Privacy policy

This English version is provided for convenience; the German version is legally binding.

1. Controller

The controller for the processing of personal data on this website is Brand Palace GmbH, Ludwig-Erhard-Straße 1a, 65760 Eschborn, Germany, represented by its managing directors Jonas Müller and Frederic von Borries. Pimlane is a product of Brand Palace GmbH. You can reach us by email at hello@pimlane.com or by post at the address above.

2. Overview

This website provides information about Pimlane. It sets no cookies, uses no third-party analytics or advertising services and embeds no third-party content. We count page visits ourselves on our own server (section 3). We process personal data only as far as necessary to operate the website, answer your enquiries and protect our systems. There is no automated decision-making, including profiling.

3. Hosting, server log files and reach measurement

This website runs on a server of IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The server is located in a data centre in Europe. We have concluded a data processing agreement with IONOS under Art. 28 GDPR.

With every request, the web server stores in log files: the IP address of the requesting device, date and time, the page requested, the status of the response, the amount of data transferred, the previously visited page (referrer) and the type and version of the browser and operating system. We do not combine this data with other data. It serves to deliver the pages, to detect and fend off attacks and to find errors. We temporarily stop accepting requests from IP addresses that repeatedly send faulty or abusive requests. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the stable and secure operation of the website. The log files are deleted after 15 days at the latest.

To measure reach, we count how often our pages are visited. Counting takes place exclusively on our own server, without cookies and without passing data to third parties. Visits are combined into plain totals per day and page. To estimate the number of different visitors per day, we form a non-reversible check value from the IP address and browser identifier that changes daily. The IP address itself is not stored. We keep check values and totals for no longer than 180 days. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in data-minimising reach measurement. You may object to this processing under Art. 21 GDPR (section 9).

4. Enquiry form

When you write to us using the enquiry form, your browser transmits your details (request type, name, company, email address and, where provided, telephone number, number of items, channels and message) to our server in encrypted form. The server forwards the enquiry by email to hello@pimlane.com and does not store its content; for the exception in case of suspected spam, see below. We run this mailbox with Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); your enquiry stays there until it has been dealt with (section 8). At the same time you receive an automatic confirmation at the address you entered, containing your name and the time of receipt, not the text of your message. Both emails are sent via the mail server of our provider IONOS.

For the free marketplace check, we send you a link after your enquiry through which you upload an export file. The file is stored on our server with IONOS SE in a data centre in Europe, scanned for malware after upload and used for the check only. We delete the file and the test environment no later than 30 days after the report, unless you start a pilot with us.

To protect against abuse, the server keeps in memory how many enquiries came from an IP address in the last 15 minutes and in the last 24 hours, and for seven days a non-reversible check value of email address and message to detect duplicate enquiries. It blocks IP addresses that misuse the form for three days. It records the receipt of every enquiry, including rejected ones, with IP address, browser identifier and, where applicable, the reason for rejection, without name, email address or message, in a security log for no longer than 180 days. For the automatic defence against repeated attacks it also keeps a list of rejected enquiries with time, IP address and reason, which it deletes after 30 days. Enquiries that our filter considers advertising or spam are not forwarded straight away; the server sets them aside with all details for review by a person. We then deliver or discard them; the server deletes them after 30 days at the latest.

The legal basis is Art. 6 (1) (b) GDPR (handling your enquiry and preparing a contract) and (f) GDPR (legitimate interest in protection against abuse). Providing your data is voluntary; without name, company and email address we cannot answer an enquiry. We keep the email with your enquiry as long as needed to deal with it. If a business relationship results from it, the correspondence becomes part of our business records and is subject to the retention periods under commercial and tax law (Section 257 HGB and Section 147 AO).

5. Contact by email

If you email us directly, we process your email address, the details you provide and the content of your message in order to deal with your request. The legal basis is Art. 6 (1) (b) GDPR where the request concerns preparing or performing a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). We receive and store our emails in a Google Workspace mailbox (section 8). Section 4 applies accordingly to retention.

6. Fonts and encryption

The Inter typeface is stored on our own server and loaded from there. No connection to third-party servers is made for it when a page is opened. This website is only available via HTTPS; the transfer between your browser and our server is encrypted with TLS. This also applies to the enquiry form.

7. Using Pimlane as a customer

This policy covers the website pimlane.com. If you use Pimlane as a customer, we process the data in your account on your behalf. This is based on a data processing agreement under Art. 28 GDPR that we conclude with you.

8. Recipients and transfers to third countries

We only pass on personal data where this is necessary to perform a contract, where you have consented or where we are legally obliged to. We use the following processors: IONOS SE for hosting and sending email, and Google Ireland Limited (Google Workspace) for our mailbox. Google Workspace may process data in the USA. Google LLC is certified under the EU-US Data Privacy Framework. There is no other transfer to countries outside the European Union.

9. Your rights

You have the right to access the data stored about you (Art. 15 GDPR), to rectification of inaccurate data (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR). Where we process data on the basis of Art. 6 (1) (f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). An email to hello@pimlane.com is enough to exercise your rights.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, datenschutz.hessen.de.

10. Status and changes

Status: October 2026. We update this policy whenever the services or processes we use change. The current version is always available on this page.