Privacy

Controller
Artur Bechtgold
Theresienstraße 8
90762 Fürth
Germany
kontakt@superdrinks.vip

Providing the website

This website is provided through Cloudflare Workers and Static Assets. Cloudflare processes technically necessary connection data, such as IP address, timestamp, requested address and browser information, to deliver and secure the website. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is the secure and reliable provision of this project.

The provider is Cloudflare, Inc. Information about potential transfers outside the EU or EEA and the safeguards provided can be found in the Cloudflare Privacy Policy and the Cloudflare Data Processing Addendum.

First-500 registration and blend interest

You can register once for WorldSuperDrinks and express non-binding interest in one or more blends. Your selection means you could imagine buying the blend later or taking part in a free product test if one is offered. It is not an order, reservation or promise of a free product.

Your name, email address, selected blends, page language, source page and consent timestamp are stored. Phone numbers and shipping addresses are not collected. An email address counts only once toward the shared goal of 500, but may be associated with confirmed interest in several blends at the same time.

Only aggregate values are shown publicly, particularly the total number of confirmed registrations and the number of interested people per blend. Because multiple choices are allowed, blend counts are not percentages of a shared vote pool. Names and email addresses are not shown publicly.

Registration is not an order or preorder. These forms do not collect payment, cart, checkout or order data during this phase.

After submitting the form, you receive a verification email. The link opens a confirmation page; your registration and selected blend interests become active only when you use its confirmation button. This also confirms that you control the given email address and have consented to receive emails about product development, possible product tests, product progress and launch. Merely opening or automatically scanning a link does not confirm consent.

The legal basis for registration, blend interests and these email updates is your consent under Article 6(1)(a) GDPR. The consent timestamp, verification timestamp, consent version and source page are stored as evidence. You can withdraw your consent at any time for the future through the unsubscribe link in registration emails or by contacting the address above. On the unsubscribe page, withdrawal takes place only when you use the confirmation button. This does not affect the lawfulness of processing before withdrawal.

Entries are stored on the server in a SQLite-based Cloudflare Durable Object. Unconfirmed registrations count toward neither the public goal of 500 nor the blend interest counts. Verification links are valid for 24 hours; expired, unconfirmed registrations from the current form are cleaned up during the next form processing operation. Confirmed registrations are processed for the project information described above while that purpose continues and your consent remains valid. Withdrawing through the unsubscribe link deletes the associated registration, pending registrations and blend interests. The information must also be deleted when the project ends or its purpose no longer applies, unless statutory retention obligations require otherwise.

Missbrauchsschutz: Public First-500 forms require server-side validation, a honeypot check, request limits and a fully configured Cloudflare Turnstile check. Without this configuration, registration remains disabled. Cloudflare processes technically necessary connection and verification data for this purpose. For request limits, the Worker creates SHA-256 fingerprints from the connection IP address and email address; the rate-limit storage contains no plain-text IP address. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is protection against spam and abuse.

Email delivery: Registration and confirmation emails are sent through Cloudflare Email Service. The service processes the information required for delivery. After successful confirmation, the project controller receives a notification. Messages may be stored in the email inboxes involved; their retention depends on the respective processing purpose and statutory obligations.

Legacy data from earlier prototype versions: If blend-specific interests, discount tiers or a Berry Atlas sample request were stored through older test forms, those records may still technically exist. The currently visible First-500 forms do not collect discount tiers or sample shipping addresses.

Your rights

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. For privacy enquiries, contact the controller at the address above. You may also lodge a complaint with a data protection supervisory authority, particularly where you live or work or where the alleged infringement occurred.

Language, analytics and tracking

The page language is determined by the requested address. Your language choice is not stored in cookies or local browser storage. This website uses no analytics or advertising tracking services.