Privacy Policy

This policy explains how Grip Factory Munich GmbH processes personal data when you visit this website, in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The controller responsible is:

Grip Factory Munich GmbH, Fürholzener Straße 1, 85386 Eching, Germany.
Phone +49 89 319 012 90 · info@gripfactory.com
Full company details are listed in our Imprint.

This website is hosted by Vercel Inc. (340 S Lemon Avenue #4133, Walnut, CA 91789, USA) as our processor under a data processing agreement (Art. 28 GDPR). Each time you access the site, your browser transmits technical data that is stored in server log files: IP address, browser type and version, operating system, the page requested, the referrer URL, and the date and time of the request.

This data is processed to deliver the site reliably and securely — our legitimate interest in a stable, attack-resistant website (Art. 6 (1) (f) GDPR) — and is deleted or anonymised after a short period. As Vercel may process data in the USA, transfers are safeguarded by the EU-US Data Privacy Framework and EU Standard Contractual Clauses.

This website uses TLS/SSL encryption (shown by “https://” and the lock icon in your browser) to protect data while it is transmitted.

We host our typefaces ourselves and serve them from our own server. No connection is made to third-party font providers such as Google Fonts, and no data is transmitted to them.

This website sets no cookies — no tracking, advertising, or analytics cookies, and no technically necessary ones either. That is why you see no cookie banner here: there is nothing to consent to.

If you use the inquiry list, the products you collect are saved in your browser’s local storage (entry “gfm-inquiry-cart”) so your list survives a page reload. This entry is strictly necessary for the function you requested (§ 25 (2) TTDSG), stays on your device until you submit the list, and disappears when you clear the list or your browser storage.

We measure how this website is used with our own privacy-preserving analytics, built and operated by us. No third-party analytics service is involved, and no cookies or browser storage are used for it.

When a page is viewed, our server derives a short-lived pseudonymous identifier by hashing your IP address and browser characteristics together with a random value that changes every day. The IP address itself is never stored, and once the daily value rotates, the identifier can no longer be linked to you — not even by us. What we record: the page viewed, the referring website (domain only), campaign parameters, your country (derived from the IP address before it is discarded), device type and browser family, how long a page stayed open, and coarse usage events such as “an inquiry was sent” or “a manual was downloaded”.

These records are used solely as aggregated statistics to understand and improve our website; we build no profiles and make no attempt to identify visitors. Legal basis: our legitimate interest in measuring and improving our own website (Art. 6 (1) (f) GDPR). You may object to this processing at any time (Art. 21 GDPR) via info@gripfactory.com; note that because records are pseudonymous and short-lived, we cannot single out or retroactively delete an individual visitor’s data.

When you contact us through the form on our Contact page, we process the data you enter: your name, email address, optional company name, subject, message, and any files you attach. We use this solely to handle and respond to your request.

Your message is delivered to and stored in our email inbox, operated for us by Google as part of Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; data may be processed on Google servers in the USA under the EU-US Data Privacy Framework).

Legal basis: your consent (Art. 6 (1) (a) GDPR), given via the checkbox, and our interest in answering business inquiries or taking pre-contractual steps (Art. 6 (1) (b) and (f) GDPR). To reduce spam we use a hidden honeypot field — no CAPTCHA or third-party service is involved. We keep your message for as long as needed to process your request and to meet statutory retention obligations, then delete it. You can withdraw your consent at any time with effect for the future, for example by emailing info@gripfactory.com.

You can collect products in an inquiry list and send it to us as a request for a quote. When you submit it, we process your name, email address, phone number, optional company name, billing address, optional VAT ID, the products and quantities you selected, and any message you add. No payment is taken and no account is created.

We use this data to check availability, prepare a quote and answer your request. Legal basis: pre-contractual steps at your request (Art. 6 (1) (b) GDPR) together with your consent given via the checkbox (Art. 6 (1) (a) GDPR). Your inquiry is delivered to and stored in our email inbox as described under “Contact form”.

Your inquiry is also recorded in our internal business system, hosted for us in the EU by Supabase as our processor under a data processing agreement (Art. 28 GDPR), so that we can process it and prepare a quote. Access is limited to the employees who handle sales inquiries. If your request leads to a quote or an order, the data is kept for the statutory retention periods; otherwise we delete it once the inquiry is settled.

You can subscribe to our newsletter on the home page, or by ticking the optional box in the contact or inquiry form. The only detail we need is your email address. We use a double opt-in procedure: after you sign up we send one email with a confirmation link, and you are only added to the list once you confirm. Until then we do not send you anything, and unconfirmed sign-ups are deleted after 14 days.

To document your consent as required by Art. 7 (1) GDPR, we store the date and time of your sign-up and of your confirmation, the IP addresses used for both, which form you signed up through, and the version of the consent text shown to you. Legal basis for the newsletter itself is your consent (Art. 6 (1) (a) GDPR); the record of that consent rests on our legal obligation and legitimate interest in being able to prove it (Art. 6 (1) (c) and (f) GDPR).

Our newsletter is sent with rapidmail, a service of Positive Group Deutschland GmbH, Ingeborg-Krummer-Schroth-Straße 18a, 79106 Freiburg, Germany, acting as our processor under a data processing agreement (Art. 28 GDPR), with data hosted in Germany. You can unsubscribe at any time using the link in every newsletter, or by emailing info@gripfactory.com. Withdrawing your consent does not affect the lawfulness of processing carried out beforehand.

The site plan on our Contact page is drawn by us and served from our own server — no map service is loaded and no data is sent to one. Where we link to Google Maps or Apple Maps for directions, or to external sites such as our social media profiles, those providers only receive data once you follow the link; from that point their own privacy policies apply.

Under the GDPR you have the right to:

• access your personal data (Art. 15)
• rectify inaccurate data (Art. 16)
• erase your data (Art. 17)
• restrict processing (Art. 18)
• data portability (Art. 20)
• object to processing (Art. 21)

Where processing is based on your consent, you may withdraw it at any time with effect for the future. To exercise any of these rights, contact us at info@gripfactory.com.

You have the right to complain to a data protection supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

We will update this policy as the website develops and new features go live. Last updated: August 2026.