Back to shop Quote

Privacy

Formcase GmbH · Daimlerstraße 19, 89564 Nattheim
+49 7321 488 781-0 · [email protected]

Privacy policy of Formcase International Trading LLC
Last updated: October 2026

Protecting your personal data matters to us. As this website is aimed at customers in the European Union, we inform you in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR) about the data we process when you visit this website, send an enquiry, place an order or contact support.

1. Controller

Formcase International Trading LLC
DAMAC XL Tower, Office 1008, Marasi Drive, Business Bay, Dubai, United Arab Emirates
Phone: +49 7321 488 781-9 · Email: [email protected]

2. Representative in the EU (Art. 27 GDPR)

Formcase GmbH, Daimlerstraße 19, 89564 Nattheim, Germany · Email: [email protected] [please confirm]
You can also contact our EU representative with any data protection question.

3. Your rights

You have the right at any time to

  • access the data we hold about you (Art. 15 GDPR),
  • have incorrect data corrected (Art. 16 GDPR),
  • have your data erased (Art. 17 GDPR) or its processing restricted (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR),
  • lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live or work.

Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. You may object to processing for direct marketing at any time without giving reasons.

Simply write to [email protected].

4. Hosting and delivery of the website

This website is delivered via Cloudflare Pages of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (content delivery network). When you visit, Cloudflare processes technically necessary data such as IP address, date and time, the page requested, browser and operating system in server log files in order to deliver the website securely and quickly and to fend off attacks. Based on the country of your IP address we may suggest the matching regional Formcase website; nothing is stored in the process.

The legal basis is our legitimate interest in a secure and stable website (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework.

For product data, quote requests, support tickets and uploaded files we use the Supabase database (Supabase Inc., USA; server location: [please complete, e.g. Frankfurt am Main, EU]) as a processor.

5. Storage in your browser (local storage)

We store in your browser's local storage which region and language you have chosen, which products you have added to your quote request and what you have entered in the enquiry form, so that they are still there on your next visit. This is strictly necessary for the functions you have requested (Art. 5(3) of the ePrivacy Directive and the corresponding national rules). You can delete this data at any time in your browser settings.

6. Quote requests and contact

When you contact us via the enquiry form, by email, phone or WhatsApp, we process your details (e.g. name, organisation/school, email address, phone number, delivery country, products and quantities, message) to answer your enquiry and prepare a quote.

The legal basis is the performance of pre-contractual measures or the contract (Art. 6(1)(b) GDPR) and our legitimate interest in handling enquiries (Art. 6(1)(f) GDPR). For warehousing, shipping and service within the EU we work with Formcase GmbH (Nattheim, Germany), which processes your data on our behalf for these purposes. Your data is transferred to the United Arab Emirates on the basis of the EU standard contractual clauses (Art. 46(2)(c) GDPR).

WhatsApp: If you use the WhatsApp button, you are forwarded to WhatsApp (WhatsApp Ireland Ltd. / Meta), whose privacy policy applies. Please do not send us sensitive data via WhatsApp.

Live chat: Where a live chat is offered on this website, it runs on our telephone system provided by 3CX Ltd. (Limassol, Cyprus). We process your chat messages, any name and email address you provide, and technical data such as IP address and browser (Art. 6(1)(b) and (f) GDPR).

7. Orders, contract handling and payment

To process orders we process your contract, delivery and billing data (Art. 6(1)(b) GDPR). For delivery we pass your name, delivery address and, where needed, phone number to the carrier or freight forwarder (e.g. FedEx, DHL or a forwarder).

Depending on the payment method, we pass the data required for payment to the respective payment service provider:

  • PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg,
  • Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland (also for card payments),
  • our bank for bank transfers and payment on invoice.

The payment service providers partly process your data under their own responsibility and may carry out fraud and credit checks. Their privacy notices also apply.

We keep invoices and accounting records for the statutory retention periods (Art. 6(1)(c) GDPR), usually ten years [please check].

8. Support, support assistant and tickets

Support assistant (AI): On our support page and in the product search you can ask questions to an AI assistant. Your question is sent together with product information to Anthropic, PBC, 548 Market Street, San Francisco, CA 94104, USA (AI model "Claude") to generate an answer. According to Anthropic, this data is not used to train its models and is stored only for a limited time. We store the question, the selected product and whether the problem was solved, without names or contact details, in order to improve our help articles. Please do not enter personal data in the assistant. The legal basis is our legitimate interest in providing quick help (Art. 6(1)(f) GDPR); the transfer to the USA is based on the EU standard contractual clauses.

Support ticket: When you create a ticket, we process the details in the form (e.g. name, company/school, email, phone, date of purchase, serial number, description of the problem) and the files you upload (invoice or proof of purchase, photos or videos) in order to handle your request and any warranty or guarantee claims (Art. 6(1)(b) and (f) GDPR). Tickets and files are stored in our own ticket system (Supabase database, see section 4). Emails about your ticket are sent and received via Resend (Resend, Inc., USA; EU standard contractual clauses). For a free service pickup we pass your name, address and phone number to FedEx. When you register your product, we create a service pass with serial number, product, date of purchase and warranty period. We delete ticket data three years after the case is closed unless longer retention is required by law; service pass data is kept for the life of the product, at most ten years.

9. Newsletter

If you subscribe to our newsletter, we use your email address and, if provided, your name to send you information about Formcase products, offers and news. Subscription uses the double opt-in procedure. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email or by writing to [email protected]. We use [please complete: provider] as a processor for sending the newsletter.

10. Analytics and marketing services (only with consent)

We only use analytics and marketing services such as Google Analytics 4, Google Ads (conversion tracking) or the Meta pixel if you have consented via our cookie banner (Art. 6(1)(a) GDPR). You can withdraw or change your consent at any time via the "Cookie settings" link in the footer. Data may be transferred to the providers in the USA; they are certified under the EU-US Data Privacy Framework. [please adapt: list only the services actually used]

11. External content and links

Fonts and scripts: To display the website we use fonts from Google Fonts and program libraries via the content delivery networks cdnjs (Cloudflare) and jsDelivr. When these are loaded, your IP address is transmitted to the respective provider (Art. 6(1)(f) GDPR).

YouTube and social networks: We only link to our videos on YouTube and our profiles on Facebook, Instagram and LinkedIn. Data is only transferred when you click the link and open the platform.

12. Data security

This website uses TLS encryption (recognisable by "https://"). We take technical and organisational measures to protect your data against loss, manipulation and unauthorised access.

13. Obligation to provide data and automated decisions

You are not legally or contractually obliged to provide your data. However, without the details marked as mandatory in the enquiry or ticket form we cannot process your request. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

14. Changes

We update this privacy policy when our website, our services or the law change. The version published here applies.