRECT MARKETING PURPOSES.

10) Duration of Storage of Personal Data

The duration of the storage of personal data is determined based on the respective legal basis, the processing purpose, and - if applicable - additionally based on the respective statutory retention period (e.g., commercial and tax law retention periods).

When processing personal data based on an explicit consent according to Art. 6 Para. 1 Lit. a GDPR, the affected data will be stored as long as you do not revoke your consent.

If there are statutory retention periods for data processed within the scope of contractual or contract-like obligations on the basis of Art. 6 Para. 1 Lit. b GDPR, these data will be routinely deleted after the expiration of the retention periods, provided they are no longer necessary for the fulfillment or initiation of the contract and/or we no longer have a legitimate interest in further storage.

When processing personal data based on Art. 6 Para. 1 Lit. f GDPR, these data will be stored until you exercise your right to object according to Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing based on Art. 6 Para. 1 Lit. f GDPR, these data will be stored until you exercise your right to object according to Art. 21 Para. 2 GDPR.

Unless otherwise specified in the other information of this declaration concerning specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

Last updated: Jun 17, 2025