This Privacy Policy explains how Smart Nanotubes Technologies GmbH, operating the Olfibelle website, reservation flow, and related communications, collects, uses, stores, shares, and protects Personal Data.
Olfibelle is a planned smart home odor and air-pattern monitoring product offered through a refundable reservation flow. This policy applies to visitors, people who reserve Olfibelle, people who contact us, and people who receive Olfibelle updates.
1. Owner and Data Controller
Smart Nanotubes Technologies GmbH
Dresdner Str. 172
01705 Freital
Germany
Owner contact email: sales@smart-nanotubes.com
General company inquiries may also be directed to info@smart-nanotubes.com, if that mailbox remains active on the main company website.
2. Types of Data collected
Among the types of Personal Data that this Application collects, by itself or through third parties, there are: Trackers, Usage Data, device information, number of Users, session statistics, email address, name, phone number, billing address, shipping address, country or region, payment status, reservation status, refund request details, Stripe transaction references, campaign attribution data, consent records, and email preferences.
Complete details on each type of Personal Data collected are provided in the dedicated sections of this Privacy Policy, the Cookie Policy, or by specific explanation texts displayed prior to the Data collection.
Personal Data may be freely provided by the User, or, in the case of Usage Data, collected automatically when using this Application. Unless specified otherwise, Data requested by this Application may be necessary to provide the requested Service, including reservation, payment, refund, shipping communication, support, or legal compliance.
Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.
Users are responsible for any third-party Personal Data obtained, published, or shared through this Application.
3. Olfibellereservation-specific data
For Users who reserve Olfibelle, request updates, request a refund, or interact with Olfibelle-related pages, this Application may also collect:
first and last name
email address
phone number
billing address
shipping address
country or region
payment status
reservation status
refund request details
Stripe transaction reference
product reservation details
shipping-related information required closer to dispatch
campaign attribution data such as UTM source, medium, campaign, content, term, referring URL, landing page, and ad identifiers where available
consent records and email communication preferences.
Payment card data is processed by Stripe. The Owner does not store full payment card numbers on its own servers.
4. Optional information
If we add optional forms or surveys, we may collect information such as home type, pet ownership, EV or e-bike ownership, country, product interest, intended placement of the device, or similar product-preference information. We will make optional fields clear where feasible.
5. We do not want medical or sensitive data
Olfibelle is not a medical device and is not intended to collect or process protected health information, medical records, biometric identifiers, health diagnosis data, or emergency reports. Please do not send us medical information, health information, or emergency information through the website, support channels, refund forms, or reservation forms.
6. Mode and place of processing the Data
Methods of processing
The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.
The Data processing is carried out using computers and IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, Data may be accessible to persons involved with the operation of this Application, including administration, sales, marketing, legal, finance, customer support, and system administration, or external parties such as technical service providers, hosting providers, payment processors, email service providers, analytics providers, advertising platforms, customer support tools, IT companies, and professional advisers appointed, if necessary, as Data Processors by the Owner.
The updated list of these parties may be requested from the Owner at any time.
Place
The Data is processed at the Owner’s operating offices and in any other places where the parties involved in the processing are located. Depending on the User’s location, Data transfers may involve transferring the User’s Data to a country other than their own.
7. Retention time
Unless specified otherwise in this document, Personal Data shall be processed and stored for as long as required by the purpose for which it was collected and may be retained for longer due to applicable legal obligations, regulatory obligations, accounting and tax obligations, dispute handling, fraud prevention, or based on the User’s consent.
8. The purposes of processing
The Data concerning the User is collected to allow the Owner to provide its Service, comply with legal obligations, respond to enforcement requests, protect its rights and interests, detect malicious or fraudulent activity, and perform the following activities: Advertising, Analytics, Interaction with external social networks and platforms, Displaying content from external platforms, Managing contacts and sending messages, processing refundable reservations, managing refunds, payment processing, shipping communication, customer support, and legal recordkeeping.
For Olfibelle reservation-related services, Personal Data is also collected and processed to:
process refundable reservation deposits
confirm the User’s reservation
manage refund and cancellation requests
contact Users about product availability, shipping timelines, and final purchase steps
verify payment status through Stripe
prevent fraudulent reservations, abuse, and payment misuse
attribute reservations to advertising campaigns
measure Meta, TikTok, and Google advertising performance
maintain tax, accounting, and legal records
send product updates where the User has consented or where permitted by law.
9. Detailed information on the processing of Personal Data
Advertising
This type of service allows User Data to be utilized for advertising communication, advertising measurement, conversion tracking, retargeting, and campaign attribution purposes. These services may use Trackers to identify Users or may use behavioral retargeting techniques. Users may learn how to opt out of interest-based advertising through the Cookie Policy, Cookie Settings, and, where applicable, the Your Privacy Choices page.
Meta Pixel
Meta Pixel is an advertising and conversion tracking service provided by Meta Platforms, Inc. or Meta Platforms Ireland Limited, depending on the User’s location. It allows the Owner to measure advertising performance, understand actions taken on this Application, and create or measure advertising audiences where permitted by law.
Personal Data processed: Trackers, Usage Data, device information, event data, IP address, page views, and reservation-related conversion events.
Place of processing: United States, Ireland, and other countries where Meta operates.
TikTok Pixel
TikTok Pixel is an advertising and conversion tracking service provided by TikTok Technology Limited, TikTok Information Technologies UK Limited, TikTok Inc., or other TikTok group entities depending on the User’s location. It allows the Owner to measure advertising performance and understand whether Users interact with this Application after seeing or clicking TikTok advertisements.
Personal Data processed: Trackers, Usage Data, device information, event data, IP address, page views, and reservation-related conversion events.
Place of processing: United States, Ireland, United Kingdom, Singapore, and other countries where TikTok operates.
LinkedIn conversion tracking (LinkedIn Insight Tag)
If enabled, LinkedIn conversion tracking is an analytics and behavioral targeting service that connects data from the LinkedIn advertising network with actions performed on this Application.
Personal Data processed: device information, Trackers, Usage Data.
Place of processing: United States and other countries where LinkedIn operates.
Analytics
The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.
Google Analytics 4
Google Analytics 4 is a web analysis service provided by Google LLC. Google utilizes the Data collected to track and examine use of this Application, prepare reports on its activities, and share them with other Google services where configured. In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server.
Personal Data processed: number of Users, session statistics, Trackers, Usage Data, device information, approximate location, and event data.
Place of processing: United States and other countries where Google operates.
Vercel Analytics
Vercel Analytics is an analytics service used to understand website performance and page usage. It may collect technical and usage information such as page views, browser type, device information, approximate location, and performance metrics.
Personal Data processed: Usage Data, device information, approximate location, and page performance data.
Place of processing: United States and other countries where Vercel or its subprocessors operate.
PostHog
PostHog is a product analytics service used to understand how Users interact with this Application, improve the reservation flow, detect errors, and analyze conversion performance.
Personal Data processed: Usage Data, device information, session information, event data, page interactions, email address or user identifier if configured by the Owner.
Place of processing: United States, European Union, or other countries depending on the selected PostHog hosting configuration.
Payment processing
Stripe is a payment processing service provided by Stripe, Inc. or its relevant regional affiliate. Stripe allows this Application to process refundable reservation payments, manage payment confirmations, support refund requests, and prevent fraud.
Personal Data processed: name, email address, phone number, billing address, shipping address, country, payment information, transaction identifiers, device information, Usage Data, and Trackers.
Place of processing: United States and other countries where Stripe operates.
Managing contacts and sending messages
This type of service makes it possible to manage a database of email contacts, phone contacts, or other contact information to communicate with the User. These services may collect data concerning the date and time when the message was viewed by the User and when the User interacted with it, such as by clicking on links included in the message.
We may use an email service provider such as Mailchimp, SendGrid, Customer.io, Brevo, HubSpot, or another provider selected by the Owner. The live provider should be named on the final website once selected.
Personal Data processed: email address, name, phone number if used, Trackers, Usage Data, email engagement data, consent status, unsubscribe status.
Displaying content from external platforms
This type of service allows Users to view content hosted on external platforms directly from the pages of this Application and interact with them. This type of service may still collect web traffic data for the pages where the service is installed, even when Users do not use it.
If YouTube video widgets, YouTube IFrame Player, or similar embedded content is used, Google may process device information, Trackers, and Usage Data according to its policies.
Interaction with external social networks and platforms
This type of service allows interaction with social networks or other external platforms directly from the pages of this Application. The interaction and information obtained through this Application are always subject to the User’s privacy settings for each social network.
If Facebook, Instagram, LinkedIn, TikTok, X, or other social widgets are used, those platforms may process Trackers, Usage Data, device information, and interaction data according to their policies.
10. Cookie Policy
This Application uses Trackers. To learn more, Users may consult the Cookie Policy and Cookie Settings page.
11. Legal basis of processing
The Owner may process Personal Data relating to Users if one of the following applies:
Users have given their consent for one or more specific purposes
provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations
processing is necessary for compliance with a legal obligation to which the Owner is subject
processing is related to a task carried out in the public interest or in the exercise of official authority vested in the Owner
processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.
12. International data transfers
We are based in Germany and may use service providers located in other countries, including the United States. Where Personal Data is transferred outside the EEA, UK, or Switzerland, we rely on appropriate safeguards where required, such as adequacy decisions, standard contractual clauses, data processing agreements, or other lawful transfer mechanisms.
13. The rights of Users based on the General Data Protection Regulation (GDPR)
Users may exercise certain rights regarding their Data processed by the Owner, to the extent permitted by law, including the right to:
withdraw consent at any time
object to processing of their Data
access their Data
verify and seek rectification
restrict processing of their Data
have their Personal Data deleted or otherwise removed
receive their Data and have it transferred to another controller
lodge a complaint before their competent data protection authority
learn about the legal basis for Data transfers abroad and the safeguards used.
Details about the right to object to processing
Where Personal Data is processed for public interest, official authority, or legitimate interests, Users may object to such processing by providing a ground related to their particular situation. Where the User’s Personal Data is processed for direct marketing purposes, Users can object at any time, free of charge and without providing any justification. Where the User objects to direct marketing, the Personal Data will no longer be processed for such purposes.
How to exercise these rights
Any requests to exercise User rights can be directed to sales@smart-nanotubes.com. Such requests are free of charge and will be answered by the Owner as early as possible and always within one month where GDPR applies, subject to lawful extensions and identity verification where necessary.
14. California and US state privacy rights
California and certain US state residents may have rights to know, access, delete, correct, and opt out of sale, sharing, targeted advertising, or profiling. We provide a separate California Privacy Notice and Your Privacy Choices page.
We do not sell Personal Data for money. However, some advertising and analytics activities may be considered sale, sharing, targeted advertising, or cross-context behavioral advertising under certain US state privacy laws. Users can opt out through our Your Privacy Choices page and Cookie Settings.
15. Children
This Application and the Olfibelle reservation service are intended for adults. The Owner does not knowingly collect Personal Data from children under 13 in the United States or from children under the age at which parental consent is required under applicable EU, UK, or local law. If a parent or guardian believes that a child has provided Personal Data through this Application, they may contact sales@smart-nanotubes.com and request deletion.
16. Health, medical, and emergency information
Olfibelle is not a medical device and is not intended to collect, process, diagnose, treat, prevent, or monitor any medical condition. Users should not submit medical records, health information, emergency reports, or protected health information through this Application.
The Owner does not intend to act as a healthcare provider, health plan, healthcare clearinghouse, or business associate under HIPAA. This Application is not designed to process protected health information.
17. Additional information about Data collection and processing
Legal action
The User’s Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of this Application or the related Services. The User acknowledges that the Owner may be required to reveal Personal Data upon request of public authorities.
System logs and maintenance
For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application, called System logs, or use other Personal Data such as the IP address for this purpose.
Information not contained in this policy
More details concerning the collection or processing of Personal Data may be requested from the Owner at any time. Please see the contact information at the beginning of this document.
18. Security
We use reasonable technical and organizational measures to protect Personal Data. No internet service is completely secure. Users should use care when sharing information online.
19. Automated decision-making
We do not use Personal Data to make decisions that produce legal or similarly significant effects about Users based solely on automated processing.
20. Changes to this Privacy Policy
The Owner reserves the right to make changes to this Privacy Policy at any time by notifying Users on this page and, where technically and legally feasible, by sending a notice through contact information available to the Owner. Should changes affect processing activities performed on the basis of consent, the Owner shall collect new consent from the User where required.
21. Definitions and legal references
Legal information: This policy relates solely to this Application, unless stated otherwise.
Latest update: 6 May 2026