Privacy Policy

English translation for convenience. This page is a translation of the German privacy policy. In the event of any discrepancy, the German version is authoritative.

Privacy Policy
Last updated: 2 July 2026

1. Controller

The controller responsible for processing personal data on this website is:

Frank Schwedat
In der Steinriede 9
30161 Hannover
Germany
Email: admin@shootbrothers.de
Phone: 0156-78758051

2. Hosting and delivery of the website

This website is delivered using Cloudflare Workers with static assets. When you access the website, technically necessary connection and log data may be processed, including your IP address, date and time of access, requested content, referrer URL, browser type, operating system and security-related event data.

The purpose of this processing is to provide the website securely, reliably and efficiently. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and technically reliable operation of our website.

3. Contact form

If you contact us using the contact form, we process the information you provide in order to handle your enquiry. This may include your name, email address, telephone number, occasion/event and the content of your message, insofar as you provide these details.

If your enquiry concerns entering into or performing a contract, the legal basis is Article 6(1)(b) GDPR. In other cases, we process your information on the basis of Article 6(1)(f) GDPR; our legitimate interest is the orderly and appropriate handling of incoming enquiries.

Fields marked as required are necessary for us to process your enquiry. Without this information, the form cannot be processed meaningfully.

4. Cloudflare Turnstile

We use Cloudflare Turnstile, a service provided by Cloudflare, Inc., to protect our contact form against spam, misuse and automated submissions. The widget is embedded in the website and the token it generates is validated server-side through Cloudflare's Siteverify interface.

The legal basis for storing information on your device, or accessing information already stored on it, is Section 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), because this is technically necessary to provide the contact form that you expressly choose to use and therefore does not require consent under Section 25(1) TDDDG. The processing of any personal data generated in this context is based on Article 6(1)(f) GDPR.

In particular, IP address, browser and device information, header information, interaction data, security characteristics, token and verification data and other technical data required to detect misuse may be processed. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is protecting our form and systems against abusive automated access.

If technically necessary cookies or comparable technologies are used in connection with Turnstile, they are used solely for security and functionality. At present, we do not use optional tracking or marketing cookies on this website.

5. Sending form enquiries by email

After successful Turnstile verification, your enquiry is processed server-side and forwarded to our internal recipient address using Resend. The information submitted through the form, together with transport and metadata required for delivery, is processed for this purpose.

The legal basis is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR, depending on the content of your enquiry.

6. Recipients and service providers

Recipients of personal data may include the following technical service providers where required for the operation of the website and our communications:

• Cloudflare, Inc. for hosting, static asset delivery, Cloudflare Workers and Turnstile
• Plus Five Five, Inc. / Resend for sending contact-form messages by email

7. Transfers to third countries

When using Cloudflare and Resend, personal data may be processed outside the European Union or European Economic Area, particularly in the United States. We primarily base such transfers on the Standard Contractual Clauses adopted by the European Commission and agreed with our service providers, together with supplementary technical and organisational measures provided by those services.

Where an individual service provider is additionally certified under the EU-US Data Privacy Framework, a transfer may also rely on that framework. In view of ongoing legal and political developments concerning this framework, we monitor further developments and adjust our transfer mechanisms where necessary.

8. Storage period

We retain your enquiry for as long as is necessary to process your message, answer follow-up questions and continue the relevant correspondence. General enquiries are regularly deleted once the matter has been concluded and no statutory retention obligations or legitimate interests require further storage.

Technical log and security data are processed by the service providers according to their respective retention periods. Where statutory retention obligations apply, data is deleted after the relevant period expires.

9. External links and WhatsApp

Our website contains links to contact options via WhatsApp. When you click such a link, you leave our website. Only then may data, particularly connection data, be transmitted to the relevant provider. The provider's own privacy terms apply to its processing.

10. Your rights

Subject to the statutory requirements, you have in particular the right of access to personal data concerning you, rectification of inaccurate data, erasure, restriction of processing, data portability and the right to object to processing based on Article 6(1)(f) GDPR.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

11. Requirement to provide data

You are not legally required to provide personal data. However, without the information marked as required in the contact form, we cannot process your message, or can only do so to a limited extent.

12. Contact for privacy questions

If you have questions about the processing of your personal data or wish to exercise your rights, please contact us at: admin@shootbrothers.de

13. No automated decision-making or profiling

We do not carry out automated decision-making, including profiling, within the meaning of Article 13(2)(f) GDPR on this website.