1. Data Controller
The controller responsible for the processing of personal data on this website is:
JIT TECHNOLOGIES SRL
Brand: Frescopunk
Via Rigardara 39
47853 Coriano (RN)
Italia
Email: management@jit-technologies.it
Phone: +39 33 474 20477
2. General Information on Data Processing
We process personal data only to the extent necessary to operate our website, handle enquiries, process orders and provide our services, or where you have consented to further processing.
Processing is carried out in particular on the basis of Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract and pre-contractual measures), Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(f) GDPR (legitimate interests).
3. Website and E-Commerce Platform Odoo
We use Odoo to operate our website and online shop. Odoo provides, in particular, our website, product presentation, customer accounts, shopping carts, order processing and parts of our customer communication.
The following personal data may be processed in particular:
IP address and technical connection data
browser and device information
usage and session data
name and contact details
billing and delivery address
customer account and login data
shopping cart and order data
communication data
Where processing is necessary to provide and securely operate the website, it is carried out on the basis of Art. 6(1)(f) GDPR.
Where processing is necessary to fulfil an order, create a customer account or provide a service requested by you, it is carried out on the basis of Art. 6(1)(b) GDPR.
Provider:
Odoo S.A.
Chaussée de Namur 40
1367 Grand-Rosière
Belgium
4. Server Log Data
When you access our website, technically necessary information is processed. This may include your IP address, date and time of access, pages and files accessed, browser type, operating system, referrer URL and technical status and error information.
This data is processed in order to provide the website technically, ensure its stability and security, and detect technical errors or abusive access.
The legal basis is Art. 6(1)(f) GDPR.
5. Cookies and Similar Technologies
Our website uses only technically necessary cookies and similar technologies. They provide the functions of our website and online shop that you use: the session, including the login and the shopping cart, the language setting and, on our payment pages, the secure payment.
Our website sets these cookies:
session_id: your session, including the login and the shopping cart (7 days)
frontend_lang: the language that you chose (1 year)
tz: the time zone of your browser, so that times show in your local time (until you close the browser)
On our payment pages, our payment service provider Stripe (see section 8) sets these cookies to process the payment securely and to prevent fraud:
__stripe_mid: recognizes your browser to prevent fraud (1 year)
__stripe_sid: identifies your visit to the payment page to prevent fraud (30 minutes)
m on the domain m.stripe.com: prevents fraud (400 days)
__cf_bm on the domain hcaptcha.com: tells people from automated programs (bots) for the service hCaptcha, which Stripe uses (30 minutes)
Our website also stores these values in the storage of your browser:
presence.lastPresence and presence.focus: the time of your last activity and whether a tab of our website is in the foreground; your open tabs share these values for the live connection to our server (local storage, until you delete your browser data)
website_sale_cart_quantity: the number of products in your shopping cart, for the cart icon (session storage, until you close the tab)
tiles_sample_quantity: the number of samples in your sample list, for the sample icon (session storage, until you close the tab)
Storing this information on your device and reading it requires no consent, because it is strictly necessary to provide the service that you have explicitly requested (§ 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). For this reason there is no cookie banner and there are no cookie settings.
We use no cookies for analysis or marketing. Our web analytics with PostHog works without cookies (see section 13).
6. Customer Account
If you create a customer account, we process the data you provide in order to create and manage your account and provide the associated functions.
This may include, in particular, your name, address, email address, telephone number, order information and, for business customers, company information.
The legal basis is Art. 6(1)(b) GDPR.
The data is generally stored for as long as your customer account exists. Statutory retention obligations remain unaffected.
7. Orders and Contract Processing
When you order products through our website, we process the data required to process your order and fulfil the contract. This may include in particular:
name
billing and delivery address
email address
telephone number
products ordered
order and invoice data
payment information
delivery and shipping information
The data is processed to handle your order, process payment, arrange delivery, issue invoices and handle any returns or complaints.
The legal basis is Art. 6(1)(b) GDPR. Where statutory retention obligations apply, further storage is based on Art. 6(1)(c) GDPR.
8. Payment Processing with Stripe
We use Stripe to process online payments.
When you make a payment via Stripe, the data required to process the payment is transferred to Stripe. This may include your name, email address, billing address, payment and transaction data, order amount, currency, IP address and technical information.
The transfer is necessary to process your chosen payment method and is therefore based on Art. 6(1)(b) GDPR.
Stripe also processes certain data under its own responsibility as a data controller, in particular for payment processing, fraud prevention, compliance with regulatory obligations and ensuring the security of payment transactions.
Stripe operates internationally. Personal data may therefore also be processed outside the European Economic Area. According to Stripe, the required legal transfer mechanisms and appropriate safeguards are used for such processing.
Further information about data processing by Stripe can be found in Stripe's Privacy Policy.
9. Shipping and Delivery
To deliver your order, we transfer the data required for delivery to the logistics and transport companies used by us.
This includes, in particular, your name, delivery address and, where necessary for delivery, your telephone number, email address and delivery information.
The legal basis is Art. 6(1)(b) GDPR.
10. Contacting Us
If you contact us by email, contact form, telephone or by other means, we process the data you provide in order to handle your enquiry.
Where your enquiry relates to an existing or potential contractual relationship, processing is carried out on the basis of Art. 6(1)(b) GDPR.
In other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is to handle enquiries and communicate with customers and interested parties.
11. Sample Orders
If you order samples or sample packs through our website, we process the contact, delivery and, where applicable, payment details provided by you in order to process and deliver your sample order.
The legal basis is Art. 6(1)(b) GDPR.
12. Newsletter
We use Odoo's email marketing functions to send our newsletter.
If you subscribe to our newsletter, we process your email address and, where applicable, your name and other information voluntarily provided by you for the purpose of sending the newsletter.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
Where required by law, we use a confirmation procedure (double opt-in). The time of registration and confirmation as well as technical information may be recorded in order to demonstrate that valid consent has been given.
You may withdraw your consent at any time with effect for the future. Every newsletter contains an unsubscribe link for this purpose.
After you unsubscribe, your email address may be stored on a suppression list where necessary to ensure that you no longer receive newsletters and to demonstrate compliance with legal requirements.
13. Web Analytics with PostHog
To understand how visitors use this website and to improve it, we use the web analytics service PostHog. On this website, PostHog works without cookies: it stores no information on your device and reads none from it.
When you open a page, your browser transmits technical data to PostHog, e.g. the page address, the referring page, the browser type and language, the operating system, the screen size, the time of access and which links and buttons you click. PostHog counts visitors with a privacy-preserving hash that it computes on its servers. It removes your IP address before any further processing and does not store it. We do not use this data to identify you, and we do not combine it with other data.
Recipient: PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA. The data is processed on servers in the European Union (Frankfurt, Germany). PostHog processes the data on our behalf as a processor under a data processing agreement pursuant to Art. 28 GDPR.
The legal basis is our legitimate interest in analysing and improving our website (Art. 6(1)(f) GDPR). You can object to this processing at any time (Art. 21 GDPR).
For more information, see PostHog's privacy policy:
14. Business Statistics (PostHog)
To measure and steer our business, and to report aggregate figures to investors and partners, we send data about orders, invoices, newsletter and launch sign-ups and withdrawals to PostHog (see section 13).
The data comprises amounts, product kinds, dates, the first two digits of the postal code (for an address outside Germany, the country), whether you order as a private person or as a business, whether an order is your first and whether you ordered samples before, your choices at checkout (installation and delivery to the installer), the laid area in square metres and, for a launch sign-up, the product.
Before the data leaves our servers, we replace your identity with a code that only we can compute with a secret key. The data contains no name, no email address, no postal address and no IP address. We do not combine it with the web analytics data of section 13.
The legal basis is our legitimate interest in the economic steering and financing of our company (Art. 6(1)(f) GDPR).
PostHog keeps the data for as long as our plan keeps product analytics data, and never longer than we keep the underlying records.
You can object to this processing at any time under Art. 21 GDPR by email to the address in section 1. We then stop sending your data and delete your pseudonymous profile at PostHog.
15. Configurator Previews
On the pages of our configurable products, you can create a preview image of your tile design. For this, we send the description that your selections produce (colors, slider positions and the free text that you enter, at most 60 characters) and our reference images to the service OpenRouter. OpenRouter forwards the request to the provider of the image model that we select, currently Google. We send no IP address and no other data that identifies you. Please do not enter personal data in the free text field.
Recipient: OpenRouter, Inc., USA, which forwards the request to the model provider. The data is transferred to the USA on the basis of standard contractual clauses of the European Commission (Art. 46 GDPR).
We store your selections and the preview image on our server for at most 30 days, to show the same preview again without a new request. To limit the number of requests per IP address against misuse, we store a keyed hash of the IP address instead of the address itself and delete it within two days.
To monitor the quality, the cost and the errors of this service, we send a record of each request to PostHog (see section 13): the description with your selections, links to the images on our server, the model, the duration and the cost. The record contains no IP address and nothing that identifies you. PostHog deletes the description and the links after 30 days and keeps only the remaining data, such as the model, the duration and the cost.
The legal basis for the preview is your request (Art. 6(1)(b) GDPR). The legal basis for storing the keyed hash of the IP address and for the monitoring is our legitimate interest in a reliable service that is protected against misuse (Art. 6(1)(f) GDPR).
For more information, see OpenRouter's privacy policy:
16. Generative AI
The preview images on the pages of our configurable products are not photos. An image model creates them with generative artificial intelligence (AI) from the description that your selections produce and from our reference images. The fired tile can differ from the preview.
We select the image model per product and reach it through the service OpenRouter (see section 15).
We currently use these models; the part before the slash names the provider of the model:
google/gemini-3-pro-image-preview
google/gemini-nano-banana-2.1
The file of every preview image that the model creates carries a machine-readable mark, which identifies it as generated by AI: the IPTC digital source type "trainedAlgorithmicMedia" or the content credentials (C2PA) that the provider of the model adds.
We send your selections to the model as part of the description, and only to create the preview (see section 15). When you add a configured product to the cart, the order keeps your selections, the description and the preview image. We keep them as part of the order for as long as we keep the order itself.
On our server, we keep the description and the preview image of a request for at most 30 days; PostHog deletes the description and the links to the images after 30 days (see section 15).
The legal basis for keeping these data with the order is the performance of the contract (Art. 6(1)(b) GDPR).
17. Showroom Map (OpenStreetMap)
Our showroom page loads map tiles directly from the servers of the OpenStreetMap Foundation to show our showroom locations. This transmits your IP address and browser data to the recipient.
Recipient: OpenStreetMap Foundation, St John's Innovation Centre, Cambridge, United Kingdom.
The legal basis is our legitimate interest in displaying our showroom locations (Art. 6(1)(f) GDPR).
For more information, see the OpenStreetMap Foundation's privacy policy:
https://osmfoundation.org/wiki/Privacy_Policy
18. Launch Notification Sign-Up
When you sign up via the form on our home page, we process your email address for the following purposes:
to inform you about the launch of our offering;
to contact you about our products.
The legal basis is your consent (Art. 6(1)(a) GDPR).
Double opt-in: after submitting, you receive an email with a confirmation link. Your sign-up only becomes effective once you click that link, and only then do we process your address for the stated purposes. If you do not confirm, we delete the sign-up after no more than 7 days.
To document your consent, we store the consent text shown, the time of sign-up and confirmation, and the IP address used in each case.
Withdrawal: you can withdraw your consent at any time with effect for the future, e.g. by email to the address in section 1. The lawfulness of processing carried out until withdrawal remains unaffected.
19. Notification of Availability
If a product variant is not available at the moment, you can ask on its product page to be notified by email when it is available again. For this, we store your email address as a contact in our customer database (Odoo) and link it to the variant.
As soon as the variant is available again, we send you one email and remove the link to the variant; the contact stays in our customer database. We use your request only to send this notification.
The legal basis is your request (Art. 6(1)(b) GDPR). You can withdraw the request at any time by email to the address in section 1.
20. Withdrawal Function
When you withdraw from a contract with the function "Withdraw from contract", we process your name, the order number, your email address, the items and message you enter, the time of receipt and your IP address. We use them to handle your withdrawal, to confirm its receipt and to protect the function against misuse.
The legal basis is our legal obligation to provide the withdrawal function and to confirm its receipt (Art. 6(1)(c) GDPR in conjunction with § 356a of the German Civil Code).
For a tile order, we pass your declaration to the installer who sold the tiles and to the distributor Elements; for a sample order, to the service agency that ships the samples.
We delete your IP address within two days. We keep the other data as long as the statutory retention and limitation periods require.
21. Orders Through an Installer
For a delivery address in Germany, we do not sell the tiles ourselves. The seller is an installer (a specialist tiling business) who covers the postal code of the delivery address; we only arrange the order.
For this, we pass your name, the billing and delivery address, your email address and telephone number, the ordered products and your choices at checkout (installation and delivery to the installer) to that installer. The installer processes these data as the seller under their own responsibility.
You pay the installer: the payment runs through Stripe (see section 8) on the installer's own Stripe account. We issue the invoice in the name of the installer and send it to you and to the installer.
To deliver the tiles, we pass the products and the delivery address to the distributor Elements.
The legal basis is the performance of the contract and of pre-contractual measures (Art. 6(1)(b) GDPR). We keep the order and the invoice for as long as the statutory retention periods require (Art. 6(1)(c) GDPR).
22. Recipients of Personal Data
As part of our business activities, personal data may in particular be transferred to the following categories of recipients:
Odoo as the provider of our website, e-commerce and newsletter infrastructure
Stripe for payment processing
PostHog for web analytics, business statistics and the monitoring of the configurator previews
OpenRouter and the provider of the image model for the configurator previews
the OpenStreetMap Foundation for the showroom map
hosting and IT service providers
logistics and transport companies
installers as the sellers of orders in Germany
the distributor Elements for the delivery of the tiles
the service agency that ships the samples
tax advisers, auditors and other professional advisers
authorities and public bodies where required by law
Service providers that process personal data on our behalf are contractually bound in accordance with applicable legal requirements.
23. Data Transfers to Third Countries
Some of the service providers we use may process personal data outside the European Union or European Economic Area.
Such transfers take place only where the applicable legal requirements are met. This may include, in particular, an adequacy decision by the European Commission or appropriate safeguards such as the European Commission's Standard Contractual Clauses.
24. Data Retention
We generally store personal data only for as long as necessary for the respective purpose of processing.
Data may also be retained where statutory retention or documentation obligations apply or where storage is necessary for the establishment, exercise or defence of legal claims.
Once the respective purpose no longer applies and applicable retention periods have expired, the data is deleted or anonymised.
25. Your Rights
Subject to the applicable legal requirements, you have in particular the right to:
request information about the personal data we process about you;
request the correction of inaccurate or incomplete data;
request the deletion of your personal data;
request restriction of processing;
object to the processing of your personal data;
request your data in a structured, commonly used and machine-readable format where the legal requirements for data portability are met;
withdraw your consent at any time with effect for the future.
Where processing is based on Art. 6(1)(f) GDPR, you have the right, subject to the applicable legal requirements, to object to the processing on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you may object to such processing at any time.
26. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority regarding the processing of your personal data.
This right applies in particular with the supervisory authority of your habitual residence, your place of work or the place of the alleged infringement.
27. Data Security
We implement appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other unlawful processing.
Our security measures are reviewed and adapted in line with technological developments and the respective risks.
28. Changes to this Privacy Policy
We may update this Privacy Policy if our website, the services we use or the applicable legal requirements change.
The current version published on this website applies.
Last updated: October 2026