Privacy Notice (GDPR)

Controller

Paluv UG

Bergstraße 1

75236 Kämpfelbach, Germany

General privacy inquiries and data protection contact: hello@paluv.de

The full provider details are listed in the imprint.

Scope of this notice

This privacy notice applies to the websites paluv.de, kopi.paluv.de and the static relocation page at misei.dev.

It covers the informational pages, forms, analytics integrations, language preference storage, and embedded content currently implemented on these websites. The misei.dev relocation page uses Umami analytics but has no forms or language-preference storage.

On supported phones, misei.dev can use device orientation to move the scene. Permission is requested where required by the browser. Sensor readings are processed only in your browser and are not stored or transmitted.

Server logs

When you visit the websites, the web server may process IP address, request path, timestamp, status code, referrer, and user agent in server logs to keep the service secure and stable.

Legal basis: Art. 6(1)(f) GDPR.

Contact, waitlist, and newsletter forms

Paluv and Kopi provide forms that process the data you actively submit, in particular your name, email address, message, and technical transmission metadata.

These forms are used to respond to inquiries, handle pre-contractual communication, and manage product or newsletter interest.

Legal basis: Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual communication, otherwise Art. 6(1)(f) GDPR.

Mail delivery processor

Form submissions are relayed to mailer.misei.dev for message delivery to Paluv inboxes. The processor receives the message payload and transmission metadata required to send the email.

Analytics

Paluv and misei.dev use self-hosted Umami at analytics.misei.dev to measure page views, referrers, campaigns, browser and device characteristics, approximate location, and page performance. Umami does not use analytics cookies. Kopi retains its existing analytics integration.

On Paluv we also measure section and product views, link clicks, language changes, scroll depth, visible time, and contact-form starts, validation failures, submission attempts, delivery confirmations, and errors. Names, email addresses, and message contents are not sent as analytics events. Only UTM campaign parameters are retained in event URLs; other query parameters and URL fragments are removed.

On Paluv, click and scroll heatmaps are enabled and 15% of eligible visits are sampled for session replay, with a maximum of five minutes per recording. Text and inputs are masked, and the contact form and its status are excluded entirely. Recording is skipped on legal pages and pages opened with query parameters. Recordings do not include the animated canvas.

Tracking respects the browser’s Do Not Track setting and the local Umami opt-out (localStorage.setItem('umami.disabled', '1'), followed by a page reload). On misei.dev we measure visits and clicks through to Paluv; device sensor readings are not included.

Language preferences

Paluv stores the selected language in localStorage under paluv-language and in the functional cookie paluv_language for up to one year. The cookie lets the server reopen the site in the chosen language.

Kopi stores your selected language in localStorage under the key langChoice so the site can reopen in your preferred language.

Local-storage values stay in your browser until you clear local storage or overwrite the preference.

Recipients

Depending on the page you use, personal data can be disclosed to the technical providers operating mailer.misei.dev and analytics.misei.dev.

Storage period

We store personal data only for as long as it is required for the relevant purpose, for follow-up communication, or to satisfy statutory retention obligations.

Your rights

You may request access, rectification, erasure, restriction of processing, data portability, and object to processing where the legal requirements are met.

You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.