Information on Data Protection in accordance with Art. 13 GDPR
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. For detailed information on data protection, please refer to our complete privacy policy listed below.
Responsible for data processing on this website:
FrictionForm
Email: contact@frictionform.com
The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
The provider of this website automatically collects and stores information in server log files that your browser automatically transmits. This includes:
This data is not combined with other data sources. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.
The data will be deleted after seven days at the latest, unless further storage is required for evidence purposes.
If you send us inquiries via contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR, if your request is related to the performance of a contract or necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Art. 6 para. 1 lit. f GDPR).
When you place an order on our website, we collect the following information:
This data is necessary for order fulfillment and is processed based on Art. 6 para. 1 lit. b GDPR (contract performance). We retain this information for the duration required by tax and commercial law (typically 10 years).
With your consent, we use Vercel Analytics to collect anonymized usage statistics. This service is provided by Vercel Inc. and is designed with privacy as a core principle:
Legal basis: Your explicit consent (Art. 6 para. 1 lit. a GDPR)
Data processor: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA
Privacy Policy: https://vercel.com/legal/privacy-policy
We use secure third-party payment processors to handle transactions. Your payment information is transmitted directly to the payment processor and is not stored on our servers. Our payment providers comply with PCI DSS standards to ensure secure handling of payment card information.
We use Supabase for secure data storage. All data is encrypted in transit and at rest. Data is stored within the European Economic Area (EEA) to ensure GDPR compliance.
As a data subject, you have the following rights under the GDPR:
We use appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. Our security measures are continuously improved in accordance with technological developments.
This website uses SSL/TLS encryption for security reasons and to protect the transmission of personal data and other confidential content. You can recognize an encrypted connection by the “https://” in the address line of your browser and the lock symbol in your browser's address bar.
Personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may be stored for longer periods if required by law (e.g., tax and commercial retention obligations) or if necessary for the establishment, exercise, or defense of legal claims.
We primarily store and process data within the European Economic Area (EEA). If data is transferred to countries outside the EEA, we ensure adequate protection through appropriate safeguards such as adequacy decisions or standard contractual clauses in accordance with Art. 46 GDPR.
If you subscribe to our newsletter, we will use your email address to send you regular updates about our products, promotions, and company news. The legal basis for processing is your consent (Art. 6 para. 1 lit. a GDPR).
You can withdraw your consent and unsubscribe from the newsletter at any time using the unsubscribe link in each newsletter or by contacting us directly. Your email address will then be removed from our newsletter distribution list.
We reserve the right to update this privacy policy to reflect changes in our data processing practices or legal requirements. The current version is always available on this website. We recommend reviewing this privacy policy periodically. Material changes will be highlighted on our website.
If you have any questions about data protection or wish to exercise your rights under the GDPR, please contact us at:
Email: contact@frictionform.com
Subject: Data Protection Inquiry
We process personal data based on the following legal bases under Art. 6 GDPR:
Last updated: December 1, 2025
This privacy policy complies with the EU General Data Protection Regulation (GDPR).