Privacy & your data
GDPR compliant commercetools demos record a visit when you give your email at the demo’s gate. Everything recorded is stored in the EU and erasable at any time, by you, from this page.
See, download or erase your data
Enter the email address you used. We send a link to it, so only the owner of the address can open its data.
The address is used only to send that link and is not stored.
Who is responsible
commercetools GmbH, Adams-Lehmann-Str. 44, 80797 Munich, Germany, is the controller. Contact privacy@commercetools.com; our data protection officer is reachable the same way. This page covers Demo Tracker, the service behind the access gate on commercetools demo sites. The commercetools privacy policy covers everything else.
What is recorded, and why
| Data | When | Why |
|---|---|---|
| Your email address and the company domain in it | You enter it at a demo’s gate, where it is optional | To know who looked at the demo, so the commercetools team can follow up |
| The pages you view, searches and actions in the demo, with times | While you use a demo you gave your email on | To learn which parts of a demo are useful |
| Your browser’s user-agent string | With each recorded visit | To tell people from automated traffic |
| An email you sign in to the demo storefront with | Only if you sign in to the demo shop itself | To show the demo’s customer features working |
Without an email, the gate still lets you in and nothing about you is stored. The tracker counts how many people get through each demo’s gate per day and how many of them gave an email: a bare number per demo per day, with nothing that identifies anyone. IP addresses are never stored. The legal basis is your consent (GDPR Art. 6(1)(a)); you can withdraw it at any time by erasing your data here, which does not affect anything done before.
One cookie, dt_session, keeps you through the gate for up to six months. It is strictly necessary for access and records whether your visit is recorded.
If you work at commercetools and use the Demo Tracker admin, it also records each demo you open from it as a visit, and keeps your account, preferences, recently opened demos, demos you own and conversations with its assistant, to run the tool you use (Art. 6(1)(f)). The same rights below apply.
Where it is kept, and for how long
- In the EU. Google Cloud, region europe-west1 (Belgium): the database, its backups, the service’s logs and an analytics copy in BigQuery that holds no email addresses.
- 1 year after your last visit, then deleted automatically.
- Logs 30 days; they hold no visitor email or IP address. Backups 30 days, and an erasure is re-applied if one is ever restored.
Processors acting for commercetools: Google Cloud (hosting, database, logs, analytics), Netlify (hosts the demo sites; your gate submission passes through it) and Resend (sends the link this page emails you). Where a processor handles data outside the EU, it does so under the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
Your rights
You can ask for access to your data, a copy of it in a portable format, its correction or erasure, restriction of its use, or object to it. The form above handles access, download and erasure on the spot; for anything else email privacy@commercetools.com. You may also complain to a supervisory authority — for commercetools, the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany — or to the one where you live.