Privacy policy
1. Controller
The controller responsible for data processing on this website is PAN21.com International LLC, 7533 South Center View CT, STE R, West Jordan, UT 84084, USA, represented by Harald Linhart. Email: dsgvo@pan21.com, phone: +49 30 5684450-0.
2. Hosting
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel processes technically necessary data such as your IP address, date and time, the page requested, the referrer and browser information (server log files) in order to deliver the website and protect it against misuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). We have concluded a data processing agreement with Vercel; transfers of data to the USA are based on the EU Standard Contractual Clauses.
3. Cookies
This website does not set any cookies for analytics or advertising purposes. If you reach the shop via a partner link containing a referral code, this code is stored in the cookie pan21_ref for 30 days so that an order can be attributed to the referring partner (Art. 6(1)(f) GDPR, legitimate interest in attributing referrals).
4. Visitor counting with PAN21counter
To count page views, we use our own visitor counter PAN21counter (pan21counter.de). It does not set cookies and does not create user profiles. When a page is requested, a shortened hash value that changes daily is derived from the IP address to avoid counting the same visitor more than once per day; the IP address itself is not stored. Individual page views are deleted after three days; after that, only aggregated daily figures remain. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in simple reach measurement).
5. Advertising banners
Advertising banners are delivered via our own ad server ads.pan21.com. Your IP address is necessarily processed in order to deliver the banner; no user profiles are created. The legal basis is Art. 6(1)(f) GDPR.
6. Orders and payments
When you order in the shop, we process the data required to perform the contract (e.g. email address, the product chosen, payment status and the information needed to provide the service ordered). The legal basis is Art. 6(1)(b) GDPR; we retain invoice and order data in line with statutory retention obligations (Art. 6(1)(c) GDPR).
Payments are processed by Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). The data required for the payment is transmitted to Stripe; Stripe does not pass your card details on to us. The legal basis is Art. 6(1)(b) GDPR.
If you pay with EUROPAN credit, your email address and PIN are transmitted to the EUROPAN account system (noble-limited.com) to check your balance and debit the amount. The legal basis is Art. 6(1)(b) GDPR.
7. Contact form and email
If you write to us via the contact form or by email, we process the information you provide (e.g. name, email address, phone number, message) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR. The data is deleted as soon as it is no longer needed and no statutory retention obligations apply. Emails (contact enquiries and order confirmations) are sent via Resend (Resend Inc., USA) on the basis of a data processing agreement and the EU Standard Contractual Clauses.
8. Newsletter
We use beehiiv (Beehiiv Inc., USA) for our newsletter. When you subscribe, your email address and sign-up data are stored by beehiiv. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link.
9. AI chat and voice call
The AI chat and voice call are only loaded once you actively start them. Your input or your voice is then transmitted to the provider in order to conduct the conversation. The legal basis is Art. 6(1)(b) or (f) GDPR.
10. Fonts
The fonts on this website are loaded locally from our own server. No connection is made to servers of Google or other font providers.
11. Embedded content
This website embeds banners and widgets from partner sites (e.g. firmenkauf.org, ffa-links.de, swiss-quality.de, german-quality.net). When this content is loaded, your IP address is necessarily transmitted to the respective server.
12. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. Please send any requests to dsgvo@pan21.com.
Status: October 2026