Privacy Policy (Datenschutzerklärung)

PRIVACY POLICY

Controller

The controller responsible for data processing on this website is:

[Company Legal Name]

[Street and Number]

[Postal Code, City], Germany

Email: [email]

Phone: [phone]

General Information

We take the protection of your personal data seriously. We process your data in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This policy explains what data we collect, how we use it, and the rights you have.

Your Rights

You have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent at any time (Art. 7 (3) GDPR)
Right to lodge a complaint with a supervisory authority(Art. 77 GDPR)

To exercise these rights, contact us using the details above.

Legal Bases for Processing

We process personal data on the following legal bases:

Purpose	Data Processed	Legal Basis
Processing your order	Name, address, email, order details	Art. 6 (1)(b) GDPR (contract performance)
Payment processing	Payment data via Stripe / PayPal	Art. 6 (1)(b) GDPR
Shipping	Name, address, contact details	Art. 6 (1)(b) GDPR
Customer account	Login data, order history	Art. 6 (1)(b) GDPR
Statutory retention	Invoices, tax-relevant documents	Art. 6 (1)(c) GDPR (legal obligation)
Newsletter	Email address	Art. 6 (1)(a) GDPR (consent)
Analytics (Google Analytics 4)	Usage data, IP (anonymized), cookies	Art. 6 (1)(a) GDPR (consent)
Cookie consent management	Consent records (Complianz)	Art. 6 (1)(c) GDPR (legal obligation)
Fraud prevention & website security	Technical / log data	Art. 6 (1)(f) GDPR (legitimate interest)

Server Log Files

Our hosting provider automatically collects and stores information that your browser transmits to us in server log files:

browser type and version, operating system, referrer URL, hostname, time of the request, and IP address. This data is not merged with other data sources. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in the secure and stable operation of the website).

Cookies and Consent Management

Our website uses cookies. Cookies that are not technically necessary are only set after you have given consent through our consent banner (Complianz). You can change or withdraw your consent at any time via the cookie settings link on our website.

The legal basis for non-essential cookies is Art. 6 (1)(a) GDPR and § 25 (1) TDDDG.

Payment Providers

For payment processing we use:

Stripe — Stripe Payments Europe Ltd., Ireland.

PayPal — PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.

When you choose one of these methods, the data required for payment is transmitted to the respective provider.

Legal basis:

Art. 6 (1)(b) GDPR.

Google Analytics 4

With your consent, we use Google Analytics 4, a service provided by Google Ireland Ltd. Google Analytics uses cookies to analyze how visitors use our website. IP anonymization is enabled. Data may be transferred to servers operated by Google LLC in the USA, based on the EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses. Legal basis: Art. 6 (1)(a) GDPR (consent).

You can withdraw your consent at any time via the cookie settings.

Data Retention

We store personal data only as long as necessary for the stated purposes or as required by statutory retention periods (e.g. up to 10 years for tax-relevant documents under German law).

Data Transfers Outside the EU

Where data is transferred to countries outside the EU/EEA, we ensure an adequate level of protection through adequacy decisions or EU Standard Contractual Clauses.

Changes to this Policy

We may update this privacy policy to reflect changes in our services or legal requirements. The current version is always available on this page.

Last updated: [date]