Privacy Policy (Datenschutzerklärung)
This English version is a courtesy translation. In case of doubt the German version applies.
1. Controller
Christoph Schiel c/o POSTFLEX PFX-769-545 Emsdettener Straße 10 48268 Greven
Please do not send parcels or packets to this address.
E-mail: contact@sorty.shop
2. Hosting and server log files
The website is delivered as a static site via Cloudflare Pages (Cloudflare, Inc., Ireland/USA). On every request Cloudflare processes technically necessary access data (e.g. IP address, date and time, requested URL, referrer, browser/system information) in server log files. The legal basis is Art. 6 (1) (f) GDPR (secure, reliable operation); retention follows Cloudflare's policies. Cloudflare acts as our processor (agreement under Art. 28 GDPR). Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR). See Cloudflare's privacy policy for details.
We use no analytics, tracking or advertising tools. The website sets no cookies and embeds no third-party content (no external fonts, no trackers).
3. Contact by e-mail
If you write to us by e-mail, we process your e-mail address and the content of your message to answer your request. The legal basis is Art. 6 (1) (f) GDPR (answering enquiries) or (b) GDPR where your request relates to a contract. We delete the data once it is no longer needed for handling your request and no statutory retention duties apply.
4. Local settings in your browser (localStorage)
The website stores at most the following entries locally in your browser (localStorage — nothing reaches us because of this alone):
sorty.consent— your consent decision (1= accepted,0= declined). Always stored; keeping the decision itself is permitted.sorty.unitSystem— unit system (metric/imperial). Only after consent ("Accept").sorty.drawerOpen— catalog drawer open/closed. Only after consent ("Accept").sorty.finish— chosen cabinet finish/colour. Only after consent ("Accept").sorty:debug— developer switch for diagnostic output. The entry is written only when developers use the browser console (__sorty.debug(true)orsetDebug(true)); the URL parameter?debug=1turns on debug mode for that page view only, without storing anything. A pure developer function, independent of consent, never written by normal use.
There are no user accounts on the public website.
5. Consent banner
On first visit the website shows a banner naming exactly the three local settings (unit system, catalog drawer and cabinet finish) and asks you to "Accept" or "Decline":
- Accept: the three settings are stored locally (
sorty.unitSystem,sorty.drawerOpen,sorty.finish) and persist on your next visit. - Decline: no settings are stored; entries left over from an earlier version are removed. Settings then work per session only. Only your decision (
sorty.consent = 0) is kept so the banner does not reappear.
You can change your decision by clearing the website data in your browser settings; the banner will then appear again.
6. Affiliate links (advertising)
Advertising / ad: sorty does not sell anything. Product links are (or will be) affiliate links to partner programmes (e.g. OTTO/Awin). The catalog is currently a test dataset without active partner links.
When the partner programme is active: clicking a product link takes you to the retailer via the programme's redirect. The partner tag (affiliate identifier) is appended only in that redirect when you leave for the retailer and is never stored or logged. For commission accounting we then keep anonymous click rows (product reference, retailer, timestamp, country) — no name, no IP address, no profiling. The legal basis for the click rows is Art. 6 (1) (f) GDPR (commission accounting). On the retailer's or partner network's side, their own privacy policy applies; they process data under their own responsibility.
7. Operator tooling
Internal administration and operations tooling is access-controlled, runs under its own hostnames and is not part of this website.
8. Your rights
Within the statutory requirements you have the right to:
- access to the data stored about you (Art. 15 GDPR),
- rectification (Art. 16), erasure (Art. 17) and restriction of processing (Art. 18),
- data portability (Art. 20),
- object to processing based on legitimate interests (Art. 21),
- withdraw consent at any time with effect for the future (Art. 7 (3)),
- lodge a complaint with a data protection supervisory authority (Art. 77).
You can delete local settings yourself at any time in your browser (clear website data). For access or erasure requests write to the e-mail address above.
No automated decision-making, including profiling (Art. 22 GDPR), takes place.
9. Version
Last updated: September 2026