Privacy policy

This policy applies to the website defactory.eu. Our shops – YourCandles, YourParts and NextStitch – each have their own privacy policy on their website. This is a translation; the German Datenschutzerklärung is the binding version.

Controller

No cookies

This website sets no cookies and loads no content from other providers. The only thing stored on your device is what you ask for yourself: your objection to the usage statistics (see below).

Usage statistics (Plausible Analytics)

To understand how this website is used, we run Plausible Analytics on our own server. No analytics provider is involved: the software is self-hosted, the data never leaves our infrastructure and is not transferred to a third country.

Plausible works without cookies and without an identifier on your device. For each page view it records: the page, the referring page, the approximate country of origin, and the browser, operating system and device type. To recognise repeat visits within one day, your IP address and your browser's user agent are combined with a value that changes daily into a hash that cannot be reversed; the IP address itself is discarded at once and never stored. Once the daily value changes, the hash can no longer be linked to earlier days.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to understand, in aggregate, which pages are used and where visitors come from. § 25 TDDDG (the German Telecommunications Digital Services Data Protection Act) covers storing information on your device and accessing information stored there. The script stores nothing; it only reads the entry "plausible_ignore" in local storage, which only you create, with the switch below. That serves solely to respect your objection and is strictly necessary for it (§ 25(2) no. 2 TDDDG). No consent is therefore required, and this website shows no cookie banner.

The statistics consist of aggregate figures that relate to no person and are kept without a fixed deletion date. You can object to the measurement at any time: with the switch here, or with a content blocker.

Hosting and server log files

The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, located in Germany. Hetzner processes the data on our behalf under a data processing agreement (Art. 28 GDPR).

For every request the web server records: your IP address, the date and time, the address requested, the status code, the amount of data transferred, the referring page and your browser's user agent. This serves the secure and uninterrupted operation of the site, for example to fend off attacks; the legal basis is Art. 6(1)(f) GDPR. The log files are deleted after 14 days unless a security incident requires keeping them longer.

Contact by email

When you write to us, we process your message and your details to answer your request (Art. 6(1)(b) GDPR, otherwise (f)). We delete them as soon as they are no longer needed for that and no statutory retention obligation applies.

Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. Write to us at contact@defactory.eu.

You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (LfDI Baden-Württemberg).

Last updated: November 2026