Privacy Policy

1. Controller

Digital Generation GmbH
Wismarer Str. 9
33605 Bielefeld
Germany

Phone: +49 521 999975 20
E-mail: contact@digitalgeneration.eu

2. Scope

This Privacy Policy applies to the publicly accessible Fetchloop website and, where no more specific privacy notice is provided, to direct business communications and Fetchloop services or applications operated by Digital Generation GmbH.

3. Website access and server logs

When you access this website, the hosting provider processes connection data required for technical operation. This may include your IP address, date and time of access, requested URL, referrer URL, browser type, operating system and technical status information.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically reliable operation of the website. Log data is deleted when it is no longer required for these purposes, unless statutory retention obligations or security requirements justify longer storage.

4. Cookies and consent management

WordPress and security or consent-management functions used on the website may use technically necessary cookies. Where optional analytics, marketing or third-party services are used, they are activated only on a lawful basis and, where required, only after your consent. You can change or withdraw consent at any time through the consent-management function provided on the website.

5. Local fonts and external content

The fonts used on the current Fetchloop positioning page are served locally. External links do not transmit data to the linked provider merely because you visit this website. Once you follow an external link, the privacy terms of the respective provider apply.

6. Contacting us

If you contact us by e-mail, telephone, post or another direct channel, we process the information you provide in order to handle your enquiry.

The legal basis is Art. 6(1)(b) GDPR where the enquiry concerns steps prior to entering into a contract or performance of a contract; otherwise Art. 6(1)(f) GDPR based on our legitimate interest in handling business and other enquiries.

7. Business partners, customers and suppliers

For the initiation, performance and administration of business relationships, we process in particular master data, contact details of contact persons, contractual and billing data, and related communications.

The relevant legal bases include Art. 6(1)(b), (c) and (f) GDPR.

8. Fetchloop services and applications

When operational Fetchloop services or applications are used, the data processed may – depending on the relevant role and function – include account and contact data, information relating to authorised returns and transactions, operational process and status data, technical device and usage data, and location- or routing-related information where required for the relevant function.

The processing is used in particular to provide and secure the services, perform and document returns and recovery processes, communicate with participating parties, and optimise commercial and operational processes.

The legal basis is generally Art. 6(1)(b) GDPR; Art. 6(1)(f) GDPR may additionally apply to security, fraud prevention, quality assurance and operational optimisation, and Art. 6(1)(c) GDPR where legal obligations apply. Where processing requires consent, the legal basis is Art. 6(1)(a) GDPR.

9. Automated systems and optimisation

Fetchloop may use statistical or algorithmic methods for commercial and operational optimisation. We do not make decisions producing legal effects or similarly significant effects on an individual solely by automated means within the meaning of Art. 22 GDPR, unless this is specifically disclosed in the relevant context and a lawful basis exists.

10. Applications

If you apply to work with us, we process the information you submit for the purpose of conducting the application process. The legal basis is in particular Section 26(1) BDSG. If no employment relationship is established, application documents are generally deleted no later than six months after the application process has ended, unless longer retention is legally required or you have consented to longer storage.

11. Recipients and processors

We disclose personal data only where this is necessary for the relevant purpose or where we are legally required to do so. Recipients may include hosting and cloud providers, communications and IT service providers, routing or technical infrastructure partners, participating merchant, retail and logistics partners, advisers, financial institutions and public authorities.

Where service providers process personal data on our behalf, we enter into data processing agreements pursuant to Art. 28 GDPR where required.

12. Transfers to third countries

Where personal data is processed outside the European Union or the European Economic Area in connection with international projects or service providers, transfers take place only in accordance with Art. 44 et seq. GDPR, in particular on the basis of an adequacy decision or appropriate safeguards.

13. Retention

We retain personal data only for as long as necessary for the relevant purpose. Data is then deleted or anonymised unless statutory retention periods, the establishment or defence of legal claims, or another lawful reason requires longer storage.

14. Your rights

You have, in particular, the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and the right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

Where we process personal data on the basis of a legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object in accordance with Art. 21 GDPR.

To exercise your rights, an informal message to contact@digitalgeneration.eu is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

15. Changes to this Privacy Policy

We update this Privacy Policy when the legal framework, the website or our data processing activities change.

Last updated: August 2026