Privacy
The German version of this privacy policy is legally binding. This translation is provided for convenience only.
Controller
The controller within the meaning of the GDPR is:
Sapple GmbH
Major-von-Morandell-Platz 6
39052 Kaltern an der Weinstraße (BZ)
Italy
Represented by Kassian Goess Enzenberg
Email: info@sapple.com
Newsletter signup
When you sign up for the sapple newsletter, we store your email address to send you updates on the product launch in June 2026 and a launch discount.
You can unsubscribe at any time via the unsubscribe link in every email. We do not pass your data on to third parties.
Reviews and review requests
When you order from us, we send you a single email about 14 days after your order asking for a review. The legal basis is our legitimate interest in feedback on the products you bought from us (Art. 6(1)(f) GDPR), within the rules for existing customers. You can opt out at any time and free of charge via the “No more review requests” link in that email, or simply send us a short message.
If you write a review, via the link in the email or with the form on the product page, we store your display name, your email address, your star rating, your text and optionally a title and sport. Anyone can leave a review, no order is required. If you review on the product page, we match your email address against the orders in our online shop. If there is a paid order, we mark the review as “Verified purchase” and link it to that order. Otherwise we only use your email address if we have a question about your review. Only the display name, stars, title, text, sport and date are published. We do not publish your email address. The form on the product page is protected by Cloudflare Turnstile (see below). You can ask us to delete your review at any time.
Hosting and processing
This website is hosted on Vercel. Signups via the form are processed on the server side and delivered to us by email through the service Resend. Your data is not permanently stored in a database during the coming soon stage.
Bot protection with Cloudflare Turnstile
To protect the signup form against automated requests, we use Cloudflare Turnstile as a CAPTCHA alternative. For this purpose, a script from challenges.cloudflare.com is loaded when the form is opened. Cloudflare checks technical characteristics of your browser, does not set any tracking cookies and does not transmit any personal data to us. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a spam free and abuse free signup).
Statistics with Google Analytics
If you consent to the "Statistics" category, we use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for the anonymous analysis of shop usage. We use Google Consent Mode v2: before your consent, no analytics data is sent to Google and no analytics cookies are set. The Google tag is only loaded after your consent; the IP address is processed in anonymized form. The legal basis is your consent (Art. 6 (1) (a) GDPR).
Marketing with the Meta Pixel and Conversions API
If you consent to the "Marketing" category, we use the Meta Pixel (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). It lets us measure the performance of our ads on Facebook and Instagram and show you more relevant ads. The pixel is only loaded after your consent; when it does, data (including your IP address, pages visited and actions taken such as a purchase) is transmitted to Meta, possibly also to the USA. Before your consent, nothing is sent to Meta. You can withdraw your consent at any time via "Cookie settings". The legal basis is your consent (Art. 6 (1) (a) GDPR).
In addition to the pixel, we use Meta's Conversions API. If you complete an order after giving your consent, our server reports the purchase directly to Meta. The data transmitted are the order number, order value, products ordered, your IP address, your browser identifier (user agent), the Meta cookies _fbp and _fbc as well as email address, phone number, name, city, postal code and country. Contact and address data are pseudonymised with the SHA-256 method (hashed) before transmission. Meta matches the event with the pixel event so that a purchase is only counted once. Without consent to the "Marketing" category, nothing is transmitted. The legal basis is your consent (Art. 6 (1) (a) GDPR).
Google Ads conversion tracking
If you consent to the "Marketing" category, we use Google Ads conversion tracking (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). It lets us measure whether a purchase results from one of our ads on Google. We use Google Consent Mode v2. Before your consent, the Google tag is not loaded for this purpose and no advertising cookies are set. After your consent, Google sets cookies such as _gcl_au and _gcl_aw (lifetime up to 90 days) and receives the order number, order value and your IP address when you make a purchase. For enhanced conversions we additionally pass on your email address, which is hashed before transmission. A transfer to the USA is possible; Google is certified under the EU-US Data Privacy Framework. You can withdraw your consent at any time via "Cookie settings". The legal basis is your consent (Art. 6 (1) (a) GDPR).
Google Maps
On our contact page we embed a map from Google Maps (Google Ireland Limited). For data protection reasons the map is only loaded once you consent to the "External media" category or actively start the map via "Activate map". When loading, data (including your IP address) is transmitted to Google, possibly also to third countries. The legal basis is your consent (Art. 6 (1) (a) GDPR).
Your rights
You have the right at any time to access, rectification, erasure, restriction of processing as well as data portability of your stored data. To exercise these rights, please contact info@sapple.com.
Note: this privacy policy will be supplemented before the final product launch with a complete, legally reviewed version (full list of third party providers, data processing agreements).