privacy policy
Last updated: August 2026
1. Controller
The controller responsible for the processing of personal data on www.suitsstartup.com is:
Patrick Günther
Untere Eichstädtstraße 17A
04299 Leipzig
Germany
Email: info@suitsstartup.com
2. General Information on Data Processing
We process personal data only where necessary to provide our website and products, perform contracts, communicate with users, process payments, analyse our website, comply with legal obligations, or where valid consent has been given.
Depending on the processing activity, the legal basis may in particular be Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract and pre-contractual measures), Art. 6(1)(c) GDPR (legal obligation), or Art. 6(1)(f) GDPR (legitimate interests).
3. Hosting and Technical Provision by Wix
Our website is provided using Wix.
Provider:
Wix.com Ltd.
40 Namal Tel Aviv St.
Tel Aviv 6350671
Israel
As part of hosting and technical operation, Wix may process data including IP addresses, device and browser information, time of access, pages visited, and technical log and security data.
Processing is carried out to ensure the secure, stable and technically reliable operation of the website.
A data processing agreement is in place with Wix.
Wix may process data within the EU, in Israel and, through subprocessors, in other countries. The European Commission has adopted an adequacy decision for Israel. Where data is transferred to countries without an adequate level of data protection, Wix states that it uses appropriate safeguards, including Standard Contractual Clauses.
4. Server and Access Data
When you visit the website, data including your IP address, date and time of access, page accessed, referrer URL, browser type and version, operating system, device information and technical connection data may be processed.
Processing is carried out in particular for technical provision, security, error analysis and prevention of misuse on the basis of Art. 6(1)(f) GDPR.
5. Cookie and Consent Management with Usercentrics
We use Usercentrics for Wix to obtain, manage and document consent relating to cookies and comparable technologies.
Data processed may include a consent ID, the date and time of consent or refusal, selected preferences and device information.
Provider:
Usercentrics GmbH
Sendlinger Straße 7
80331 Munich
Germany
Processing serves to comply with statutory documentation obligations and to manage your privacy preferences.
You may change or withdraw your choices at any time through the cookie settings on our website.
6. Wix Analytics
We use analytics functions integrated into Wix to evaluate information such as page views, sessions and use of our website.
Where non-essential cookies or comparable technologies are required, processing takes place only after you have given your consent via the cookie banner.
The legal basis in such cases is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
7. TWIPLA / Visitor Analytics and Session Recordings
We use TWIPLA, a service provided by:
Visitor Analytics GmbH
Siemensstraße 20
85521 Ottobrunn
Germany
to analyse and improve our website.
TWIPLA is used on this website in Medium Privacy Mode.
According to the provider, this mode does not use tracking cookies and does not store or use IP addresses. However, TWIPLA uses fingerprinting technology to distinguish returning visitors based on various technical characteristics. Data processed may include navigation paths, information about returning visits, approximate location and screen/device characteristics.
We also use Session Recordings. These may record interactions with the website such as clicks, scrolling, navigation and form interactions in order to identify usability issues and improve the user experience.
TWIPLA is used for analytics purposes only after the relevant consent has been given.
The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
Consent may be withdrawn at any time through the cookie settings.
8. User Account and Members Area
A user account is required to access protected content.
During registration and use, data processed may include the user's name or chosen profile name, email address, account and login information, voluntary profile information, purchased products, access permissions and technical usage data.
Processing is necessary to create and manage the user account and provide purchased or free products and is based on Art. 6(1)(b) GDPR.
The user account remains active after a time-limited product access period has expired until it is deleted or further storage is required by law.
9. Purchases and Payment Processing
When you make a purchase, we may process information including the purchased product, billing and contact data, transaction information and payment status.
Payments are processed using payment services integrated into Wix and the payment method selected during checkout, for example credit/debit card, Apple Pay or PayPal.
Depending on the selected payment method, information required to process the payment is transmitted to the relevant payment provider.
The legal basis is Art. 6(1)(b) GDPR.
Where users choose to save payment information within their Wix account, technical storage and/or tokenisation is handled by Wix and the integrated payment providers.
10. FileShare and Download Products
For purchased download products, Wix/FileShare is used to manage whether the relevant user account has the necessary access rights.
Account, purchase, access and download information may be processed for this purpose.
The legal basis is Art. 6(1)(b) GDPR.
11. Wix Chat
We use Wix Chat on our website.
A pre-written welcome message may automatically appear when the website is opened. This is not an AI chatbot.
If you reply to this message or otherwise use the chat, data including the content of your message, time of communication, technical information and, for logged-in users, contact information linked to the account may be processed.
Replies are written personally by us and are not generated automatically.
Where communication relates to a contract or pre-contractual enquiry, processing is based on Art. 6(1)(b) GDPR. Otherwise, processing is based on our legitimate interest in providing simple customer communication pursuant to Art. 6(1)(f) GDPR.
12. Blog, Comments and Likes
Our website contains a blog.
Where logged-in users publish comments or use the “Like” function, the account and usage data required for these functions is processed.
Published comments may be visible to other visitors together with the user's chosen profile name and, where applicable, profile information.
Processing is carried out to provide the relevant blog functions.
The legal basis is Art. 6(1)(b) and/or Art. 6(1)(f) GDPR.
13. Emails
Necessary system emails may be sent in connection with registration, purchases or user account management, including registration confirmations, order confirmations, access information, security messages or payment confirmations.
Processing is carried out in particular on the basis of Art. 6(1)(b) GDPR.
Automatic email notifications about new blog posts or a general newsletter are currently not sent to all registered users.
14. AI Prompts and External AI Services
SuitsStartUp provides certain prompts for use with external AI services.
There is currently no integrated processing of these prompts on our website by OpenAI, ChatGPT, Claude or any other external AI provider.
Only if a user independently copies a prompt and uses it with an external service will data processing take place under the terms of the relevant provider. SuitsStartUp has no control over such processing.
15. External Links and Social Networks
Our website may contain links to external websites or social networks.
Data is generally transferred to the relevant external website only when you actively open such a link. The respective provider is responsible for any subsequent processing.
We currently do not use Meta Pixel, TikTok Pixel, Google advertising pixels, Google Analytics or Google Ads on our website.
16. Retention Period
We retain personal data only for as long as necessary for the respective processing purpose.
Data relating to contracts and payments may additionally be stored in accordance with statutory commercial and tax retention obligations.
User account data is generally stored until the account is deleted, unless statutory obligations or legitimate reasons require continued storage.
Consent data is stored in accordance with statutory documentation requirements and the settings of the consent management system used.
17. Recipients and International Data Transfers
Data may be disclosed to technical service providers, hosting providers, payment providers, analytics providers and other processors where necessary to provide the relevant service.
Where data is transferred outside the European Economic Area, such transfers take place only where an adequacy decision exists, appropriate safeguards such as EU Standard Contractual Clauses are used, or another lawful basis for the transfer applies.
18. Your Rights
Subject to the statutory requirements, you have the right to access, rectification, erasure, restriction of processing, data portability and objection.
You may withdraw consent at any time with effect for the future.
Where processing is based on Art. 6(1)(f) GDPR, you may object to the processing pursuant to Art. 21 GDPR on grounds relating to your particular situation.
To exercise your rights, please contact:
19. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority.
The supervisory authority particularly responsible for us is:
Sächsische Datenschutz- und Transparenzbeauftragte
Maternistraße 17
01067 Dresden
Germany
Email: post@sdtb.sachsen.de
20. Automated Decision-Making
SuitsStartUp currently does not use solely automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
21. Amendments
This Privacy Policy may be amended if our website, the services we use or applicable legal requirements change.