Privacy Policy
1. Summary
- This website uses no tracking, no analytics, no advertising pixels and no cookies for such purposes.
- All fonts, images and videos are hosted on our own server. Visiting the site sends no data to Google, YouTube, Facebook or similar.
- The website is delivered via the Cloudflare network (protection and fast delivery, see section 4).
- We only process personal data when you reserve, order, write to us or declare a withdrawal.
2. Controller
ProHandstand, LLC1309 Coffeen Ave Ste 2966
Sheridan, WY 82801, USA
Email: contact@prohandstand.com
We are based in the USA. Personal data you provide to us (e.g. when ordering, emailing us or withdrawing) is therefore also processed in the USA. As we offer goods to customers in the EU, the GDPR applies (Art. 3(2) GDPR).
3. Hosting and server log files
The website is hosted by webgo GmbH, Hamburg, on servers in Germany, under a data processing agreement pursuant to Art. 28 GDPR.
With every request the server automatically stores technically necessary data in log files: IP address, date and time, requested page, amount of data transferred, referrer URL, browser and operating system. The purpose is the secure and stable operation of the website (defence against attacks, error analysis). Legal basis: legitimate interest, Art. 6(1)(f) GDPR. Log files are deleted after 7 days.
4. Cloudflare
Requests to this website pass through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare forwards requests to our server, delivers content from caches and filters harmful traffic. In doing so, Cloudflare processes technically necessary connection data, in particular your IP address. Legal basis: our legitimate interest in secure and fast delivery (Art. 6(1)(f) GDPR). Cloudflare acts as our processor (Art. 28 GDPR) and is certified under the EU-U.S. Data Privacy Framework. Privacy policy: cloudflare.com/privacypolicy.
5. Cookies and browser storage
We do not use cookies for analytics or advertising and do not track you. Cloudflare may set a strictly necessary cookie (“__cf_bm”, lifetime 30 minutes) to detect automated traffic. No consent is required for strictly necessary cookies, so there is no cookie banner.
6. Reservation list with double opt-in
If you sign up via the “Reserve” form, we process your first name, email address and chosen language in order to inform you about the launch of ProHandstand pre-orders. Legal basis: your consent (Art. 6(1)(a) GDPR). Your sign-up only becomes effective once you click the link in our confirmation email (double opt-in). To prove your consent we store the time and IP address of the sign-up and of the confirmation (Art. 7(1) GDPR).
The data is stored exclusively on our server at webgo (Germany); no newsletter service is used. Unconfirmed sign-ups are deleted automatically after 7 days. You can withdraw your consent at any time with effect for the future — via the link in every email or by writing to contact@prohandstand.com. We then delete your data immediately. Without a withdrawal, your sign-up is deleted automatically 36 months after signing up at the latest.
To prove consent we also keep a tamper-evident log (hash chain) of sign-up, confirmation, withdrawal and deletion. It contains email and IP address only as non-reversible check values (pseudonyms) plus the version of the consent text shown. We keep this log for up to 3 years after consent ends in order to defend legal claims (Art. 6(1)(c) and (f) GDPR).
7. Pre-order and payment via Stripe
Once paid pre-orders open: when you click “Pre-order now” you are redirected to the checkout of our payment provider Stripe (Stripe, Inc., 354 Oyster Point Boulevard, South San Francisco, CA 94080, USA). Data is only transferred to Stripe from that click on. There you enter your name, email address, shipping address and payment details.
- Purpose: conclusion and performance of the purchase contract, payment processing, fraud prevention.
- Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) GDPR (tax and commercial law obligations).
- Recipients: Stripe partly processes payment data as an independent controller (e.g. fraud prevention). Stripe, Inc. is certified under the EU-U.S. Data Privacy Framework. Stripe privacy notice: stripe.com/privacy. Stripe sets its own cookies on its own site.
- We receive your name, email, shipping address and order details from Stripe – not your full card details.
- Shipping: we pass your name and shipping address to DHL for delivery.
- Retention: order and invoice data are kept for up to 10 years as required by applicable tax and commercial law.
8. Contact by email
If you email us, we process your details to answer your request (Art. 6(1)(b) GDPR for contract-related requests, otherwise Art. 6(1)(f)). The data is deleted once the request has been dealt with, unless statutory retention periods apply.
9. Withdrawal via our online form
If you withdraw from a contract using the withdrawal function on this website, we process your name, order number, email address and message in order to handle the withdrawal and confirm receipt (Art. 6(1)(c) GDPR in conjunction with consumer withdrawal law). To prevent abuse, your IP address is stored briefly (max. 24 hours).
10. Links to social networks
We link to our profiles on Instagram, YouTube and Facebook. These are plain links, not embedded plugins. Data is only transferred when you click a link; the respective provider’s privacy policy then applies.
11. Encryption
This website uses TLS encryption (recognisable by “https://”).
12. Your rights
- Access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20),
- objection to processing based on Art. 6(1)(f) GDPR (Art. 21),
- lodging a complaint with a data protection supervisory authority (Art. 77 GDPR).
No automated decision-making or profiling takes place.
Last updated: 2026-09