Privacy policy

Privacy Policy

Last updated: April 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

ffount GmbH
Heumarkt 7
96047 Bamberg
Germany

Managing Director: Maximilian Neukum
Register court: Local Court of Bamberg, HRB 9593
VAT ID: DE323804756

Phone: +49 951 120 929 27
Email: hello@sense5.me

A data protection officer is not legally required and has not been appointed. Please direct data protection inquiries to the email address above.

2. General information

2.1 Scope of data processing

We generally process our users' personal data only to the extent necessary to provide a functioning website as well as our content and services. Processing regularly takes place only with the user's consent or where processing is permitted by legal provisions.

2.2 Legal bases

Where we obtain the consent of the data subject for processing operations involving personal data, Art. 6(1)(a) GDPR serves as the legal basis. For processing necessary to perform a contract, Art. 6(1)(b) GDPR applies. Where processing is necessary to comply with a legal obligation, Art. 6(1)(c) GDPR applies. Where processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6(1)(f) GDPR serves as the legal basis.

2.3 Data erasure and storage period

The data subject's personal data will be erased or blocked as soon as the purpose of storage ceases to apply. Data may be stored beyond this if provided for by European or national laws to which the controller is subject. Data will also be blocked or erased when a storage period prescribed by these standards expires, unless there is a need for continued storage of the data.

3. Hosting and provision of the website

Our website is hosted on servers of Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”). Shopify is a provider of an e-commerce platform that enables us to operate our online shop.

When our website is accessed, Shopify collects various log files including your IP address. This serves the technical provision of the website and the security of our IT systems.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free presentation and optimisation of our website.

A data processing agreement pursuant to Art. 28 GDPR is in place with Shopify. Shopify may also process data outside the EU, in particular in Canada and the USA. Details can be found in section 10.

Further information on data processing by Shopify can be found in Shopify's privacy policy: https://www.shopify.com/legal/privacy

4. Collection of general information when visiting the website

When our website is accessed, information of a general nature is collected automatically. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address, the referrer URL (the previously visited page), the sub-pages accessed as well as the date and time of access.

Processing takes place in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

The data is not passed on or otherwise used. However, we reserve the right to review the server log files subsequently should specific indications point to unlawful use.

5. Cookies

Our website uses cookies. Cookies are small text files that are stored in or by the browser on your device when you visit a website. They serve to make our offering user-friendly.

5.1 Technically necessary cookies

Some cookies are technically necessary so that certain functions of the website (in particular Shopify's cart and session management) work properly. Without these cookies, services you have expressly requested could not be provided.

Legal basis: Art. 6(1)(f) GDPR in conjunction with § 25(2)(2) TDDDG.

5.2 Cookies requiring consent

We only use cookies that are not technically necessary with your express consent, which you can give via our cookie banner when you first visit our website.

Legal basis: Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG.

You can revoke your consent at any time with effect for the future by adjusting your cookie settings via the banner or deleting the cookies in your browser.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a notice always appears before a new cookie is created. Fully disabling cookies may, however, mean that you cannot use all functions of our website.

6. Shopify analytics functions

We use the analytics functions integrated in Shopify to analyse and regularly improve our website. Pseudonymised usage data is collected (including pages visited, time spent, anonymised IP address). This data is not combined with other personal data.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the needs-based design and statistical evaluation of our website.

Processing takes place on the basis of the data processing agreement with Shopify.

7. Contacting us

7.1 Contact form

A contact form is available on our website through which you can send us messages. The data you enter in the form (name, email address, message) is stored by us to process your inquiry and in case of follow-up questions.

The legal basis is Art. 6(1)(b) GDPR, provided your inquiry is aimed at the performance of a contract or the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of the inquiries addressed to us pursuant to Art. 6(1)(f) GDPR.

Your details will be erased no later than six months after the final processing of your inquiry, unless statutory retention obligations preclude this.

7.2 Contact by email

If you contact us by email, your details including the contact data you provide will be stored by us for the purpose of processing your inquiry. Processing takes place on the same legal bases as described under 7.1.

8. Newsletter and email marketing (Klaviyo)

8.1 Description and scope

Our website offers the option to subscribe to our newsletter. For sending our newsletter and for automated email communication (e.g. the delivery of our Ritual Guide), we use the service Klaviyo, offered by Klaviyo, Inc., 125 Summer Street, Floor 6, Boston, MA 02111, USA.

When you sign up for the newsletter, the data you enter (email address, and where applicable first and last name) is transmitted to Klaviyo and stored there. Klaviyo processes this data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR.

In addition, statistical information about the use of the newsletters (e.g. open and click rates) is collected. This helps us measure interest in the content and improve our offering.

8.2 Double opt-in and logging

Subscription to our newsletter takes place using the so-called double opt-in procedure. After you sign up, you will receive an email asking you to confirm your subscription. You will only be added to our distribution list after confirmation. The time of sign-up, the time of confirmation and the IP address are logged in order to be able to prove consent.

8.3 Legal basis and revocation

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

You can revoke your consent at any time with effect for the future, without affecting the lawfulness of the processing carried out up to the revocation. To revoke, an informal notification by email to hello@sense5.me or a click on the unsubscribe link contained in every newsletter email is sufficient.

8.4 Storage period

Your email address is stored for the duration of your subscription and erased after unsubscribing or revocation, unless statutory retention obligations preclude this.

8.5 Data transfer to the USA

Klaviyo is a US provider. A transfer of personal data to the USA takes place. Klaviyo, Inc. is certified under the EU-US Data Privacy Framework and thereby offers an adequate level of data protection pursuant to Art. 45 GDPR.

Further information on data processing by Klaviyo can be found at: https://www.klaviyo.com/legal/privacy

9. Prize draws

If we run prize draws on our website or as part of our pre-launch activities, the data you provide when taking part (e.g. name, email address) is processed exclusively to run the prize draw, to notify any winners and, where necessary, to deliver a prize.

The legal basis is Art. 6(1)(b) GDPR (performance of the participation contract) and, where consent has been given (e.g. for an additional newsletter subscription), Art. 6(1)(a) GDPR.

After the prize draw has ended, the data is erased unless statutory retention obligations exist or a separate consent (e.g. newsletter) justifies further processing. The respective terms of participation contain supplementary information on the specific prize draw.

10. Recipients of data and third-country transfer

10.1 Processors

We only pass on your personal data to carefully selected processors who support us in providing our services. A data processing agreement pursuant to Art. 28 GDPR is in place with each of these service providers. We currently use the following service providers:

• Shopify International Limited (Ireland) – e-commerce platform and hosting
• Klaviyo, Inc. (USA) – email marketing and marketing automation

10.2 Data transfer to third countries

Some of the service providers we use process personal data outside the European Union. This concerns in particular:

• Canada: Shopify server locations. An adequacy decision by the European Commission exists for Canada (Art. 45 GDPR).
• USA: Shopify and Klaviyo server locations. Both companies are certified under the EU-US Data Privacy Framework (EU Commission implementing decision of 10 July 2023), so that an adequate level of data protection pursuant to Art. 45 GDPR is ensured.

In addition, the European Commission's standard contractual clauses pursuant to Art. 46(2)(c) GDPR apply.

11. Your rights as a data subject

You have the right:

• pursuant to Art. 15 GDPR to request information about your personal data processed by us;
• pursuant to Art. 16 GDPR to request without undue delay the rectification of inaccurate or the completion of your personal data stored by us;
• pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
• pursuant to Art. 18 GDPR to request the restriction of the processing of your personal data;
• pursuant to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
• pursuant to Art. 7(3) GDPR to revoke your consent once given at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future;
• pursuant to Art. 21 GDPR to object to the processing where it is based on Art. 6(1)(e) or (f) GDPR. This applies in particular to processing for the purposes of direct marketing.

To exercise your rights, an informal notification by email to hello@sense5.me or by post to the address stated under point 1 is sufficient.

12. Right to lodge a complaint with a supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data is unlawful.

The supervisory authority responsible for us is:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
Phone: +49 981 180093-0
Email: poststelle@lda.bayern.de
Web: https://www.lda.bayern.de

You may also contact another supervisory authority in the EU member state of your residence, your place of work or the place of the alleged infringement.

13. Data security

We use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our website is provided via SSL/TLS encryption, recognisable by the padlock symbol in your browser's address bar and the “https://” prefix.

14. Currency and amendment of this privacy policy

This privacy policy is currently valid and dated April 2026.

Due to the further development of our website and offerings, or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed at any time on the website at www.sense5.me.