Controller
The controller for the processing described here is:
ReedFinder – Péter Rápli, Herbersteinstraße 4/2076, 8020 Graz, Austria
Email: info@reedfinder.com
We are not required to appoint a Data Protection Officer, so enquiries go to the address above.
1. Information We Collect
We may collect the following types of information:
Personal Information: Name, email address, phone number, and shipping address provided during account registration or placing an order.
Payment Information: Payment details processed securely by third-party payment providers.
Technical Data: IP address, browser type, and device information collected via cookies and analytics tools.
Feedback Data: Ratings and preferences submitted for reeds to improve our AI-based recommendation system. This applies to player accounts in the consumer shop; see section 8 for trade accounts, where there are no ratings.
2. How We Use Your Information
We use your data for the following purposes:
– To process and deliver your orders efficiently (performance of a contract).
– To enhance your experience by tailoring reed recommendations based on your feedback (consent).
– To improve our services through aggregated and anonymized data analysis (legitimate interests).
– To send important updates, promotional offers, and newsletters (consent).
– To comply with legal and tax obligations (legal obligation).
3. GDPR Rights
Under the GDPR, you have the following rights:
Access: Request a copy of the personal data we hold.
Correction: Request correction of inaccurate data.
Erasure: Request deletion of your data, subject to legal obligations.
Restriction: Restrict processing in certain cases.
Portability: Request transfer of your data to another provider.
Objection: Object to processing for marketing or legitimate interests.
To exercise these rights, contact us at info@reedfinder.com. You also have the right to lodge a complaint with a supervisory authority. In Austria that is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna (dsb@dsb.gv.at). You may also complain to the authority in your own country of residence.
4. Data Retention
– Order/account data: retained for up to 7 years to comply with tax and accounting laws.
– Marketing data: retained until you withdraw your consent.
– Ratings and feedback: deleted together with your account. Improvements already derived from them exist only in aggregated model form, cannot be traced back to you, and are not reversed by the deletion.
– Technical and analytics data: retained in aggregated form only.
5. Data Security
We implement industry-standard security measures including SSL/TLS encryption, restricted access to personal data, secure servers, and regular backups. While no method of transmission is 100% secure, we continuously update our safeguards to protect your information.
6. Cookies and Analytics
We use cookies and similar technologies to improve your browsing experience. Essential cookies are required for site functionality. Non-essential cookies (such as analytics) are used only with your consent. You can manage or withdraw your cookie preferences anytime through our cookie banner or browser settings.
7. AI and Data Use
This section describes the consumer shop. It does not apply to trade orders — reeds supplied to the trade are sealed manufacturer boxes that we do not open, measure, label or rate (see section 8).
Our recommendation system works with several distinct sets of data, and it is worth being precise about which is which:
Reed measurement data — the optical and dimensional measurements we take from each reed before it ships. This describes a piece of cane, not a person.
Your ratings and playing preferences — these are personal data, held against your account, and used to generate recommendations for you. That is the service you signed up for, so the basis is performance of the contract.
Model training — ratings are aggregated across players before they are used to improve the underlying models. Names, addresses and email addresses are never inputs to model training.
Technical telemetry — page and error data used to keep the site working.
There is no automated decision-making producing legal or similarly significant effects. A recommendation is a suggestion about which reed to try; you remain free to ignore it.
8. Trade Customers (b2b.reedfinder.com)
If you apply for or hold a trade account, we process your company name, the contact person’s name, business email address and phone number, the registered business address and any separate delivery address, the VAT identification number where you give one, and your orders, order references and invoices. The legal basis is performance of the contract (Art 6(1)(b) GDPR) and, for invoicing and record-keeping, legal obligation (Art 6(1)(c) GDPR). A VAT identification number is checked against the European Commission’s VIES system.
What does not apply to trade orders. Sections 1 (Feedback Data), 2 (tailored recommendations) and 7 (AI and Data Use) describe the consumer shop only. Trade deliveries are sealed factory boxes exactly as the manufacturer ships them: nothing is opened, measured, labelled or individually selected, there are no ratings, and no trade data is ever used to train a recommendation model.
Payment. Trade orders are invoiced and settled by bank transfer, so the payment processor named in section 9 is not involved in them. The shipping and email processors are the same as for consumer orders.
Trade records are kept for seven years under Austrian tax and accounting law. The terms governing these orders are our trade terms and conditions.
9. Data Sharing and Third Parties
We do not sell or rent your personal data. These are the processors and recipients we actually use:
Payments — Stripe Payments Europe Ltd (Ireland), with onward transfer to Stripe Inc. (USA). Order, contact and payment data, to take payment and issue invoices. Consumer orders only; trade orders are paid by bank transfer and never reach a payment provider.
Shipping — Österreichische Post AG, GLS and UPS, via Sendcloud B.V. (Netherlands). Name, address and contact details, to deliver your order.
Email — Brevo (Sendinblue SAS, France). Address and order details, for transactional email and, with your consent, newsletters.
Analytics — Google Analytics (Google Ireland Ltd, with onward transfer to Google LLC, USA). Only with your consent.
Advertising — Meta Platforms Ireland Ltd, with onward transfer to Meta Platforms Inc. (USA). Only with your consent. This covers both the pixel in your browser and our server-side conversions reporting, which sends a pseudonymised (hashed) email address, phone number and name together with your IP address and browser user agent. Neither runs unless you have accepted marketing cookies.
Consent management — Termly Inc. (USA), which records your cookie choices.
Legal authorities — where we are legally required to disclose.
Transfers to the United States (Stripe, Google, Meta, Termly) rely on the EU–US Data Privacy Framework where the recipient is certified under it, and otherwise on the European Commission's Standard Contractual Clauses together with supplementary measures. You can ask us for a copy of the safeguards relied on for any specific transfer.
10. Children’s Privacy
Our services are not intended for children under 14. We do not knowingly collect personal data from children. If you believe we may have inadvertently collected such data, please contact us to ensure deletion.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website. Significant changes will be communicated by email if applicable.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Email: info@reedfinder.com
Address: ReedFinder, Herbersteinstrasse 4/2076, 8020 Graz, Austria
Privacy Contact: Data Protection Contact – info@reedfinder.com
