Privacy policy

This privacy policy applies to this website and to the web-based management tool "Webshop-Radar". It explains which personal data we collect, the purposes of processing, and the rights you have. The German version of this policy is the legally binding one.

1. Controller

Controller for data processing on this website and within the "Webshop-Radar" tool:

SINEOS GmbH
Stuttgarter Straße 40
73430 Aalen
Germany

Phone: +49 (0)7361 - 890 8540
E-mail: info@sineos.de
Managing director: Florian Elischer und Jan Lippstreu

2. General information

We process personal data of users of this website and of the "Webshop-Radar" tool exclusively within the scope of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

3. Hosting and server location

The servers running this website and the "Webshop-Radar" tool are located exclusively in Germany.

Hosting provider:

Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4–6
32339 Espelkamp
Germany

Phone: +49 5772 293-100
Web: https://www.mittwald.de

A data processing agreement under Art. 28 GDPR is in place with Mittwald. Legal basis is our legitimate interest in providing a secure, reliable and efficient service (Art. 6 (1) (f) GDPR).

4. SSL/TLS encryption

This website and the "Webshop-Radar" tool use SSL/TLS encryption. You can recognize an encrypted connection by "https://" in the address bar and the lock icon.

5. Cookies

We use cookies on this website. Cookies are small text files stored on your device by your browser. We distinguish:

  • Strictly necessary cookies required for the operation of the website (e.g. language preference). Legal basis: Art. 6 (1) (f) GDPR and § 25 (2) no. 2 TTDSG.
  • Optional cookies, e.g. for analytics. These are set only with your explicit consent (Art. 6 (1) (a) GDPR, § 25 (1) TTDSG).

You can withdraw your consent at any time with effect for the future via the cookie banner.

6. Web analytics with Google Analytics

Subject to your consent, this website uses Google Analytics, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Analytics uses cookies and similar technologies that allow analysis of the use of the website.

Collection takes place only with your explicit consent (Art. 6 (1) (a) GDPR, § 25 (1) TTDSG). IP anonymization is enabled, so your IP address is shortened by Google within the EU/EEA before transmission.

Transfers of data to third countries (in particular the USA) cannot be ruled out within the Google infrastructure. Google relies on the EU standard contractual clauses pursuant to Art. 46 GDPR. For more information see Google's privacy policy: https://policies.google.com/privacy.

7. Tag management with Google Tag Manager

We use Google Tag Manager by Google Ireland Limited. Tag Manager itself is a cookieless technology and does not process personal data. It is used exclusively to integrate and manage other tracking and analytics tools (e.g. Google Analytics). These tools are activated only after corresponding consent.

8. Use of the "Webshop-Radar" tool

We provide our customers with "Webshop-Radar", a web-based management tool to monitor and manage Shopware 6 installations centrally. Users can add their own Shopware instances to the tool and store technical connection details (e.g. API credentials) for them.

8.1 Processed data

The following data may be processed and stored when using "Webshop-Radar":

  • Information about each Shopware installation (e.g. domain, version, status)
  • API credentials and technical connection information
  • Account data of registered users (name, e-mail address, password hash)
  • Management and usage data within the system
  • Access and log data for error analysis and security

Storage takes place exclusively for the purpose of providing, securely operating and delivering the functionality of the "Webshop-Radar" service. Legal basis is Art. 6 (1) (b) GDPR (performance of the contract) and our legitimate interest in stable and secure operation (Art. 6 (1) (f) GDPR).

8.2 Important note on API permissions

Because "Webshop-Radar" stores technical credentials for your Shopware installations, we could – purely from a technical perspective – access the respective Shopware installation depending on the API permissions you grant. If API keys with full administrator rights are stored, full access to the Shopware instance cannot be ruled out from a technical point of view.

For this reason we strongly recommend that you do not store API keys with administrator rights in "Webshop-Radar". Issue API keys with the lowest possible scope required for the monitoring and features you wish to use (data minimization in line with Art. 5 (1) (c) GDPR).

8.3 Storage location and encryption

All data of "Webshop-Radar", including API credentials, are stored on servers of our hosting provider Mittwald in Germany. Data is transmitted using SSL/TLS encryption. Backups are encrypted.

8.4 Deletion of data

If a user removes a Shopware installation from "Webshop-Radar", the corresponding data is immediately deleted from the active system. On request, the entire account can also be deleted.

For technical reasons, deleted data may remain in backups for a limited period of time. Backups are kept by the hosting provider Mittwald for a maximum of seven (7) days and are then automatically deleted. The backups are encrypted.

9. Contacting us

If you contact us by e-mail or via a contact form, your information (in particular name, e-mail address and the content of your message) is stored for the purpose of handling your request and any follow-up. Legal basis is Art. 6 (1) (b) GDPR for contractual requests, otherwise Art. 6 (1) (f) GDPR.

10. Storage duration

We store personal data only as long as necessary for the respective purposes or as required by statutory retention obligations (e.g. commercial or tax law). Afterwards the data is deleted or anonymized.

11. Rights of data subjects

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent with effect for the future (Art. 7 (3) GDPR)

To exercise your rights, an informal e-mail to info@sineos.de is sufficient.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR. The supervisory authority responsible for us is State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

13. Status

Status of this privacy policy: Mai 2026. We reserve the right to amend this policy in order to remain compliant with applicable law or to reflect changes to our services.