Privacy Policy

Last updated: 7 August 2026

1. Controller

The controller responsible for the processing of personal data on this website is:

Unshootable
Owner: Arian Kasapolli
Welserstraße 3
87463 Dietmannsried
Germany

Contact
Phone: +49 171 9226536
Email: info@unshootable.com

2. General information on data processing

We process personal data only to the extent necessary to provide a functional and secure website, respond to enquiries, take steps prior to entering into a contract, perform contracts, comply with legal obligations, or pursue legitimate business interests.

Personal data means any information relating to an identified or identifiable natural person. Depending on the context, this may include names, contact details, communication content, IP addresses and technical usage data.

Depending on the purpose, processing is based in particular on:

• Article 6(1)(b) GDPR where processing is necessary to take steps at the request of a data subject prior to entering into a contract or to perform a contract;
• Article 6(1)(c) GDPR where processing is necessary to comply with a legal obligation;
• Article 6(1)(f) GDPR where processing is necessary for our legitimate interests and those interests are not overridden by the interests or fundamental rights and freedoms of the data subject;
• Article 6(1)(a) GDPR where consent is expressly obtained.

Where processing is based on consent, consent may be withdrawn at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

3. Hosting and website delivery through Cloudflare

This website is delivered using services provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.

When the website is accessed, Cloudflare may process technical data necessary to deliver, secure and operate the website. Depending on the request, this can include:

• IP address;
• date and time of access;
• requested page or file;
• referrer information;
• browser, operating system and device information;
• language settings;
• transferred data volume;
• access status and error information;
• security-related and network information.

The processing is carried out to deliver the website, maintain technical security and availability, detect and mitigate abuse or attacks, and troubleshoot technical errors. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and efficient operation of this website.

Cloudflare states in its Data Processing Addendum that, where it processes personal data on behalf of a customer, the customer acts as controller and Cloudflare acts as processor. Cloudflare may also process data outside the European Economic Area. Where a transfer constitutes a restricted transfer under European data protection law, Cloudflare provides for safeguards including the EU Standard Contractual Clauses.

Further information is available in Cloudflare's Privacy Policy and Data Processing Addendum.

4. Server logs and technical security data

Technical log and security data may be generated when the website is accessed. Such data is used in particular to:

• deliver the website technically;
• identify and resolve errors;
• maintain stability and security;
• detect abusive requests and attacks;
• protect the underlying infrastructure.

We do not combine these technical logs with other data sources for the purpose of creating personal user profiles.

The data is stored only for as long as necessary for the relevant technical and security purposes, unless a longer retention period is required because of a specific security incident or a legal obligation. Cloudflare may determine separate retention periods for technical logs processed within its infrastructure.

The legal basis is Article 6(1)(f) GDPR.

5. Cookies and similar technologies

The website code currently does not set cookies and does not use local storage or session storage. It also does not use analytics, advertising, retargeting or cross-site tracking tools. In particular, we currently do not use Google Analytics, Meta Pixel, TikTok Pixel, LinkedIn Insight Tag, Hotjar, Microsoft Clarity or comparable marketing technologies on this website.

Cloudflare may use strictly necessary security or network mechanisms at infrastructure level where required to provide, secure or operate the website. Where information is stored on or accessed from a user's terminal equipment and such access is strictly necessary to provide the expressly requested service, the applicable exception under Section 25(2) TDDDG applies. Where personal data is processed in this context, Article 6(1)(f) GDPR applies insofar as the processing is necessary for the secure and functional operation of the website.

If non-essential analytics, marketing or similar technologies are introduced in the future, they will only be activated where the required consent has been obtained, and this Privacy Policy will be updated accordingly.

6. Contact form and Formcarry

A contact form is available on this website. When you submit the form, we process the information you enter. Depending on the information provided, this may include:

• name;
• company;
• email address;
• website or store address;
• telephone number, if provided;
• message content, if provided;
• date and time of submission;
• technically necessary connection and security data.

The form is processed using Formcarry, operated by Teijal, Inc. d/b/a Formcarry, as the technical form backend. Formcarry acts as a processor for receiving, storing and forwarding form submissions. According to Formcarry's Data Processing Agreement, submission data is stored on servers in Frankfurt, Germany. Limited remote access from the United States may occur for support, maintenance and service delivery and is covered by the EU Standard Contractual Clauses and supplementary safeguards described in that agreement.

The processing is based on Article 6(1)(b) GDPR where the enquiry concerns a quotation, a potential engagement, an existing contractual relationship or other pre-contractual measures. For other business or general enquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to receive, process, respond to and document business enquiries.

The privacy checkbox in the form confirms that the Privacy Policy has been made available to the sender. The legal basis for processing the enquiry itself is determined by the purpose of the enquiry as described above.

Further information is available in Formcarry's Privacy Policy and Data Processing Agreement.

7. Email communication and Google Workspace

We use Google Workspace for business email communication. For business customers with a billing address in Germany, the Google Workspace contracting entity is generally Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland, unless otherwise agreed in the applicable Google Workspace contract.

When you contact us by email, or when a form submission is forwarded to our business mailbox, the information contained in the communication may be processed within Google Workspace. This can include:

• name and company;
• email address;
• telephone number;
• message and communication content;
• attached files;
• date and time of communication;
• technical metadata necessary for email delivery and security.

Processing is based on Article 6(1)(b) GDPR where the communication relates to contract initiation or performance. For other business communications, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the reliable handling and documentation of business communications.

Google provides a Data Processing Amendment for Google Workspace. Under that framework, Google acts as processor for customer personal data where European data protection law applies. Google may use affiliates and subprocessors in other countries. Where required, international transfers are protected by the transfer mechanisms described in Google's applicable Data Processing Amendment, including Standard Contractual Clauses.

Further information is available in the Google Workspace Data Processing Amendment and Google's Privacy Policy.

8. Contact by telephone

If you contact us by telephone, we process the personal data you provide in order to handle your enquiry. This may include your name, company, telephone number and the content of the communication.

The legal basis is Article 6(1)(b) GDPR where the communication relates to contract initiation or performance. For other business enquiries, the legal basis is Article 6(1)(f) GDPR.

9. No newsletter and no automated marketing through the website

We currently do not offer an email newsletter through this website. Contact details submitted through the contact form or as part of an enquiry are not used for automated newsletters or comparable marketing mailings without a separate legal basis.

If a newsletter or another consent-based marketing service is introduced in the future, this Privacy Policy will be updated and any required consent will be obtained separately.

10. External links

This website may contain links to external websites, including LinkedIn. No content from those external services is embedded solely by displaying the link. Personal data may be processed by the respective provider when you actively follow such a link. The privacy information of the respective provider applies to the external website.

11. Recipients of personal data

Where necessary for the relevant purpose, personal data may be disclosed to the following categories of recipients:

• Cloudflare and its subprocessors for website delivery, security and infrastructure;
• Formcarry and its subprocessors for processing contact form submissions;
• Google and its subprocessors in connection with Google Workspace and business email communication;
• IT service providers where access is necessary for maintenance, security or troubleshooting;
• tax advisers, legal advisers and other professional advisers subject to confidentiality obligations where necessary;
• public authorities where disclosure is required by law;
• other recipients where you have consented or another legal basis applies.

We do not sell personal data and do not disclose it to third parties for their independent advertising purposes.

12. Retention periods

We retain personal data only for as long as necessary for the relevant purpose. Data will then be deleted or anonymised unless statutory retention obligations, legitimate interests, contractual requirements or the establishment, exercise or defence of legal claims require further retention.

When determining retention periods, we take into account in particular:

• the purpose of the processing;
• the status of the business communication;
• whether a contractual relationship exists;
• statutory commercial and tax retention obligations;
• limitation periods;
• possible legal disputes;
• technical and security requirements.

13. Rights of data subjects

Subject to the statutory requirements, data subjects have in particular the following rights:

Right of access

You may request information as to whether we process personal data concerning you and, where applicable, obtain access to such data and the information required by Article 15 GDPR.

Right to rectification

You may request the correction of inaccurate personal data and completion of incomplete personal data in accordance with Article 16 GDPR.

Right to erasure

You may request erasure of personal data where the requirements of Article 17 GDPR are met and no legal ground requires continued processing or retention.

Right to restriction of processing

You may request restriction of processing where the requirements of Article 18 GDPR are met.

Right to data portability

Where the statutory requirements are met, you may receive personal data you have provided in a structured, commonly used and machine-readable format in accordance with Article 20 GDPR.

Withdrawal of consent

Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

Right to object

Where personal data is processed on the basis of Article 6(1)(e) or (f) GDPR, you may object to the processing on grounds relating to your particular situation in accordance with Article 21 GDPR.

To exercise your rights, please use the contact details set out in Section 1. We may request additional information where necessary to verify your identity.

14. Special information on the right to object

Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing.

We will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless processing is necessary for the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time without giving reasons.

15. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

The supervisory authority responsible for private-sector organisations and self-employed persons in Bavaria is generally:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
Phone: +49 (0) 981 180093-0
Website: www.lda.bayern.de

You may also contact another competent supervisory authority, in particular the authority at your habitual residence, place of work or the place of the alleged infringement.

16. Encryption and security

This website uses encrypted HTTPS/TLS connections. We take appropriate technical and organisational measures, taking into account the state of the art, implementation costs and the nature, scope, context and purposes of processing, to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Complete security of data transmission over the internet cannot be guaranteed.

17. Automated decision-making and profiling

We do not use personal data collected through this website for solely automated decision-making within the meaning of Article 22 GDPR or for profiling that produces legal effects or similarly significant effects.

18. Changes to this Privacy Policy

We may update this Privacy Policy if the website, the services used, our data processing activities or the legal requirements change. The version published on this website at the relevant time applies.