Privacy Policy for Print-On-Demand Business

Welcome to printondemandbusiness.com (the “Website”). This Privacy Policy explains how we (“we,” “us,” “our”) collect, use, share, and protect personal data of our users. We are committed to safeguarding your privacy and complying with the GDPR and other relevant data protection laws.

Data Controller:
Dipl.-Ing. Samir Alibabic - Online Marketing
Klugstr. 99
80637 Munich
Germany

Contact Email: kontakt@samiralibabic.de

Personal Data We Collect

• Contact Information: Information you provide via forms, such as name, email address, company, website, listing details, and sample-order intent details, for purposes like newsletter subscriptions, supplier submissions, tool submissions, and manual review workflows.
• Usage Data: Cookieless aggregate usage information collected through self-hosted Umami analytics, such as page URLs, referrers, browser/device information, country-level location, and safe interaction events. Form personal data and raw search text are not intentionally sent to analytics.
• Technical Data: Data processed to operate the website and forms, including device and request information handled by the hosting, API, image delivery, and payment infrastructure.

Sources of Data

• Direct Data: Data provided directly by users (e.g., through forms).
• Automated Data Collection: Data automatically processed by hosting, API, image delivery, payment infrastructure, and cookieless analytics services.

• To Operate the Website: Essential technical request data is processed to operate and maintain the Website. The legal basis is our legitimate interest according to Art. 6 para. 1 lit. f GDPR.
• Newsletter Subscription: Contact information is collected based on your consent under Art. 6 para. 1 lit. a GDPR to send updates and news.
• Supplier, Tool, and Sample Intent Forms: Data is processed to review and evaluate new directory submissions, featured listing requests, and sample-order intent requests, based on our legitimate interest or your consent (Art. 6 para. 1 lit. f or a GDPR).
• Paid Listing Checkout: Where a paid featured listing request is selected, Stripe processes checkout and payment data. We store limited payment status and submission references needed to review and administer the request.
• Analytics and Performance Monitoring: We use self-hosted Umami analytics to analyze aggregate Website usage, improve content, and optimize performance. The legal basis is our legitimate interest according to Art. 6 para. 1 lit. f GDPR. Form personal data and raw search text are not intentionally sent to analytics.

• Hosting and API infrastructure: The public website is delivered as a static Astro site. Newsletter, submission, and sample-intent forms submit data to api.printondemandbusiness.com. Active form data is stored in owned private SQLite state on Hetzner/Coolify infrastructure, accessible only to authorized personnel.
• Umami analytics: We use a self-hosted Umami instance at analytics.samiralibabic.com for cookieless pageview and event analytics. It is configured for aggregate usage measurement and does not intentionally receive form personal data or raw search text.
• Image host and delivery: Images may be delivered through img.printondemandbusiness.com and related hosting infrastructure, with Cloudflare providing the cache/network layer. These services may process technical request data during content delivery.
• Stripe: Stripe handles checkout and payment data for paid featured listing requests where applicable. Link to Stripe’s Privacy Policy.
• Historical imports: Legacy Google Sheets or exports may exist as historical records or import sources from earlier workflows. They are not the active backend for new newsletter, submission, or sample-intent form data in the current cutover architecture.

• Necessary Cookies: The current public frontend does not set a cookie preference cookie. Essential third-party services such as Stripe may use their own necessary cookies during checkout or payment flows.
• Analytics Cookies: The active Umami analytics setup is cookieless and does not use Google Analytics cookies.
• Marketing Cookies: No marketing tags are loaded by the current public frontend.

Future Cookie-Setting Services

If we add cookie-setting analytics, advertising, or personalization tags in the future, we will re-enable an appropriate consent flow before those services are loaded.

• Newsletter, Submission, and Sample Intent Form Data: Retained as long as necessary for the purpose of collection, review, administration, or until the user withdraws consent where applicable.
• Analytics Data: Stored in the self-hosted Umami analytics system according to the retention settings configured there, unless deletion is required sooner.

Users have the following rights under GDPR:

• Access: The right to request access to personal data we hold about you.
• Correction: The right to request corrections to inaccurate or incomplete data.
• Deletion: The right to request deletion of data when it is no longer needed or when consent is withdrawn.
• Restriction: The right to request restriction of processing in specific situations.
• Data Portability: The right to request data in a transferable format, where applicable.
• Object: The right to object to certain data processing activities, especially in relation to direct marketing.

How to Exercise Rights

To exercise these rights, please contact us at kontakt@samiralibabic.de.

We implement measures to protect personal data from unauthorized access, disclosure, or loss, including SSL encryption to secure data transmission and restricted access to data for authorized personnel only.

Where data is transferred outside the European Union by service providers such as hosting, payment, or infrastructure partners, appropriate safeguards, such as Standard Contractual Clauses (SCCs), are used where required.

We may update this Privacy Policy periodically. The latest version will be posted on this page, with the date of the last revision indicated.

If you have any questions or concerns regarding this Privacy Policy or your data, please contact us at kontakt@samiralibabic.de.