Privacy
Privacy policy
Information on how we process your personal data under the GDPR. The German version (Datenschutzerklärung) is legally binding.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Computer Nation
Owner: Erdwin-Denis Sfircioc
Ob Dem Tal 4
79848 Bonndorf im Schwarzwald
Germany
Email: support@computer-nation.com
Phone: +49 15510 784292
2. General information on data processing
We process personal data of our customers and website visitors only to the extent necessary to provide our services (IT and device repair, appointment booking, repair order status tracking) and to fulfil legal obligations. Depending on the processing, the legal bases are Art. 6(1)(a) (consent), (b) (performance of a contract or pre-contractual measures), (c) (legal obligation, e.g. under the German Commercial Code (HGB) and Fiscal Code (AO)) and (f) (legitimate interest) GDPR.
3. Contact form
When you contact us via the contact form on our website, we collect the following data: name, email address, phone number and the content of your request.
Purpose: processing and answering your request.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measure) or Art. 6(1)(f) GDPR (legitimate interest in answering requests).
Retention: data submitted via the contact form is automatically deleted from the admin panel and the database if no contract or repair order results from it within 6 months. If the request leads to a repair order, the retention periods in sections 5–7 apply.
4. Appointments / online booking
When you request an appointment via our booking form, we collect your name, contact details (email and/or phone number), the requested date and, where applicable, details about your request.
Purpose: organising and confirming the appointment.
Legal basis: Art. 6(1)(b) GDPR.
Retention: the data is stored in the admin panel and the database for 6 months and then deleted automatically if the appointment did not take place or did not result in a repair order. If the appointment becomes an order, the retention periods in sections 5–7 apply.
5. Customer register
As part of order processing, we store the following customer data: name, address, phone number, email address, postal code, city.
Purpose: performance of the contract, invoicing, communication about the repair order.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (legal obligation to retain business records).
Retention: once the data results in a completed order or an invoice, we are legally required to retain it — under § 257 HGB and § 147 AO for up to 8 years (commercial and tax retention period for accounting records and business correspondence). Early deletion during this period is not legally permitted, even at the request of the data subject (Art. 17(3)(b) GDPR).
6. Technical register
In the technical register we record device-related data when accepting and processing a repair order: device information, device intake details, results of the technical inspection and, where applicable, a damage statement.
Purpose: documentation of the repair process, proof of the device condition at intake, basis for the cost estimate and the repair.
Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR (legitimate interest in documentation and preservation of evidence, e.g. in warranty cases).
Retention: this data is an integral part of the respective repair order and is subject to the same statutory retention periods as described in section 5 (up to 8 years under § 257 HGB / § 147 AO).
7. Order register (CLT-TAG / SV-TAG)
To clearly link customer and device, we use an internal labelling system: CLT-TAG (client tag, identifies the customer) and SV-TAG (service tag, identifies the device or order). These identifiers link the customer register, the technical register and the respective order status.
The tags are noted on the device intake receipt (handover record) that the customer receives when handing over the device.
Purpose: clear, data-minimising assignment of the order and status lookup.
Legal basis: Art. 6(1)(b) GDPR.
Access: the order status can only be retrieved online using the individual CLT-TAG/SV-TAG, which is communicated exclusively to the respective customer on the intake receipt. Third parties cannot access it without knowing this identifier.
Retention: as described in sections 5 and 6 (up to 8 years for completed orders).
8. Recipients of data
Your data is only transferred to third parties where this is necessary for the performance of the contract:
- Hosting provider of the website and the database: Five Host EU (server location within the European Union).
- Shipping and logistics providers when devices are returned by post: Deutsche Post / DHL, Hermes and DPD.
No payments are processed via the website. Payments are made exclusively by bank transfer or in cash on site; therefore no payment data is transmitted to payment service providers via the website.
9. Cookies and website analytics
This website only uses technically necessary cookies (session cookies that protect the forms against abuse / CSRF protection). No analytics, tracking or social media tools and no tracking pixels are used. A cookie banner is therefore not required.
To measure reach, only anonymised, aggregated visit figures are collected (e.g. number of visits and country of origin). Your IP address is not stored; it is only processed to derive the country and an anonymous identifier that changes daily. It is not possible to identify you personally.
10. Rights of data subjects
You have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR), unless a statutory retention obligation applies
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to withdraw consent given (Art. 7(3) GDPR)
11. Right to object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR (legitimate interest). We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
12. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The competent authority is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Königstraße 10a
70173 Stuttgart
13. Data security
We use technical and organisational measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties.
14. Changes to this privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. The version current at the time of your visit applies.
Last updated: 15.08.2026