Privacy Policy

SIFAT Road Safety GmbH, Brunsbütteler Damm 448, 13591 Berlin, Germany. Managing directors: Alois Schwarz, Alexander Orlandea. Register court: Amtsgericht Berlin (Charlottenburg), HRB 107998. VAT ID: DE254636409.

Phone: +49 (0)30 52 00 18 30 · Email: info@sifat.de · Web: https://www.sifat.de. Privacy enquiries: info@sifat.de.

These notices apply to SIFAT Racing at sifat-racing.com and the associated .com and .store domains. Personal data is information about identified or identifiable people (Art. 4(1) GDPR).

We process data to answer enquiries and perform contracts (Art. 6(1)(b) GDPR), comply with legal obligations (c), on the basis of consent (a), or legitimate interests in secure operation and business communications (f). Access to storage on your device is also subject to Section 25 of the German TDDDG.

Visits transmit technically necessary data, such as IP address, requested URL, time, browser and device information, to the hosting infrastructure. The website is provided through Lovable. Technical logs may be processed for operation, security and error diagnosis; it is not accurate to say that visits involve no processing.

Where active, Lovable error reporting may receive error messages, technical error details and the affected page path. Its purpose is to restore and secure operation, not personalised advertising. Legal basis: Art. 6(1)(f) GDPR.

For enquiries we process the contact and company details you provide, and where supplied your phone number, address, product interest and message. The originating page or domain is recorded to identify the source. Enquiries are sent to sales@sifat.de for processing. Required fields are identified in each form; we cannot process an enquiry without the necessary information.

Enquiries and order/payment confirmations are delivered through Resend using the Lovable connection. The delivery service receives the recipient, contact and content data needed for the email. The sender may be website@sifat-event.com; your email is used as the reply address for enquiries. Legal basis: Art. 6(1)(b) or (f) GDPR. Provider notice: https://resend.com/legal/privacy-policy. The built-in arithmetic spam check does not use an external reCAPTCHA service.

Orders involve contact data, billing and where relevant shipping addresses, company/VAT details, items, currency and order references. Payment takes place at Stripe. Necessary order and customer data is transmitted to Stripe; payment information is entered in Stripe Checkout. SIFAT does not store full card numbers in the local order history.

Stripe and your selected payment method process payment and, where applicable, verification data under their respective privacy notices. Payment status and order data are processed for fulfilment and confirmation emails. Legal basis: Art. 6(1)(b) and (c) GDPR. Details: https://stripe.com/privacy.

Using the chat sends your messages and the context required to answer them to the Lovable AI Gateway and the AI service it calls (currently Google Gemini), only when you submit a message. Do not enter sensitive data, payment details or confidential third-party information. Responses are generated automatically; the chat makes no decisions about you with legal effects.

Up to 40 recent messages are also stored in your browser under sifat-chat-v1. Currently up to 20 messages are sent to the AI service to generate replies. Local storage therefore does not mean messages are processed only on your device. Delete the local history in the chat or browser settings. Legal basis for the requested information: Art. 6(1)(b) or (f) GDPR. Provider notices: https://lovable.dev/privacy and https://policies.google.com/privacy.

Automatic language/currency selection may use the country code supplied by the hosting infrastructure with the request and your browser language. It does not request a precise GPS location or call a separate geolocation service. Language is selected before rendering only at the general entry point; explicit language URLs remain unchanged. A manual choice takes precedence and is stored only as a language code in the sifat_lang_session session cookie for the browser session, without IP address or country. This storage serves the expressly requested language choice (Section 25(2)(2) TDDDG). A manually selected currency is stored in your browser under sifat_currency. Purpose: suitable display; legal basis: Art. 6(1)(f) GDPR.

The website loads fonts from Google Fonts. This transmits IP addresses and technical request data to Google when pages are opened. Purpose: font display; legal basis for display: Art. 6(1)(f) GDPR.

Line 03 includes a YouTube player whose interface and automatic preview video load when the page opens. Another video loads after pressing its video button. Even youtube-nocookie.com connects to Google/YouTube; IP addresses, technical device and usage data and, depending on the provider, cookies or similar identifiers may be processed. The current statistics/marketing banner choices do not control these connections. Provider notice: https://policies.google.com/privacy. Merely visiting a page does not replace any consent required for non-essential storage access under Section 25(1) TDDDG.

No Piwik/Matomo script or own Google Analytics, Meta Pixel or similar advertising tracker is included in the inspected website. Current statistics/marketing choices do not activate these services. Services described on the Borlabs website are not thereby services of this website; Borlabs Cookie is not installed here.

Social media icons and partner references are links. You visit their external sites only when opening a link, where the respective operator’s notices apply. This differs from fonts and embedded videos that have already loaded.

Data is accessible to staff handling the request and service providers required for hosting, email, payment and AI. Authorities receive data when legally required. Transmission to providers may involve processing outside the EU/EEA, particularly with international providers.

Transfers outside the EEA are subject to Art. 44 et seq. GDPR, such as an applicable adequacy decision or appropriate safeguards. Ask info@sifat.de for the recipients and transfer grounds actually applicable to your data. Linked provider notices do not replace verification of SIFAT’s contractual and transfer safeguards.

Enquiry and contract data is processed for as long as needed to handle the request, perform the contract or safeguard legitimate legal interests. Statutory commercial and tax retention duties remain applicable. Data is then deleted unless another legal basis applies. Ask info@sifat.de for specific retention periods applicable to SIFAT’s providers.

Local browser entries currently have no automatic expiry; they remain until deletion, replacement or browser cleanup. Chat and order history also have limits on the number of entries. Data is transmitted over HTTPS; absolute protection against every possible access cannot be guaranteed.

Subject to statutory conditions you have rights of access (Art. 15 GDPR), rectification (16), erasure (17), restriction (18) and portability (20). You may withdraw consent at any time with future effect, without affecting the lawfulness of past processing.

For processing based on legitimate interests, you may object on grounds relating to your particular situation (Art. 21 GDPR); you may object to direct marketing at any time. Contact info@sifat.de. You may complain to a supervisory authority (Art. 77 GDPR), in particular the Berlin Commissioner for Data Protection and Freedom of Information: https://www.datenschutz-berlin.de.

The website uses local browser storage for cookie choices, cart, order history, chat and currency. Our cookie policy lists the purposes, names and actual storage periods.

Delete or block entries in your browser settings. Further information: www.aboutcookies.org; this may restrict requested functions. Cookie settings are available in the footer and cookie policy.

Merely visiting the website does not constitute consent to non-essential cookies. Saved choices can be changed at any time; changing them does not automatically delete entries already stored by external providers.