The protection of your personal data is important to us. We process your data in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and this Privacy Policy.
1. Controller
2. Categories of Data, Purposes & Legal Bases
What data do we collect?
-
Order and customer data (name, address, e-mail, telephone)
-
Payment and billing data (e.g. transaction ID, payment status; we do not store full card details)
-
Communication data (support requests, e-mails)
-
Usage/technical data (IP address, browser data, timestamps, cookies)
For what purpose & on what legal basis?
-
Contract fulfilment, delivery, customer service (Art. 6 (1)(b) GDPR)
-
Legal obligations (e.g. tax/commercial law) (Art. 6 (1)(c) GDPR)
-
Legitimate interests (operation/security of the website, fraud prevention, statistics) (Art. 6 (1)(f) GDPR)
-
Consent (e.g. newsletters, marketing/analytics cookies) (Art. 6 (1)(a) GDPR)
3. Recipients & Processors
We only disclose data where necessary, e.g. to:
-
Shipping service providers (delivery)
-
Payment services (e.g. PayPal, Stripe – their privacy policies apply)
-
IT/hosting/e-mail providers (operation of our systems)
Data processing agreements are in place with processors in accordance with Art. 28 GDPR.
4. Transfers to Third Countries
Where services are used in third countries (outside the EU/EEA), this is based on adequacy decisions, EU Commission standard contractual clauses, or your consent.
5. Cookies, Consent Banner & Tracking
We use technically necessary cookies (e.g. for basket/checkout).
Optional cookies (e.g. statistics/marketing) are only set with your consent via our consent banner.
6. Payments
Payments are processed via external payment services (e.g. PayPal, Stripe). We transmit the data necessary for processing to the respective providers.
7. Storage Period
-
Contract/billing data: in accordance with statutory retention periods (generally 6–10 years)
-
Support communication: until the request has been resolved
-
Cookies: until expiry or withdrawal of consent
8. Your Rights (Art. 15–21 GDPR)
You have the right to access, rectification, erasure, restriction, data portability, and objection.
You may withdraw consent at any time.
Contact: [email protected]
You also have the right to lodge a complaint with a data protection supervisory authority, e.g. in Berlin:
Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany.
9. Security
We use technical and organisational measures (e.g. encryption, access restrictions, backups) to protect your data against misuse.
10. Obligation to Provide Data
The information required for orders is contractually necessary. Without this data we cannot fulfil the contract.
11. Protection of Minors
Our services are not directed at persons under 16 years of age.
12. Automated Decisions
We do not make exclusively automated decisions with legal effect.
13. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy as necessary. The version published on this page shall apply.