Privacy policy

This is a courtesy translation. The German version is legally binding.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Sidemates Gbr.

Represented by:
Johannes Klopp, Katharina Hesener and Lorenz Herrmann

Maarortstraße 6
31603 Diepenau

info@sidemates.eu

If you have questions about data protection or would like to exercise your rights, you can contact us at any time using the email address above.

2. General information on data processing

Protecting your personal data matters to us. We process personal data exclusively within the framework of the applicable law, in particular the General Data Protection Regulation (GDPR).

Personal data is any data that can be used to identify you personally. This includes, for example, your name, email address, usage data or content you publish on our platform.

3. Hosting and server log files

Our website and platform are hosted by Hostinger International Ltd. The servers are located within the European Union (among others in the Netherlands and Ireland).

When you visit the website, technical data that your browser transmits to the server is recorded automatically. This includes in particular:

  • IP address (stored only temporarily in server log files)
  • date and time of access
  • pages visited
  • browser type and version
  • operating system

This data is processed solely to ensure stable and secure operation of the website.

Server log files are generally deleted automatically after seven days at the latest.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the secure operation of the website).

4. Registration and user account

You can create a user account on our platform.

The following personal data is processed in the course of this:

  • username
  • email address
  • password

The password is stored in encrypted form (hashing) and cannot be viewed by us.

In addition, technical timestamps are stored, for example:

  • time of registration
  • last sign-in
  • changes to the user account

This data is required in order to provide you with a user account and to let you use the platform.

Legal basis: Art. 6 (1) (b) GDPR (provision of a user account).

5. User content (reviews)

Users can create and publish content on our platform, in particular:

  • reviews of wheelchairs
  • star ratings
  • written reviews
  • information on how long a wheelchair has been used

This content is displayed publicly on the platform.

Reviews are internally linked to a user account so that they can be managed or deleted. Reviews can be edited and deleted at any time.

Legal basis: Art. 6 (1) (b) GDPR (provision of the platform) and Art. 6 (1) (f) GDPR (legitimate interest in providing user reviews).

6. Possible information about health

In written reviews, users may voluntarily provide information that allows conclusions to be drawn about health limitations or the use of a wheelchair.

Such information is provided by users on a purely voluntary basis. We do not actively request this kind of data.

Users decide for themselves which information they publish and can change or delete their content at any time.

7. Internal platform statistics

We do not use any external analytics tool (such as Google Analytics).

Instead we use an internal statistics system to understand and improve how the platform is used.

The following data is processed in particular:

  • number of page views
  • number of visitors
  • detail views of individual wheelchair models
  • clicks on individual content
  • wheelchair models marked as favourites

This data is used internally only and is aggregated or anonymised after a short time. Internally we cannot view individual usage behaviour; we only see aggregated data.

No data is passed on to external analytics providers.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in improving the platform).

8. Contacting us

If you contact us (for example by email or through a contact form), the data you send us is stored in order to process your enquiry.

The following data may be processed in particular:

  • name
  • email address
  • message

The data is stored only for as long as it is required to process your enquiry.

Legal basis: Art. 6 (1) (b) GDPR (processing your enquiry) or Art. 6 (1) (f) GDPR (legitimate interest in communicating with users).

9. Newsletter

If you sign up for our newsletter, your email address is stored.

Sign-up uses a double opt-in procedure. This means you first have to confirm your registration before you receive the newsletter.

You can unsubscribe from the newsletter at any time by sending us a message.

Legal basis: Art. 6 (1) (a) GDPR (consent).

10. Signing in with Google (social login)

You can also sign in using your Google account.

If you use this function, we receive from the provider the information required to create your user account, in particular:

  • email address
  • name (if transmitted by the provider)

No further data is taken over without your consent.

Legal basis: Art. 6 (1) (a) GDPR (consent).

11. Use of Google Fonts

This website uses fonts (Google Fonts) to ensure a consistent presentation. They are loaded locally.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a consistent presentation of the website).

12. Cookies

Our website uses technically necessary cookies.

These cookies are required for basic functions of the platform to work, in particular:

  • sign-in functions
  • website security
  • technical settings

No marketing or tracking cookies are used.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the technical functioning of the website).

13. Storage period

We store personal data only for as long as it is required for the respective purpose.

Typical storage periods:

  • user accounts: until the user deletes the account
  • reviews: until the user deletes them
  • contact enquiries: only as long as required to process them
  • newsletter data: until you unsubscribe
  • server log files: generally deleted after seven days at the latest
  • backups: created regularly and automatically overwritten after a short time

14. Disclosure of data

Your personal data is only passed on to third parties if:

  • you have expressly consented
  • this is required by law
  • this is necessary in order to provide the platform (for example the hosting provider)

15. Data security

We use technical and organisational security measures to protect your data against loss, misuse or unauthorised access.

This includes in particular the encrypted transmission of data (HTTPS).

16. Your rights

You have the right at any time:

  • to obtain information about the data we have stored about you
  • to have incorrect data corrected
  • to have your data deleted
  • to restrict the processing of your data
  • to object to the processing of your data
  • to withdraw your consent at any time

If you would like to exercise one of these rights, you can contact us at any time.

17. Version of this privacy policy

Version: 5 April 2026