ORDUMI Back to home

Privacy Policy (Datenschutzerklärung)

Last updated: October 2026

1. Controller

ORDUMI Digital Solutions, Owner: Leon Klautsch, Hauptstr. 27, 99988 Heyerode, Germany
Email: info@ordumi.com · Phone: +49 15679 567189

2. Website visitors

Server log files

When you visit our website, our hosting provider automatically processes technical data (IP address, date and time, page requested, browser and operating system). This is necessary to deliver the website securely (Art. 6 (1) (f) GDPR). Logs are deleted after a short period unless needed to investigate security incidents.

Local storage

We store your selected language in your browser's local storage. This is technically necessary for the function you requested (§ 25 (2) TDDDG). Advertising: with your consent (Art. 6 (1)(a) GDPR, § 25 (1) TDDDG) we load the Google Ads tag (Google Ireland Ltd.) to measure ad clicks and completed purchases. Google receives usage data such as pages visited, device information, IP address and an order reference, and sets cookies for this purpose. Outside the EU/EEA, UK and Switzerland the tag loads by default. We store your choice, its date and the notice version in your browser. You can withdraw or change consent anytime via "Cookie settings" in the footer.

Contact

If you contact us by email, we process your details to answer your request (Art. 6 (1) (b) or (f) GDPR).

Social media links

ORDUMI store pages contain only plain links to Instagram, Facebook or TikTok. No embedded posts, plugins or tracking pixels are used, so no data is shared with these platforms while you browse. Data is only transmitted if you click a link and visit the platform yourself; there, that provider's privacy policy applies.

3. Business customers

When you register or order a plan, we process account and billing data (name, company, address, email, phone, VAT ID, plan and payment information) to provide the contract (Art. 6 (1) (b) GDPR) and to meet tax and commercial retention obligations (Art. 6 (1) (c) GDPR, e.g. 10 years under § 147 AO). Payments are processed by our payment provider; we do not store full card details.

4. Data processing agreement (DPA / AVV, Art. 28 GDPR)

For orders, reservations and customer data that end customers submit through a business's ORDUMI pages, the business is the data controller and ORDUMI acts as data processor on its behalf. By accepting our Terms, the parties conclude a data processing agreement under which ORDUMI commits to:

  • process data only on the documented instructions of the business and for providing the service;
  • ensure that persons authorised to process data are bound to confidentiality;
  • implement appropriate technical and organisational measures (Art. 32 GDPR);
  • engage sub-processors only under equivalent obligations and inform the business of changes;
  • support the business in fulfilling data subject requests and reporting obligations, and notify data breaches without undue delay;
  • delete or return all data after the contract ends, unless legally required to retain it.

End customers should direct privacy requests about their orders to the respective business.

5. Infrastructure partners and sub-processors

  • Hosting and content delivery: Cloudflare, Inc.
  • Database and storage: Supabase, Inc. (Amazon Web Services), data stored in the EU
  • Payments: Stripe Payments Europe Ltd. (Ireland)
  • Email: Lovable (transactional email)
  • Advertising measurement (only with consent): Google Ireland Ltd. (Google Ads)
  • Address validation and delivery distance: Google Ireland Ltd. / Google Cloud EMEA Ltd. (Google Maps Platform) – only on ordering pages and in the Hub when a delivery address is entered

Where data is transferred outside the EU/EEA, this is based on an adequacy decision (e.g. EU-US Data Privacy Framework) or EU Standard Contractual Clauses.

6. Security

All connections to ORDUMI are encrypted via SSL/TLS (HTTPS). Access to data is restricted by role-based permissions, and we apply regular updates and backups to protect data against loss and unauthorised access.

7. Your rights

  • Right of access (Auskunftsrecht, Art. 15 GDPR)
  • Right to rectification (Berichtigung, Art. 16 GDPR)
  • Right to erasure (Löschung, Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Widerspruch, Art. 21 GDPR)
  • Right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR)
  • Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR)

To exercise your rights, email info@ordumi.com.

8. Changes

We may update this policy when our services or legal requirements change. The current version is always available on this page.

Back to home