Privacy Policy

Last updated: 25 August 2026

1. Controller

HelpYourRobot
Dr.-Ing. Stefan Stümper
Pappenbergerstraße 17
85072 Eichstätt
Germany
Phone: +49 151 2323 3135
E-mail: Kontakt@HelpYourRobot.de

We have not appointed a data protection officer; the conditions of Art. 37 GDPR and Section 38 of the German Federal Data Protection Act (BDSG) do not apply.

2. Principles

We process personal data only where this is necessary to operate the shop or where you have given your consent. The legal bases are:

Anything that is not necessary to run the shop rests on your consent. Consent is voluntary and can be withdrawn at any time with effect for the future; the lawfulness of processing carried out up to that point remains unaffected.

3. Hosting, delivery and e-mail

Website, database and e-mail are operated by

Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus

as a processor under Art. 28 GDPR. The data processing agreement forms part of the terms of service and does not need to be concluded separately; for transfers outside the EEA it contains the European Commission’s Standard Contractual Clauses (module two or three).

A cache (CDN) operated by the same provider sits in front of the server to speed up delivery. Order and shipping confirmations as well as replies to enquiries are sent via that provider’s SMTP service.

The server for this website is located in Frankfurt am Main, Germany. Contract and support data arising from our hosting agreement may, according to the provider’s own statements, also be processed at its other locations — named are the United Kingdom, the Netherlands, Lithuania and Cyprus. The Standard Contractual Clauses referred to above apply to such transfers outside the EEA.

Your order, customer and access data are not affected by this; they reside on the server for this website.

4. Access data

Each time the site is called up, your browser transmits technically necessary data which the server logs: IP address, date and time, the address requested, the volume of data transferred, the status code, the referring page and the browser identifier. The purpose is delivery of the page, operational security and troubleshooting (Art. 6(1)(f) GDPR).

The website’s access logs are available for seven days and are deleted thereafter; the e-mail server’s access logs for 30 days. No longer retention takes place — it would technically require logging of our own, which we do not operate.

5. Cookies, local storage and your consent

Information is stored on or read from your device. Where this is not strictly necessary in order to provide the service you have expressly requested, it happens only with your consent under Section 25(1) TDDDG.

We manage consent using Borlabs Cookie (Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany). You can change or withdraw your choice at any time via the

Cookie settings link in the footer.

5.1 Without consent — strictly necessary

Beyond this, nothing is stored and no contact is made with a third party before you decide — no further cookies, no local storage, no request to an external server.

5.2 Only with consent

Statistics and advertising under section 9, and the map under section 10.

6. Orders, customer account, payment and shipping

6.1 Orders and invoicing

To process an order we handle your name, billing and delivery address, e-mail address, telephone number where applicable, the goods ordered together with their configuration, and payment and shipping data (Art. 6(1)(b) GDPR; retention under Art. 6(1)(c) GDPR in conjunction with Section 147 of the German Fiscal Code and Section 257 of the German Commercial Code).

The shop runs on WooCommerce. Invoices and delivery notes are generated by

WooCommerce German Market (MarketPress) on our own server; no data is transmitted to third parties in the process.

Transfer to our accounting: for bookkeeping purposes we transfer invoice data — invoice number, amount, tax, payment method, customer name and address — to lexoffice, operated by Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany. The legal basis is Art. 6(1)(c) GDPR in conjunction with record-keeping obligations under commercial and tax law. A data processing agreement under Art. 28 GDPR is in place with Haufe-Lexware GmbH & Co. KG.

6.2 Customer account

You may create a customer account, but you do not have to. It stores your master data and your order history until you delete it.

6.3 Payment

Klarna performs a check before approval. If you choose a Klarna payment method, Klarna carries out an identity and credit check on its own responsibility and then decides automatically whether, and on what terms, the payment method is offered. We only learn the outcome, not the underlying data, and have no influence on the decision. Klarna provides details — including the credit agencies involved and your right to state your point of view — in its own privacy notices.

We do not store complete card details. The providers are independent controllers for their payment processing.

6.4 Shipping

For delivery we pass on your name, delivery address and — where required for delivery notification — e-mail address or telephone number to DHL or DPD. For deliveries to third countries, in particular to Switzerland, we additionally transmit the details required for the customs declaration. For shipment tracking we use Advanced Shipment Tracking for WooCommerce.

7. Product configuration

Our ramps are made to measure. The dimensions and options you enter in the configurator are stored with the order and evaluated for production (Art. 6(1)(b) GDPR).

8. Contacting us and forms

If you contact us via a form, by e-mail or by telephone, we process your details in order to deal with your enquiry (Art. 6(1)(b) or (f) GDPR). To protect against automated submissions we use a procedure that runs entirely on our own server and transmits no data to third parties. No captcha service is used.

9. Audience measurement and advertising

These services are loaded only after your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Before you decide, no contact with Google takes place.

9.1 Google Analytics and Google Ads

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. On the German version both are integrated via Google Tag Manager — a management tool which itself sets no cookies and is delivered from our own server; on the English, French and Spanish versions they are integrated directly. In both cases only after your consent.

Cookies are set in the process and data — including your shortened IP address, device and browser details and your behaviour on the website — is transmitted to Google, where applicable to the USA; see section 12.

We use Google Consent Mode: your decision is transmitted to Google and controls there whether cookies may be set and data used for advertising purposes.

9.2 Our own visitor counter

We operate our own visitor counter, running on our server. It records page views, the referring page, screen size, device type and the dimensions and options selected in the configurator. Your IP address is shortened before storage; a pseudonym is stored. Entries from form fields such as name, e-mail address, postal address or telephone number are expressly not transmitted.

Nothing is stored on or read from your device in the process — the counter works solely from the data your browser transmits with every page request in any case. The legal basis is our legitimate interest in data-minimising in-house audience measurement (Art. 6(1)(f) GDPR); Section 25 TDDDG does not apply because no access to your device takes place.

The data does not leave our server. We delete individual page views after 7 days and detailed data after 14 days; aggregated statistics without any personal reference are kept for up to 400 days. You may object to this processing under Art. 21 GDPR.

9.3 Origin of ad clicks

If you reach us via an advertisement, we store — after your consent — the parameters of the address called up (such as gclid, utm_source) so that the order can be attributed to the correct campaign. Storage takes place on our server.

9.4 Server-side transmission of purchases

When you complete an order, our server reports the purchase directly to Google Analytics — in addition to the report sent by your browser. The reason is technical: during payment you are often redirected to a payment provider’s page, and the report from the browser is regularly lost in the process. Nothing is counted twice — both reports carry the same order number.

This happens only if you have consented to audience measurement. If no consent has been given, nothing is stored with your order and nothing is sent to Google.

The following is transmitted:

• your order number — it serves to attribute the purchase and prevents double counting
• the purchase amount, the VAT included, the shipping costs and the currency
• for each item its item number, name, quantity and price
• the identifiers under which Google records your visit and which already exist
  at the measurement service

Your name, your email address, your postal address, your telephone number and your payment details are not transmitted. Your IP address does not reach Google by this route either — the report originates from our server and not from your device. Nothing is stored on or read from your device for this transmission.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw it at any time via the privacy settings; the transmission will then cease for future orders. Section 12 applies accordingly to transfers to the USA.

10. Google Maps

On our contact pages we embed a map from Google Maps (Google Ireland Limited) in all four language versions so that you can find our location. It is loaded only after your consent; before that you see a placeholder in its place. When it loads, Google learns your IP address and may set cookies.

11. Reviews

11.1 Google Customer Reviews

After an order has been completed, we offer you the opportunity on the order confirmation to take part in Google Customer Reviews. Only if you expressly agree there do we transmit your e-mail address, the order number, the expected delivery date, the delivery country and the items ordered to Google Ireland Limited. Google then sends you an invitation to submit a review. The legal basis is your consent under Art. 6(1)(a) GDPR; you may withdraw it at any time. If you do not take part, nothing is transmitted.

11.2 Display of existing reviews

On our home page we display Google reviews of our business. No connection to Google or any other third party is established when the page is called up, and no cookies are set for this purpose: our server retrieves the reviews once a day itself from Google and stores them. Your browser then loads them like any other text on our page.

For the same reason we do not display profile pictures of the reviewers but their initials — the pictures would be held by Google and displaying them would establish a connection there again.

The display therefore does not require consent; it is visible without agreement. A service provider for displaying reviews is no longer used.

12. Transfers to third countries

Data may be transferred to the USA to the following recipients. On 10 July 2023 the European Commission adopted an adequacy decision for the USA (EU-US Data Privacy Framework); an adequate level of data protection is thereby recognised for certified companies.

Not based in the USA and therefore not affected here: PayPal (Europe) (Luxembourg), Klarna Bank AB (Sweden), Hostinger (Cyprus) and

Haufe-Lexware (Germany).

What this means for you: in the USA, public authorities may under certain conditions access personal data without data subjects from the EU having legal protection against this that is comparable to European standards. You also receive this information in the consent dialogue before you decide.

13. Our Facebook page

We operate a company page on Facebook (Meta Platforms Ireland Limited, Dublin). If you visit that page, Meta processes your data on its own responsibility and under its own terms; we have no influence on this and receive no access to your user data there.

For page insights — the aggregated statistics on how often and by which groups the page is viewed — we are joint controllers together with Meta (Art. 26 GDPR). We receive only evaluations, no individual data. The legal basis is our legitimate interest in presenting our offering (Art. 6(1)(f) GDPR).

Nothing from Facebook is embedded on this website. No Facebook content is loaded and no Facebook cookie is set — neither before nor after consent. Processing begins only when you call up the Facebook page yourself.

14. Product data sent to Google

We transmit our product inventory — names, prices, images, availability and shipping costs — as a data feed to the Google Merchant Center so that our items appear in Google Search and in Shopping ads. It contains no personal data relating to visitors.

15. Recipients of your data

The following bodies receive personal data, subject to the conditions set out above in each case:

Data processing agreements under Art. 28 GDPR are in place with all processors.

There are no other recipients — in particular, we do not sell data and we do not pass it on to third parties for advertising purposes.

16. Storage period

We delete personal data as soon as the purpose ceases to apply and no statutory retention obligation stands in the way. Retention periods of 6 and 10 years respectively apply to order and invoice data.

17. Data security

This website is delivered exclusively in encrypted form (TLS, recognisable by the https:// in the address bar and the padlock symbol in your browser). The data you transmit to us — order details, contact details, choice of payment method — is thereby protected against interception by third parties while in transit.

Access to the shop’s administration area is additionally secured. Complete card details never reach our server; they are entered directly with the payment service provider (section 6.3).

18. Obligation to provide your data

You are not obliged to provide us with personal data. Whether a detail is required depends on what you wish to do:

There is no statutory obligation to provide data. Where we retain data for longer than you intended to entrust it to us, this rests on the retention obligations under commercial and tax law (section 16).

19. Your rights

You have the right of access (Art. 15), rectification (Art. 16),

erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR).

You may withdraw consent you have given at any time with effect for the future — for cookies and similar technologies via the Cookie settings link in the footer, otherwise informally to the address given in section 1.

Right to object: where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to that processing on grounds relating to your particular situation. You may object to direct marketing without giving reasons.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.

20. Automated decisions

On our side, automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place. We do not score you, and none of our decisions about your order is made without a human being.

The position is different for the Klarna payment method: there the provider decides automatically, on its own responsibility, whether to approve (section 6.3). That decision is not ours; it concerns only whether this one payment method is offered to you. All other payment methods remain available regardless.

21. Changes

We will adapt this policy if the processing changes. The version published here at the time applies.