Privacy policy
As of October 2026. Convenience translation; the German version prevails.
1. Controller
ESB Engineering KG, Industriestraße B 7/2/b7, 2345 Brunn am Gebirge, Austria, e-mail: support@eaisy.co. No data protection officer is appointed (no legal obligation).
2. This website
This website uses no cookies, no tracking, no analytics and loads no third-party content (fonts, scripts and images are served from our server). A cookie notice is therefore not needed.
Server logs: the web server (nginx) stores the IP address shortened (last part removed), date and time, page, status code, amount of data, referrer and browser identification. Error logs may contain the full IP address. Purpose: secure operation and troubleshooting; legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: at most 15 days, then deleted automatically.
3. The Stapelo service (Shopware plugin)
No data of the shops' end customers: the plugin does not send names, addresses, e-mail addresses, phone numbers, order numbers, customer numbers or payment data of your shop's customers to the Stapelo service.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Product data per cart/order: product number, technical line item ID, dimensions, weight, quantity, Stapelo product fields | Calculating parcels, pallets and pack plans | Contract (Art. 6(1)(b) GDPR) | Checkout requests: in memory only, 10 minutes. Pack plans after orders: 90 days |
| Configuration: cartons, pallets, parcel limits | Calculation according to your settings | Contract | until the tenant is deleted (see below) |
| Tenant: sent automatically on installation: shop ID, shop address (URL), Shopware and plugin version; API key and registration secret (stored only as hashes); time of the last request | Access, assignment, abuse prevention, deleting inactive tenants | Contract | until the tenant is deleted (see below) |
| Request log: time, tenant ID, path, status, duration, piece count (no product or customer data); for registrations also the shop domain and a shortened hash of the IP address | Operation, billing check, troubleshooting, abuse prevention | Legitimate interest (f) | at most 15 days |
| Web server log of the service: IP address of the shop server, time, path, status, browser identification | Security, abuse prevention | Legitimate interest (f) | at most 15 days |
| Backup of the service database | Recovery | Legitimate interest (f) | on the server 14 days; encrypted backup outside the server (Hetzner Storage Box): daily states 7 days, weekly 4 weeks, monthly 12 months; manual backups before updates 90 days |
The IP address is that of the shop server, not of buyers. For sole traders shop name and shop address can be personal data.
Deleting the tenant: when the plugin is uninstalled it reports this to the service; 30 days later we delete the tenant with its configuration, cartons, pack plans and keys. Installing the plugin again with the kept data within these 30 days cancels the deletion. Tenants that send no request for 180 days are deleted automatically as well. Until the backup periods end (at most 12 months) deleted data may still be contained in encrypted backups; they are used only to restore the service.
4. Support requests
When you write to us, we process your e-mail address, your name and the content of the message to handle it (Art. 6(1)(b) or (f) GDPR). Retention: 2 years.
5. Purchase through the Shopware Store
Purchase, trial, licence and billing are handled by shopware AG through the Shopware Store; its privacy policy applies. From shopware AG we receive the information needed for licence and billing (e.g. the merchant's company name, shop domain, licence status and term); legal basis: contract (Art. 6(1)(b) GDPR); retention: term of the contract and statutory retention obligations.
6. Recipients and processors
| Recipient | Service | Location | Data processing agreement |
|---|---|---|---|
| Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany | Hosting (website, Stapelo service, database) and encrypted backup (Storage Box) | Server: data centre Nuremberg, Germany; Storage Box: Falkenstein (FSN1), Germany | of 3 October 2026 |
| easyname GmbH, Canettistraße 5/10, 1100 Vienna, Austria | E-mail (mailbox support@eaisy.co) | Austria | of 6 January 2026 |
Data is not transferred outside the EU/EEA.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). Contact support@eaisy.co.
You can lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde): Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.
There is no automated decision-making, including profiling.