Privacy Policy

The controller responsible for data processing on this website is:

Phone: +49 211 20963463
Email: tobi@tobiasriemenschneider.com

This privacy policy explains which personal data this website processes, for what purpose, on which legal basis and for how long. The processing is carried out in accordance with the General Data Protection Regulation (GDPR).

Warehouse Lab is a demo: a Warehouse Management System together with an ERP system and a small online shop for a fictional hypermarket. You can look around the WMS, the ERP, the Shop, the Floor, the documentation and the feedback without an account and without providing any personal data. Personal data is processed when you create an account, order in the Shop, work a shift on the handheld, share feedback or contact us.

When you visit this website, the server automatically collects and stores information in so-called server log files. These include:

• visited page
• date and time of access
• amount of data transferred
• referrer URL
• browser type and version
• operating system
• IP address

Purpose: Ensuring the stability, security, and proper functioning of the website, as well as detecting misuse.

Legal basis: Article 6(1)(f) GDPR

Retention period: up to 15 days

This website and its database run on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany. Hetzner processes this data on our behalf in accordance with Article 28 GDPR.

Legal basis: Article 6(1)(f) GDPR. There is a legitimate interest in a reliable, secure, and efficient provision of this website.

This website only uses cookies that are needed to provide the website and the settings you choose:

• a session cookie that keeps you signed in and protects forms against cross-site request forgery (deleted after 2 hours of inactivity)
• if you choose “Remember me” when signing in, a cookie that keeps you signed in for longer
• a cookie that stores your choice of light or dark mode (1 year)
• a cookie that remembers whether the sidebar is open (7 days)
• a cookie that remembers which sidebar groups you closed (1 year)

Your choice of light or dark mode is also kept in your browser’s local storage. This data never leaves your device.

No tracking or marketing cookies are used.

Legal basis: Section 25(2) No. 2 TDDDG and Article 6(1)(b) and (f) GDPR. You can delete cookies in your browser at any time. Without the session cookie, you cannot sign in.

When you create an account, we store:

• your name and email address
• your password, stored only as a secure hash
• whether and when you verified your email address
• if you turn on two-factor authentication, its secret and recovery codes, stored encrypted
• if you add a passkey, its name and public key

While you are signed in, we store your session on our server, including your IP address and browser information, to keep you signed in and to protect your account.

Purpose: providing your account and the features that require one. Legal basis: Article 6(1)(b) GDPR.

We keep your account data until you delete your account. You can delete it at any time in your settings.

The Shop is a demo shop: nothing is charged and nothing is delivered. When you order, we store:

• the delivery address you enter at your first checkout: name, street, postal code, city and country
• your cart, your orders and their status
• the shipment the demo carrier creates for your order, with its tracking number
• the emails we send you about your orders

Your order runs through the ERP, the Warehouse and the demo carrier of this website. No data is passed to a real carrier, payment provider or anyone else.

Other visitors see your order in the Warehouse as it moves, but only as “Shop customer” with a customer number and your country. Your name, address, email and tracking are hidden from them. The operator of this website sees all data, to run the Shop and the Warehouse.

Legal basis: Article 6(1)(b) GDPR.

When you work a shift on the handheld, we store which tasks you did, such as picks, packed cartons and booked pallets. Your tasks show in the Warehouse with your name only to you and to the operator of this website. Everyone else sees you as “Warehouse helper”.

Legal basis: Article 6(1)(b) GDPR.

When you share a feedback post or comment on one, we store its text together with your account and the time.

Feedback is public: everyone who visits this website, with or without an account, can read your feedback posts and your comments, each shown with your name and the date. Do not write anything there that you want to keep private.

When you share a post, the operator of this website is notified by email. When you comment on a post, its author is notified by email with your name and your comment; when you reply to a comment, so is the person you reply to.

You can delete your own posts and comments at any time. A post is deleted together with the comments below it. A comment that others replied to is replaced by a note that it was deleted, without your name and text.

Legal basis: Article 6(1)(b) GDPR.

We send emails that are needed for your account, such as email verification and password reset links, and emails about your orders in the Shop: the order confirmation, shipment with tracking, shortened order lines and cancellations. Legal basis: Article 6(1)(b) GDPR.

About your feedback we send a confirmation when you share a post, and an email when its status changes, when somebody comments on it or when somebody replies to one of your comments. You can turn off all of these except the confirmation in your notification settings; we store that choice with your account.

Emails are sent through Amazon Simple Email Service (SES), provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, on our behalf in accordance with Article 28 GDPR. AWS processes your email address and the content of the email in the Frankfurt (eu-central-1) region. A transfer to the USA cannot be ruled out. Amazon Web Services, Inc. is certified under the EU-U.S. Data Privacy Framework.

All fonts, images and 3D models on this website are served from our own server. No connection to Google Fonts, a content delivery network or another third party is made, and no web analytics are used.

If you contact us via email, your provided data (e.g. name, email content) will be stored for the purpose of processing your request.

Your data will not be shared without your consent.

Legal basis: Article 6(1)(b) GDPR

When you delete your account in your settings, we delete:

• your account data, two-factor authentication and passkeys
• your cart

You are signed out on the device you use. Sessions on other devices end after 2 hours of inactivity at the latest.

Your orders, shipments and emails stay in the history of the ERP and the Warehouse, but anonymised: your name becomes “Deleted customer”, your address and email address are removed and the content of the emails we sent you is deleted. Bookings you made on the handheld stay in the Warehouse’s journals without your name. Your feedback posts and comments stay as well, so the discussions others took part in keep their shape, but no longer linked to you: they show “Deleted user” instead of your name. Delete a post or comment before you delete your account if its text should go too.

Other personal data is deleted as soon as it is no longer necessary for the purposes for which it was collected and no legal retention obligations apply.

Under applicable data protection laws, you have the right to:

• access your stored personal data (Article 15 GDPR)
• rectification of inaccurate data (Article 16 GDPR)
• erasure of your data (Article 17 GDPR)
• restriction of processing (Article 18 GDPR)
• data portability (Article 20 GDPR)
• object to processing based on Article 6(1)(f) GDPR, on grounds relating to your particular situation (Article 21 GDPR)
• withdraw your consent at any time with effect for the future (Article 7(3) GDPR)

To exercise these rights, contact us at the email address above.

You have the right to lodge a complaint with a data protection supervisory authority.

For example: The State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (Germany)