Privacy
Operator and contact
Tim GeithnerSole proprietorship
c/o IP-Management #9778
Ludwig-Erhard-Str. 18
20459 Hamburg
Germany
Scope and controller
This privacy notice applies to READYFIELD at readyfield.store. The operator identified above is the controller. Use the same email address for privacy questions and to exercise your rights. Last updated: 9 October 2026.
Website delivery and security
Page requests involve processing your IP address, request time and address, browser and device information, and technical status and error data. We use Lovable Cloud and Supabase for the website and catalog, with Cloudflare supporting delivery. These services receive the connection data needed to deliver the site, diagnose faults and prevent abuse.
The legal basis is Article 6(1)(f) GDPR, reflecting our legitimate interest in a functioning, secure service. Technical logs support operation, troubleshooting and abuse prevention; retention depends on these purposes and the hosting services used. Data required to investigate a specific security incident may be retained until it is resolved and, where necessary, for legal claims.
Local lists, comparisons and necessary storage
Your equipment list, quantities, ownership status and marketplace preference are saved in this device's local browser storage. Comparisons use the tab's session storage. We do not upload these selections as a personal account list. The list remains until you reset it or clear browser data; comparisons are tied to the browser session.
Signing in also stores session information in your browser. Hosting infrastructure may set security cookies, such as Cloudflare's __cf_bm for identifying automated traffic, expiring after 30 minutes of continuous inactivity. This storage supports the function you requested or secure delivery, rather than personalised advertising. Where strictly necessary, access is based on section 25(2)(2) TDDDG; further processing relies on Article 6(1)(b) or (f) GDPR. You can clear browser data yourself, which may remove your list or sign-in session.
Optional accounts and Google sign-in
Browsing the catalog and using a local list require no account. If you register, Supabase Auth processes your email address, credentials, account identifier, verification, sign-in and session data. This provides and protects the requested account and password recovery under Article 6(1)(b) GDPR. Account data is retained while the account is used; you can request deletion using our contact address. Legal retention duties or necessary security records may prevent immediate deletion of all records.
If you choose Google sign-in, account information approved in Google's dialog, typically your identifier, email address, name and possibly profile picture, is shared for authentication. We do not receive your Google password. Google processes the sign-in under its own privacy notice. Signing in does not synchronise your local equipment list between devices.
Product images and Amazon affiliate links
Product images load from external Amazon image servers, which receive your IP address and technical request data when an image loads. We rely on our legitimate interest in clearly presenting the equipment discussed under Article 6(1)(f) GDPR. Local illustrations and fonts are served by the website; fonts do not connect to Google Fonts.
A labelled affiliate link opens Amazon and contains our affiliate identifier for attribution of qualifying purchases. Your local list and account email are not added to the link. The retailer or Amazon is responsible for purchases, payment data and further use of Amazon. READYFIELD has no checkout and does not collect payment details.
Email enquiries
When you email us, we process your sender address, message and information you choose to provide to handle the enquiry. Our email provider is Proton. The legal basis is Article 6(1)(b) GDPR for contract-related enquiries, otherwise our legitimate interest in responding under Article 6(1)(f). Messages are retained as needed to handle the enquiry, necessary follow-up or legal retention duties.
Recipients and international processing
Recipients include the hosting, authentication, email and image services described above and, where legally required, authorities or other entitled recipients. Providers may process data outside the European Economic Area, particularly in the United States or Switzerland. Their linked notices describe locations, subprocessors and transfer mechanisms. Lawful international transfers may rely on adequacy decisions under Article 45 GDPR or appropriate safeguards under Article 46; contact the controller for further information about the specific processing.
Your rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction and data portability. Where processing relies on consent, you may withdraw it at any time for future processing. You may lodge a complaint with a data protection authority, particularly where you live or work or where an alleged infringement occurred.
Right to object: You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. Contact the controller identified above. READYFIELD does not make automated decisions with legal or similarly significant effects.
Analytics
We currently have no additional web analytics provider or personalised advertising pixels enabled in the shop. Necessary hosting and security logs are separate. If processing changes, we will update this notice and obtain any required consent before the relevant processing.