Privacy policy – Sidemates

This is a courtesy translation. The German version is legally binding.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Sidemates Gbr.

Represented by:
Johannes Klopp, Katharina Hesener and Lorenz Herrmann

Maarortstraße 6
31603 Diepenau

If you have questions about data protection or would like to exercise your rights, you can contact us at any time using the email address above.

2. General information on data processing

Protecting your personal data matters to us. We process personal data exclusively within the framework of the applicable law, in particular the General Data Protection Regulation (GDPR).

Personal data is any data that can be used to identify you personally. This includes, for example, your name, email address, usage data or content you publish on our platform.

3. Hosting and server log files

Our website and platform are hosted by Hostinger International Ltd. The servers are located within the European Union (among others in the Netherlands and Ireland).

When you visit the website, technical data that your browser transmits to the server is recorded automatically. This includes in particular:

IP address (stored only temporarily in server log files)
date and time of access
pages visited
browser type and version
operating system

This data is processed solely to ensure stable and secure operation of the website.

Server log files are generally deleted automatically after seven days at the latest.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the secure operation of the website).

4. Registration and user account

You can create a user account on our platform.

The following personal data is processed in the course of this:

username
email address
password

The password is stored in encrypted form (hashing) and cannot be viewed by us.

In addition, technical timestamps are stored, for example:

time of registration
last sign-in
changes to the user account

This data is required in order to provide you with a user account and to let you use the platform.

Profile photo (optional): you can upload a photo in your profile. This is not required to use the platform. Before uploading, the photo is cropped to a square and reduced in size in your browser; capture data such as location and camera is removed in the process. It is stored with our hosting provider Supabase.

Your profile photo is public: it is displayed next to your username on your reviews and can be retrieved via its address by anyone on the internet, even without a user account. Therefore only upload a photo that you want to show publicly and to which you hold the necessary rights.

You can change or remove the profile photo at any time in your profile under “Settings”. When you remove it, it is deleted from our storage and no longer appears on your reviews. The legal basis for the profile photo is your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time with effect for the future by removing the photo.

Body measurements (optional): under “My measurements” in your profile you can enter body measurements so that we can show you which wheelchairs fit you (“Fits your measurements”). Only the values you enter yourself are processed:

height and body weight
seated hip width, thigh and lower leg length and back height
width of the narrowest door in your home
time of your consent and of the last change

This information may allow conclusions about your health. We therefore only store it with your explicit consent (Art. 9 (2) (a) in conjunction with Art. 6 (1) (a) GDPR). It is kept in your user account with our hosting provider Supabase, can only be accessed by you – our team cannot see it either – and is neither published nor passed on to third parties. The comparison with the wheelchairs runs in your browser.

You can change your measurements at any time under “My measurements” or remove them completely with “Delete measurements”; this withdraws your consent with effect for the future. If you delete your user account, your measurements are deleted automatically.

Legal basis: Art. 6 (1) (b) GDPR (provision of a user account).

5. User content (reviews and wheelchair submissions)

Users can create and publish content on our platform, in particular:

reviews of wheelchairs
star ratings
written reviews
information on how long a wheelchair has been used

This content is displayed publicly on the platform. Your username and, if you have uploaded one, your profile photo are shown next to a review.

Reviews are internally linked to a user account so that they can be managed or deleted. Reviews can be edited and deleted at any time.

Submitting a wheelchair: if a model is missing, you can suggest it to us with product data and photos. The submission is internally linked to your user account. When reviewing it, our team can see your account’s email address in order to ask you questions about your submission. Once approved, only the product data and photos are shown publicly, not your name or your email address.

If you delete your user account, a submitted wheelchair remains as a product entry but is no longer linked to your account.

Legal basis: Art. 6 (1) (b) GDPR (provision of the platform) and Art. 6 (1) (f) GDPR (legitimate interest in providing user reviews and in complete, accurate product data, including follow-up questions about submissions).

6. Possible information about health

In written reviews, users may voluntarily provide information that allows conclusions to be drawn about health limitations or the use of a wheelchair.

Such information is provided by users on a purely voluntary basis. We do not actively request this kind of data.

Users decide for themselves which information they publish and can change or delete their content at any time.

7. Internal platform statistics

We do not use any external analytics tool (such as Google Analytics).

Instead we use an internal statistics system to understand and improve how the platform is used.

The following data is processed in particular:

number of page views
number of visitors
detail views of individual wheelchair models
clicks on individual content
wheelchair models marked as favourites

This data is used internally only and is aggregated or anonymised after a short time. Internally we cannot view individual usage behaviour; we only see aggregated data.

No data is passed on to external analytics providers.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in improving the platform).

8. Contacting us

If you contact us (for example by email or through a contact form), the data you send us is stored in order to process your enquiry.

The following data may be processed in particular:

name
email address
message

The data is stored only for as long as it is required to process your enquiry.

Legal basis: Art. 6 (1) (b) GDPR (processing your enquiry) or Art. 6 (1) (f) GDPR (legitimate interest in communicating with users).

9. Newsletter

If you sign up for our newsletter, your email address is stored.

Sign-up uses a double opt-in procedure. This means you first have to confirm your registration before you receive the newsletter.

You can unsubscribe from the newsletter at any time by sending us a message.

Legal basis: Art. 6 (1) (a) GDPR (consent).

10. Signing in with Google (social login)

You can also sign in using your Google account.

If you use this function, we receive from the provider the information required to create your user account, in particular:

email address
name (if transmitted by the provider)

No further data is taken over without your consent.

Legal basis: Art. 6 (1) (a) GDPR (consent).

11. Use of Google Fonts

This website uses fonts (Google Fonts) to ensure a consistent presentation. They are loaded locally.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a consistent presentation of the website).

12. Cookies

Our website uses technically necessary cookies.

These cookies are required for basic functions of the platform to work, in particular:

sign-in functions
website security
technical settings

No marketing or tracking cookies are used.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the technical functioning of the website).

13. Storage period

We store personal data only for as long as it is required for the respective purpose.

Typical storage periods:

user accounts: until the user deletes the account
profile photos: until the user removes them or deletes the account
body measurements: until the user deletes them or deletes the account
reviews: until the user deletes them
contact enquiries: only as long as required to process them
newsletter data: until you unsubscribe
server log files: generally deleted after seven days at the latest
backups: created regularly and automatically overwritten after a short time

14. Disclosure of data

Your personal data is only passed on to third parties if:

you have expressly consented
this is required by law
this is necessary in order to provide the platform (for example the hosting provider)

15. Data security

We use technical and organisational security measures to protect your data against loss, misuse or unauthorised access.

This includes in particular the encrypted transmission of data (HTTPS).

16. Your rights

You have the right at any time:

to obtain information about the data we have stored about you
to have incorrect data corrected
to have your data deleted
to restrict the processing of your data
to object to the processing of your data
to withdraw your consent at any time

If you would like to exercise one of these rights, you can contact us at any time.

17. Version of this privacy policy

Version: 15 October 2026