Privacy Policy
Craftingtable — Personal Data Protection & Comprehensive GDPR Notice
Effective date: 2026. szeptember 23.
1. Data Controller Identification
This Privacy Notice is issued in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR).
- Data Controller: Stefel Viktor E.V. (Apphouz)
- Authorized Representative: Stefel Viktor
- Registered Seat: Budapest, Magyarország
- Business Registration Number: 58742196
- Tax Identification: 69420185-1-42
- Dedicated Privacy Office: [email protected]
- General Support: [email protected]
- Official Website: https://craftingtable.apphouz.com
2. Principles of Data Processing
We adhere strictly to core GDPR principles: lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, and robust technical integrity and confidentiality.
3. Data Processing Activities & Legal Bases
- Customer Inquiries & Support:
- *Data:* Name, email, inquiry content.
- *Legal Basis:* GDPR Art. 6(1)(b) (pre-contractual steps) and Art. 6(1)(f) (legitimate interest in correspondence).
- Waitlist & Newsletter Subscriptions:
- *Data:* Email address, subscription timestamp.
- *Legal Basis:* GDPR Art. 6(1)(a) (freely given consent; revocable at any moment).
- Purchasing, Licensing & Statutory Accounting:
- *Data:* Billing name, address, license key, transaction ID.
- *Legal Basis:* GDPR Art. 6(1)(b) (contract performance) and Art. 6(1)(c) (statutory tax compliance, 8-year retention).
- Website Analytics (Google Analytics 4):
- *Data:* Anonymized IP addresses, session events, device categories.
- *Legal Basis:* GDPR Art. 6(1)(a) (explicit consent). Operating under Google Consent Mode v2; no analytics data is collected prior to consent.
4. Subprocessors & Data Transfers
We only engage verified technological subprocessors under robust Data Processing Agreements (DPAs):
- Hosting & Database Infrastructure: Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Németország) — EU datacenters.
- Edge CDN Host: Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA) — EU-US Data Privacy Framework certified.
- Merchant of Record: Lemon Squeezy LLC (222 S Church St STE 100, Charlotte, NC 28202, USA).
- Payment Processing: Stripe Technology Europe Ltd. (The One Building, Grand Canal St Lower, Dublin 2, Írország).
- Analytics: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Írország) — strictly gated by Google Consent Mode v2.
5. Your Rights as a Data Subject
Under the GDPR, you hold full rights to access (Art. 15), rectify (Art. 16), erase ("be forgotten", Art. 17), restrict processing (Art. 18), request data portability (Art. 20), or object to processing (Art. 21). Contact us at [email protected].