Not original USM Haller parts, but 100% compatible. We have no business relationship with USM Haller.
en

Privacy policy

Last updated: 29 September 2026

Thank you for visiting. Below we explain which personal data we process when you use modula24.com, our 3D configurator and our live chat or place an order with us, for which purposes and on which legal basis.

1. Controller

Modula24
Playing Field Road
Mong Kok
Kowloon
Hong Kong
Email: service@modula24.com

For questions about data protection or to exercise your rights, simply send an email to this address.

2. Hosting and server logs

Our website is operated by an external hosting provider in a data centre in the Netherlands. With every request, the server automatically stores: IP address, date and time, the address requested, the amount of data transferred, the previously visited page (referrer) and browser and operating system. We need these logs for secure and stable operation (defending against attacks, troubleshooting) and delete them after 14 days. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). Where the provider processes data in a country outside the EU, this is based on appropriate safeguards under Art. 46 GDPR.

3. Cloudflare

Access to modula24.com runs through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare protects the website against attacks, speeds up delivery and processes your IP address and the technical data of your request for this purpose. Cloudflare also determines your country from the IP address; we only use it to suggest currency and delivery country. The legal basis is Art. 6(1)(f) GDPR. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission).

4. Storage in your browser (technically necessary)

To make the shop work, we store some information in your browser's local storage (localStorage/sessionStorage): shopping cart, language, currency, delivery country and chosen shipping method, your entries in the checkout during the ordering process, an entered discount code, your sign-in to “My orders” and your cookie choice. This data stays in your browser and is not used for advertising. It is strictly necessary for the service you request; further processing is based on Art. 6(1)(b) and (f) GDPR. You can delete this data at any time in your browser settings.

5. Cookies and consent

We only set advertising cookies from Google if you choose “OK” in the bar at the bottom of the screen (Art. 6(1)(a) GDPR). Without your consent, the Google service is not loaded at all. You can change or withdraw your choice at any time via the “Cookie settings” link in the footer of every page; this does not affect the lawfulness of processing carried out before the withdrawal.

6. Google Ads (conversion tracking and remarketing)

With your consent, we use Google Ads by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). This lets us measure whether visitors view products, search, add items to the cart, go to checkout or make a purchase after clicking one of our ads, and show relevant ads to visitors of our website. Cookies are set (e.g. “_gcl_au”, stored for up to 90 days) and, among other things, your IP address, device and browser information, the pages visited, search terms, the items viewed or purchased and, for a purchase, the order number and order value are transmitted to Google.

Enhanced conversions: When you make a purchase, we also transmit your email address, phone number, name and address to Google – already made unrecognisable in your browser using a hash method (SHA-256) – so that Google can attribute the purchase to an ad click.

The legal basis is your consent (Art. 6(1)(a) GDPR). Google may also transfer data to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. More information: policies.google.com/privacy.

7. Orders

When you place an order, we process the details from the checkout: name, company and VAT ID if applicable, delivery and billing address, email address, phone number, the items ordered, the chosen shipping method, a redeemed discount code and the payment method and status. We need this data to conclude and perform the purchase contract, to inform you about your order and to be able to reach you with questions about the delivery (Art. 6(1)(b) GDPR). Without this information we cannot accept your order. After the order has been completed, we keep the data for as long as statutory retention obligations, in particular under commercial and tax law, apply (Art. 6(1)(c) GDPR).

We send order confirmations and other emails about your order via an external email service provider that processes the data on our behalf (Art. 28 GDPR).

8. Payment service providers

Payments are handled by specialised payment service providers, to whom we transmit the data required for payment (order number, amount, currency and, where applicable, name, email address and address). The legal basis is Art. 6(1)(b) GDPR.

  • PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. Privacy notice: paypal.com.
  • Credit card, Apple Pay, Google Pay: Airwallex (Hong Kong) Limited, Hong Kong. You enter your card details directly into a form provided by Airwallex; we do not receive them. For Apple Pay or Google Pay, the privacy terms of Apple or Google also apply. The transfer to Hong Kong is necessary for the performance of the contract (Art. 49(1)(b) GDPR). Privacy notice: airwallex.com.

9. Shipping

For delivery, we pass on your name, your delivery address and, where necessary for delivery or customs clearance, your phone number and email address as well as details of the shipment to the shipping company (Art. 6(1)(b) GDPR):

  • Goods from our warehouse in Hamburg: DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany).
  • Goods from our warehouse in China: 4PX Worldwide Express Co., Ltd., Shenzhen, China, and the carriers it engages. The transfer to China is necessary for the performance of the contract (Art. 49(1)(b) GDPR).

10. “My orders”

Under “My orders” you can view your previous orders. To do so, we send a one-time code to your email address; after signing in, your browser stores a sign-in key. There is no password. The legal basis is Art. 6(1)(b) GDPR.

11. Live chat

Our live chat runs on our own server. We process your messages and any images you send, an email address for our reply (optional), the page from which you are writing, your language and your IP address (to protect against misuse). Our team is notified by email of new messages. Chats with no new messages for 30 days are deleted automatically, including uploaded images. Chats that we remove as completed are kept in an internal archive for as long as we need them to follow up on your request; we delete them immediately on request. The legal basis is Art. 6(1)(b) GDPR (enquiries about products and orders) or Art. 6(1)(f) GDPR (legitimate interest in answering enquiries quickly).

AI assistant: An AI assistant may give first answers in the chat as long as no staff member has replied. For this, the chat history and the page you are on are transmitted via OpenRouter, Inc. (USA) to a provider of an AI language model. We only allow providers that do not store the data or use it for training. Your IP address is not transmitted. If you give an order number together with the order's email address in the chat, the assistant receives the status, items and amounts of this order to answer your question – no address and no phone number. The assistant does not make decisions with legal effect; only our team makes binding commitments. The transfer to the USA is based on appropriate safeguards under Art. 46 GDPR.

12. 3D configurator

Our 3D configurator (konfigurator.modula24.com) runs on our own server. When you save a configuration, we store it under a random ID so that you can retrieve, share or order it later – without your IP address or any other personal details. We keep saved configurations indefinitely; on request we delete a configuration (please state the ID). To prevent mass saving, we keep your IP address for one hour and then delete it. The legal basis is Art. 6(1)(b) and (f) GDPR.

Google Fonts: The configurator loads the “Inter” font from Google Fonts (Google Ireland Limited). Your IP address is transmitted to Google in the process. The legal basis is Art. 6(1)(f) GDPR (consistent, easily readable presentation). More information: policies.google.com/privacy.

AI preview: Only if you use the “Real preview” function is an image of your configuration transmitted to Replicate, Inc. (USA) to create a realistic preview image. No other personal data is transmitted. The legal basis is Art. 6(1)(b) GDPR; the transfer to the USA is based on appropriate safeguards under Art. 46 GDPR.

13. Your rights

You have the right to access the data we hold about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence or place of work (Art. 77 GDPR).

14. Automated decisions

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

15. Changes

We update this privacy policy when our website, our services or the legal situation change. The version published here applies.