Privacy Policy

1. Data Controller

The controller responsible for processing your personal data is Bogdan Ostertag, sole proprietor, trading under the commercial brand PrepSphere. PrepSphere is not a separate legal entity.

Waldparkstr. 23 b, 76669 Bad Schönborn, Germany. Phone: +49 152 07903975. Email: prepsphere.de@gmail.com.

This is the registered business address and is not identified here as a warehouse address.

2. Purposes, Legal Bases and Recipients

We process personal data to provide this website, handle your enquiries and take steps towards contracts for Amazon FBA prep services. Article 6(1)(b) GDPR applies to pre-contractual steps at your request. Article 6(1)(f) GDPR may apply to other enquiries and the secure, reliable provision of the website; our legitimate interests are appropriate communication and secure website operation.

Where consent is required, processing is based on Article 6(1)(a) GDPR. Statutory retention obligations may provide a basis under Article 6(1)(c) GDPR. Data is received only by people and service providers who need it for the relevant purpose.

3. Website Hosting by Framer

This website is created and hosted using Framer. The hosting provider is Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, The Netherlands. Framer processes technically necessary access data for website delivery, functionality and security. Such data may include IP addresses, timestamps, requested pages and technical browser or device information. Where applicable, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable provision of this website.

Framer provides a Data Processing Addendum (DPA) governing its processing of personal data on behalf of its customers. Framer may use subprocessors and arrange for personal data to be processed outside the European Economic Area. The DPA provides for applicable contractual and legal safeguards, including adequacy decisions under Article 45 GDPR or, where required, appropriate safeguards under Article 46 GDPR such as EU Standard Contractual Clauses. Further information about international transfers is provided in Section 12.

4. Contact Form

When you use the contact form, we process your name, email address, any telephone number supplied, estimated inventory volume or quantity and your message. Where completed, company name, seller model and required services are also processed. Your acknowledgement of the privacy notice is also submitted.

When you use the contact form, we process your name, email address, any telephone number supplied, estimated inventory volume or quantity and your message. Where completed, company name, seller model and required services are also processed.

We use these details to answer your enquiry, clarify requirements and prepare quotations for Amazon FBA prep services. The legal basis is Article 6(1)(b) GDPR for pre-contractual enquiries and Article 6(1)(f) GDPR for other communication. An acknowledgement of this privacy policy does not replace separate consent where required for a particular purpose.

The contact form uses Framer’s native form functionality. The configured email recipient is prepsphere.de@gmail.com, hosted by Google Gmail. Framer processes submitted form data to handle and forward the enquiry; Google Gmail processes incoming emails to provide the email service. Required information is needed to handle the relevant enquiry; without sufficient contact details we cannot respond. We retain personal data only for as long as necessary to handle the enquiry, unless statutory retention obligations or other lawful grounds require continued storage. Further details are provided in Section 9.

Submissions are intended to be delivered through Framer to prepsphere.de@gmail.com (Google Gmail). [VERIFY: configure and test form delivery and recipient address; confirm Framer processing, storage locations, recipients, retention and deletion options, and data processing arrangements.] Required information is needed to handle the relevant enquiry; without sufficient contact details we cannot respond.

5. Email Communication

If you contact us by email, we process your email address, message content and any name, contact details or attachments you send to handle your enquiry. Article 6(1)(b) GDPR applies to pre-contractual or contractual matters and Article 6(1)(f) GDPR to other communication.

We use a standard consumer Google Gmail account, not Google Workspace, for business email communication at prepsphere.de@gmail.com. Google processes email addresses, message contents, attachments and related communication data to provide email services, including transmitting, receiving and storing messages and maintaining the service’s functionality and security. Google’s applicable terms and privacy information govern its processing. We do not rely on a Google Workspace Data Processing Agreement for this account. Google operates servers worldwide, so personal data may also be processed outside the European Economic Area. Google publishes transfer grounds and safeguards, including applicable adequacy decisions, Google LLC’s participation in the EU–US Data Privacy Framework and Standard Contractual Clauses where required and not covered by an adequacy decision. The applicable mechanism depends on the particular transfer; see also Section 12. We retain email correspondence only for as long as necessary to handle the matter or meet statutory obligations; see Section 9. According to Google, certain account content is retained until the account holder removes it. Other data is subject to differing retention rules depending on its type and purpose; some data may be retained longer for legal or security reasons. Removing a message from the visible inbox does not necessarily mean its immediate, complete removal from all Google systems and backups. Google’s deletion processes can take time and may be delayed. No uniform or account-specific deletion period is promised.

6. Contact via WhatsApp Business

PrepSphere uses the WhatsApp Business App to communicate with customers and respond to inquiries regarding Amazon FBA preparation services. You can contact us at +49 152 07903975 via https://wa.me/4915207903975. Clicking the link takes you away from our website and redirects you to WhatsApp. Communication via WhatsApp is voluntary. Alternatively, contact us by email at prepsphere.de@gmail.com or through the website contact form.

When you contact us through WhatsApp, we process your phone number, your profile name where available, and your messages. This processing is necessary to respond to your inquiry and communicate about the requested Amazon FBA preparation services. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual communication. For other legitimate business inquiries, processing is based on Article 6(1)(f) GDPR; our legitimate interest is appropriate and efficient customer communication.

WhatsApp may independently process certain personal data according to its own privacy information. Use of the service is subject to the applicable WhatsApp Business terms, including the relevant data processing terms. International data transfers are subject to applicable legal and contractual safeguards, including the WhatsApp Business Data Transfer Addendum where applicable; see Section 12. We do not claim that all personal data, metadata or business information is end-to-end encrypted. Provider information: WhatsApp Privacy Policy; WhatsApp Business App Terms

WhatsApp may independently process certain personal data according to its own privacy information. Use of the service is subject to the applicable WhatsApp Business terms, including the relevant data processing terms. International data transfers are subject to applicable legal and contractual safeguards, including the WhatsApp Business Data Transfer Addendum where applicable; see Section 12. We do not claim that all personal data, metadata or business information is end-to-end encrypted. Provider information: WhatsApp Privacy Policy; WhatsApp Business App Terms

7. Cookies and Analytics

Our website is hosted on Framer and uses Framer’s built-in website analytics to understand general website usage, such as page views and visitor statistics.

According to Framer, its built-in analytics do not use cookies or persistent tracking identifiers.

Google Analytics is not connected to our website, and no additional tracking scripts have been installed through Framer’s Custom Code settings.

If additional technologies requiring consent are introduced in the future, we will update this Privacy Policy and implement the necessary consent mechanisms before using them.

8. External Services and Content

This website uses the Inter typeface and imagery configured to load from Framer’s asset domain, framerusercontent.com, for its visual presentation. The name of the typeface alone does not mean that a connection to Google Fonts is established. When images and other website files are requested, technically necessary connection data, such as IP addresses and browser information, may be transmitted to the infrastructure delivering those files. Information about hosting and the processing of technically necessary access data is provided in Section 3. The links on this website to privacy and contractual information from Framer, Google and WhatsApp are external references, not embedded maps, videos or communication widgets. Following such a link opens the relevant provider’s website, where its privacy information applies. For communication through Gmail and WhatsApp and possible international data transfers, see Sections 5, 6 and 12. Naming a provider or typeface does not establish that its analytics or advertising services are used on this website. Information about cookies and analytics is provided in Section 7.

9. Retention and Deletion

We delete personal data when it is no longer necessary for its processing purpose, unless statutory retention obligations or other lawful grounds require continued storage. General contact inquiries that do not result in a contract and are not subject to retention obligations are deleted after the matter has been fully handled, once further storage is no longer necessary. No blanket fixed period is specified for these inquiries. Business correspondence and quotations are generally retained for six years where they qualify as commercial or business letters subject to statutory retention requirements. Accounting vouchers, particularly invoices, are generally subject to an eight-year retention period; certain accounting records, such as accounting books, inventories and annual financial statements, generally require ten years of retention. The applicable provisions govern, particularly Section 147 of the German Fiscal Code (AO), Section 257 of the German Commercial Code (HGB) and Section 14b of the German VAT Act (UStG), where applicable. Periods generally start at the end of the calendar year of the relevant statutory event, such as receipt or dispatch of a business letter, creation of an accounting voucher or the last accounting entry. Statutory special, transitional or extension rules remain applicable. Longer storage may also be necessary where a legal basis exists, for example to establish, exercise or defend legal claims. Statutorily required retention is based on Article 6(1)(c) GDPR. Where data is stored solely to meet retention obligations, its use is restricted to that purpose.

Retention of WhatsApp Business communications depends on the content and purpose of each message: general inquiries are assessed using the same necessity criteria as other contact inquiries; business correspondence or vouchers subject to statutory retention requirements are retained under the applicable rules. The communication channel alone does not determine the period. Technical website data processed by Framer is retained according to the relevant technical or security purpose and applicable provider terms. No specific Framer server-log retention period is stated. Complete removal of data from Gmail’s and WhatsApp’s systems or backups is also subject to their respective deletion processes and any lawful reasons for continued retention. Automatic deletion or immediate complete removal by these providers is not promised.

10. Your Rights

Subject to the applicable statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). To exercise your rights, contact the controller identified above.

Right to object under Article 21 GDPR: Where we process data under Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. We will no longer process the affected data unless we demonstrate compelling legitimate grounds or need it to establish, exercise or defend legal claims. You may object at any time to any processing for direct marketing. This does not assert that direct marketing takes place.

Under Article 7(3) GDPR, you may withdraw consent at any time with future effect. Withdrawal does not affect the lawfulness of processing before withdrawal.

11. Right to Complain

Under Article 77 GDPR, you may lodge a complaint with a data protection supervisory authority, particularly in the place of your habitual residence, workplace or alleged infringement. For the business based in Baden-Württemberg, the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg is a relevant authority.

12. International Data Transfers

12. International Data Transfers

Framer (hosting and forms), Google Gmail (business email communication) and the planned use of WhatsApp Business may involve processing or access to personal data outside the European Economic Area. Such transfers are subject to Articles 44 onwards GDPR. Framer’s Data Processing Addendum describes transfers based on adequacy decisions under Article 45 GDPR, including the EU–US Data Privacy Framework for appropriately certified recipients, or appropriate safeguards under Article 46 GDPR, particularly EU Standard Contractual Clauses. Google describes globally distributed servers and reliance on adequacy decisions, Google LLC’s Data Privacy Framework certification and Standard Contractual Clauses where required and not covered by an adequacy decision. This does not establish that a Google Workspace data processing agreement exists for our Gmail account.

For WhatsApp Business, the applicable Business Data Transfer Addendum must be considered. Insofar as WhatsApp Ireland Limited processes European personal data as a processor, this addendum describes transfers to WhatsApp LLC and Meta Platforms Inc. According to the published terms, applicable safeguards may include the EU–US Data Privacy Framework or, alternatively, Standard Contractual Clauses or other legally recognised mechanisms. Provider sources: Framer DPA; Google data transfer frameworks; WhatsApp Business Data Transfer Addendum

For WhatsApp Business, the applicable Business Data Transfer Addendum must be considered. Insofar as WhatsApp Ireland Limited processes European personal data as a processor, this addendum describes transfers to WhatsApp LLC and Meta Platforms Inc. According to the published terms, applicable safeguards may include the EU–US Data Privacy Framework or, alternatively, Standard Contractual Clauses or other legally recognised mechanisms. This confirms neither activation of our Business App nor the actual transfer basis for every processing operation. [VERIFY BEFORE PUBLICATION: actual recipients and recipient countries, current contractual terms and certification scope, applicability of transfer mechanisms to our Framer, Gmail and WhatsApp Business configuration, necessary additional safeguards and access to copies of safeguards. Verification of the actual transfers has not been completed.] Provider sources: Framer DPA; Google data transfer frameworks; WhatsApp Business Data Transfer Addendum

13. Sources of Data and Further Information

We generally receive contact form, email and WhatsApp Business information directly from you; technical access data arises when you visit the website. Should we process personal data from other sources, we will inform you in accordance with Article 14 GDPR.

We do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.

14. Updates to This Policy

We update this privacy policy when the website, service providers or processing purposes change. The published version should reflect actual processing practices.

PrepSphere

Amazon FBA preparation in Germany. Supporting your next step as a seller.

© 2026 PrepSphere