Privacy Policy

1. Controller

2. Your Rights

Under the GDPR you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

3. Collection and Storage of Personal Data

3.1 When Visiting the Website

When you visit our website, the following information is automatically recorded:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest)

Storage period: 7 days

3.2 Cookies

Our website uses exclusively technically necessary cookies. These are required for:

• Shopping cart function
• Session management
• Security-related functions

You can delete cookies in your browser at any time or refuse their storage.

4. Contacting Us

When you contact us by e-mail or contact form, we store:

• Name and company
• E-mail address
• Phone number (optional)
• Content of your message

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures)

Storage period: Until your enquiry has been fully processed, thereafter 6 months for any follow-up questions.

5. Order Processing

For order processing we collect:

• First and last name
• Delivery address
• E-mail address
• Phone number
• Payment information (encrypted via payment provider)

Legal basis: Art. 6 (1) (b) GDPR (performance of a contract)

Storage period: Statutory retention periods (10 years pursuant to the German Commercial Code, HGB)

6. Disclosure of Data

We only disclose your data if:

• You have expressly consented
• This is necessary for the performance of the contract (e.g. shipping service provider)
• There is a legal obligation to do so

Payment Providers

We use the following payment service providers:

• Stripe: Stripe Payments Europe Ltd., Dublin, Ireland (card payment incl. Apple Pay / Google Pay)

7. Data Security

We employ technical and organisational security measures:

• SSL/TLS encryption for all data transmissions
• Regular security updates
• Access restrictions
• Regular backups

8. Newsletter (if activated)

For sending the newsletter, we store your e-mail address using the double opt-in procedure.

Legal basis: Art. 6 (1) (a) GDPR (consent)

You can unsubscribe at any time. An unsubscribe link is included in every newsletter e-mail.

9. No Automated Decision-Making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority: