Privacy policy

Data and purpose

We process company documents, relevant Google file contents and metadata, staff account and review information, credentials and technical logs for document processing, backup, access control and security. Where personal data is involved, our bases are legitimate business interests and applicable recordkeeping duties, or consent where required.

Google access

The utilities use separate Google connections with https://www.googleapis.com/auth/drive. This allows broad Drive access, including reading, changing and deleting files. Each workflow is configured to use approved company files or folders; Google does not restrict this permission to those targets. Credentials are kept in restricted company-controlled storage.

Google data is not sold or used for advertising or AI model training. Use and transfer follow the Google API Services User Data Policy, including its Limited Use requirements.

Storage and retention

Google provides document and backup storage, Netcup hosts company services, and Supabase provides staff authentication. Access is limited to authorized operators and necessary providers. Provider processing may occur outside the EEA; contact us about the applicable arrangements.

Business records and recovery copies are also held in restricted company storage. Invoice-preparation backups are retained indefinitely. Book Metadata db Backups encrypts offsite contents before upload and retains the latest successful Drive snapshot, replacing it only after a new backup passes checks. Separate local recovery copies may be retained.

Your choices

Revoke Google access through Google Account connections. This stops future authorized access but does not delete existing records. Contact info@waltscomicshop.com to request access, correction, deletion, restriction or portability, object to processing, or withdraw consent. Deletion may be limited by legal recordkeeping obligations. You may complain to the Berlin data-protection authority.