Privacy Policy

Last updated:

The short version

  • This website informs about and sells our products. There is no contact form, no newsletter and no customer account.
  • When you visit, our host Vercel processes technically necessary data (such as your IP address) in server logs.
  • Fonts are loaded from our own server. There is no connection to Google Fonts. We do not use analytics tools.
  • The Meta Pixel only loads if you actively agree in the cookie banner. Without your consent, there is no tracking.
  • Purchases are handled by Digistore24 as the seller, under its own responsibility. Digistore24’s privacy policy applies to the data you enter at checkout.
  • The templates you buy (.xlsx and .docx files, no macros) do not send any data. What you enter in them, including details about your clients, stays on your device or in your own cloud account. We never receive it.

Contents

  1. Who is responsible
  2. Which laws apply
  3. Hosting and server logs
  4. Fonts
  5. Cookie banner and storing your choice
  6. Meta Pixel (only with your consent)
  7. Purchases through Digistore24
  8. Data you enter in the templates
  9. Contacting us by email
  10. Recipients
  11. International data transfers
  12. How long we keep data
  13. Security
  14. Your rights
  15. Your right to object
  16. Withdrawing your consent
  17. Your right to complain
  18. Visitors in the United States
  19. Children
  20. Required data and automated decisions
  21. Changes to this policy

1. Who is responsible

Shipshape Sheets is a brand of ADSPIRE GmbH. The controller responsible for processing your personal data on this website and in connection with our products is:

ADSPIRE GmbH
Im RhyTech 3
8212 Neuhausen am Rheinfall
Switzerland
Email: d.delucia@adspire.ch

We have not appointed a data protection officer because we are not legally required to. For all privacy questions, please email us at the address above.

2. Which laws apply

We are a company based in Switzerland, so the Swiss Federal Act on Data Protection (FADP) applies to our processing. Where we offer our products to people in the European Union or the European Economic Area, or measure their visits with the Meta Pixel, the EU General Data Protection Regulation (GDPR) also applies. For visitors in the United Kingdom, the UK GDPR applies in the same way. The legal bases named in this policy refer to the GDPR and apply equally under the UK GDPR. For storing information on or reading it from your device, the rules on cookies of the country you are in also apply (for example the ePrivacy rules of EU member states and, in the UK, the Privacy and Electronic Communications Regulations).

3. Hosting and server logs

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States. Vercel delivers the website through a global network of servers and processes the data on our behalf.

Each time you visit our website, the following data is automatically processed in server logs:

  • IP address
  • date and time of access
  • page or file requested
  • referrer (the page you came from, if your browser sends it)
  • browser type, browser version and operating system (user agent)
  • HTTP status code and amount of data transferred

Purpose: delivering the website, keeping it stable and secure, defending against attacks and analyzing errors.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is to provide the website securely and without disruption and to detect and fix attacks and errors. Accessing your device is strictly necessary to transmit the website.

Retention: Logs are deleted after 30 days at the latest. They are kept longer only if a specific security incident has to be investigated, and only until that investigation is complete.

Processor agreement: We have a data processing agreement with Vercel (Data Processing Addendum).

International transfer: Vercel is based in the United States and is certified under the EU-U.S. Data Privacy Framework, the UK Extension to it and the Swiss-U.S. Data Privacy Framework. In addition, the Standard Contractual Clauses that are part of Vercel’s Data Processing Addendum apply. See section 11.

4. Fonts

All fonts are hosted on our own server. No connection is made to Google or any other font provider.

When the Meta Pixel is active on this website, we ask for your consent in a banner on your first visit. You can accept or decline with equal ease. We store your choice in your browser’s local storage so that we do not have to ask you again on every page.

Data stored: your choice (accepted or declined), the date and time of your choice and the version of the banner. This data stays on your device and is not sent to us or to anyone else.

Purpose: respecting your decision and loading the Meta Pixel only after you agree.

Legal basis: Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (proof of consent) and Art. 6(1)(f) GDPR (our legitimate interest in storing and applying your choice). Storing your choice on your device is strictly necessary for this purpose.

Retention: The entry remains until you delete it in your browser. After 12 months, or if the banner version changes, we ask you again.

You can change or withdraw your choice at any time using the “Cookie settings” link in the footer of every page.

If you agree in the banner, we use the Meta Pixel. Depending on where you live, the Meta company responsible is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, or Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, United States (“Meta”). Without your consent, the pixel is not loaded and no data is sent to Meta.

Purpose: We measure whether visitors reach our website through our ads on Facebook and Instagram and what they do here (page views, viewing a product page, clicking a buy button, a completed purchase). This lets us measure and improve our ads and build audiences for advertising (for example, people who visited our website).

Data: IP address, information about your browser and device, pages visited and time of visit, referrer, events triggered (for example, clicking a buy button) and a pixel identifier. For this, Meta sets the cookie “_fbp” on your device, which lasts up to 90 days. If you are logged in to Facebook or Instagram, Meta can link your visit to your account. We do not use Advanced Matching.

Joint controllership: Where the GDPR or UK GDPR applies, we and Meta are joint controllers for collecting the data on our website and transmitting it to Meta (Art. 26 GDPR). We have agreed to Meta’s Controller Addendum for this (https://www.facebook.com/legal/controller_addendum). Under it, we inform you about this processing, and Meta is responsible for handling your rights under Articles 15 to 20 GDPR regarding the data stored by Meta. You can also contact us, and we will forward your request to Meta. Meta alone is responsible for any further processing after the transmission, for example to deliver ads. For details, see Meta’s Privacy Policy: https://www.facebook.com/privacy/policy.

Legal basis: your consent (Art. 6(1)(a) GDPR; for accessing your device, the consent required under the cookie rules of your country). You can withdraw your consent at any time with effect for the future using “Cookie settings” in the footer.

International transfer: Meta transfers data to Meta Platforms, Inc. in the United States. Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework. See section 11.

After a purchase, Digistore24 sends you to our thank-you page. If you have consented, the pixel reports the “Purchase” event with the purchase amount to Meta there, without your name or email address. We do not use a Meta integration inside the Digistore24 checkout.

7. Purchases through Digistore24

When you click a buy button, you go to the order page of Digistore24. Digistore24 is the seller of our products and your contracting party. Depending on your country, this is Digistore24 GmbH, St.-Godehard-Strasse 32, 31139 Hildesheim, Germany, or Digistore24 Inc., United States. The company that sells to you is named on the order form and on your invoice. Digistore24 handles ordering, payment, invoicing, delivery of the download, withdrawal and refunds as an independent controller. To learn what data Digistore24 processes, please read its privacy policy: https://www.digistore24.com/page/privacy.

When you click the buy button, we do not send any personal data to Digistore24. Your browser opens the order page directly.

Data we receive from Digistore24: As the provider of the product content, we receive the following data from Digistore24 after your purchase: first and last name, email address, country, products purchased, order number, purchase date, payment status and any refunds.

Purpose: providing access to the products, answering your questions about their content (support), handling refunds and meeting our bookkeeping obligations.

Legal basis: Art. 6(1)(b) GDPR (performing the license terms between you and us, see our Terms), Art. 6(1)(c) GDPR (statutory retention obligations) and Art. 6(1)(f) GDPR (our legitimate interest in detecting and preventing misuse, such as unauthorized sharing of the products).

Source: This data does not come directly from you but from Digistore24 (Art. 14 GDPR).

We do not use this data for marketing emails or a newsletter.

8. Data you enter in the templates

Our products are spreadsheet files (.xlsx) and document files (.docx) without macros. You use them on your own device or in a program of your choice, such as Microsoft Excel or Google Sheets. The files contain no functions that send data to us or to anyone else. What you enter, including names and contact details of your clients, never reaches us and is not processed by us.

You decide where you store the files and who you share them with. For personal data of your clients that you enter, you are responsible yourself. If you open or store the files in a cloud service such as Microsoft 365 or Google Drive, the terms and privacy policy of that provider apply.

9. Contacting us by email

If you email us, we process your details (name, email address, content of your message) to answer your request. Please do not send us files containing your business or client data; we do not need them to answer questions about our products.

Legal basis: Art. 6(1)(b) GDPR if your request relates to a purchase or to using our products; otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering requests).

Email provider: Google Workspace, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as our processor. Data is also transferred to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework. See section 11.

10. Recipients

We only share personal data with the following recipients:

  • Vercel Inc., United States: hosting (processor)
  • Meta Platforms Ireland Limited, Ireland, and Meta Platforms, Inc., United States: only after your consent (joint controllers for collection and transmission, independent controllers afterwards)
  • Digistore24 GmbH, Germany, or Digistore24 Inc., United States: sale and payment processing (independent controller)
  • Google Ireland Limited, Ireland (Google Workspace): email communication (processor)
  • External accountants or auditors, if engaged: bookkeeping (independent controller or processor)
  • Authorities and courts: only if we are legally required to

11. International data transfers

Your data may be transferred to the following countries:

  • Switzerland: seat of ADSPIRE GmbH. The European Commission and the United Kingdom recognize Switzerland as providing adequate data protection.
  • Germany: Digistore24 GmbH. Under Swiss law, EU and EEA states are considered to provide adequate data protection.
  • Ireland: Meta Platforms Ireland Limited (only with your consent) and Google Ireland Limited.
  • United States: Vercel Inc., Google LLC, Meta Platforms, Inc. (only with your consent) and, depending on your country, Digistore24 Inc. Vercel, Google LLC and Meta Platforms, Inc. are certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework (EU Commission adequacy decision of July 10, 2023; for Switzerland, Annex 1 of the Swiss Data Protection Ordinance). For transfers from the UK, the UK Extension to the EU-U.S. Data Privacy Framework applies where the recipient is certified under it. You can check the certification status at https://www.dataprivacyframework.gov/list. As an additional safeguard, we rely on the European Commission’s Standard Contractual Clauses, which are also recognized by the Swiss Federal Data Protection and Information Commissioner (FDPIC), together with the UK Addendum for transfers from the UK. You can request a copy at d.delucia@adspire.ch. Digistore24 Inc. receives your data directly from you at checkout as an independent controller; its privacy policy explains the safeguards it uses.
  • Other countries: Vercel delivers the website through servers in various countries so that it loads quickly.

12. How long we keep data

Data Retention
Server logs (Vercel) 30 days at most, longer only during a security incident
Your banner choice (local storage) until you delete it in your browser; we ask again after 12 months
Meta cookie “_fbp” up to 90 days; data stored by Meta according to Meta’s Privacy Policy
Email requests 2 years after the request is closed, unless relevant to our business records (then as for accounting records)
Buyer data from Digistore24 until the end of the calendar year in which the money-back guarantee period ends and no questions remain open; where part of our accounting records, 10 years (Art. 958f of the Swiss Code of Obligations)
Data you enter in the templates not stored by us

13. Security

We protect your data with appropriate technical and organizational measures. The website is delivered only over encrypted HTTPS (TLS) connections.

14. Your rights

Under the applicable law, you have the following rights:

  • Access to the data we process about you (Art. 25 FADP, Art. 15 GDPR)
  • Correction of inaccurate data (Art. 32 FADP, Art. 16 GDPR)
  • Deletion of your data, unless a retention obligation applies (Art. 32 FADP, Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Receiving or transferring your data in a common electronic format (Art. 28 FADP, Art. 20 GDPR)
  • Objection to certain processing (see section 15)
  • Withdrawal of consent you have given (see section 16)

To exercise these rights, email d.delucia@adspire.ch. We may ask for proof of identity if we cannot otherwise identify you. For data that Digistore24 processes during checkout, please contact Digistore24 directly (for Digistore24 GmbH: datenschutz@digistore24.com).

15. Your right to object

Right to object under Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data based on Art. 6(1)(e) or (f) GDPR, including profiling based on these provisions. We will then stop processing your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

If your data is processed for direct marketing, you have the right to object at any time to processing for this purpose, including profiling related to such direct marketing. If you object, we will no longer process your data for direct marketing.

Send your objection to: d.delucia@adspire.ch

You can withdraw any consent you have given at any time with effect for the future, most easily using the “Cookie settings” link in the footer of every page. After that, the Meta Pixel is no longer loaded. Processing carried out before the withdrawal remains lawful. You can also delete Meta cookies that have already been set in your browser settings.

17. Your right to complain

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live, work or where the alleged infringement took place. For example:

18. Visitors in the United States

We do not sell personal information for money. If you consent to the Meta Pixel, data about your visit is shared with Meta for advertising, as described in section 6. Some U.S. state privacy laws treat this as “sharing” or “targeted advertising”. The pixel never loads without your consent, and you can opt out at any time using “Cookie settings” in the footer.

If you live in a U.S. state with a consumer privacy law, you can ask us to tell you what personal information we hold about you, to correct it or to delete it, by emailing d.delucia@adspire.ch. We respond as required by the law that applies to you and will not treat you differently for using these rights.

19. Children

This website and our products are intended for businesses and adults. We do not knowingly collect personal data from children under 16.

20. Required data and automated decisions

You are not obliged to provide us with any data. Without the technically necessary connection data (section 3), however, the website cannot be displayed. Without your consent, the Meta Pixel is not loaded; the website still works fully.

We do not make automated individual decisions within the meaning of Art. 21 FADP or Art. 22 GDPR.

21. Changes to this policy

We update this privacy policy when our data processing or the law changes. The version published on this website applies. We announce material changes with a notice on the website and, if new consent is needed, through the cookie banner.