This is a translation for convenience. The German Datenschutzerklärung is the legally binding version.
1. Controller
[Company name]
[Street and number]
[Postcode] [City]
Email: [email protected]
2. Visiting the site
Our server logs access data on every request: IP address, date and time, page requested, volume transferred, browser type and operating system. The legal basis is our legitimate interest in running the shop securely (Art. 6(1)(f) GDPR). Logs are deleted after [number] days.
3. Cookies and session
We use strictly necessary cookies that hold your session, basket, chosen language and delivery country. Checkout does not work without them, so they are set without consent under § 25(2) TDDDG.
4. Orders and customer account
To process an order we handle your name, billing and delivery address, email address and the order itself, on the basis of contract performance (Art. 6(1)(b) GDPR). Invoice data is retained for six to ten years as required by German commercial and tax law.
5. Payments
Card payments are processed by Stripe Payments Europe, Ltd., Dublin, Ireland. You enter card details directly with Stripe; we receive only the payment result, never full card numbers.
6. Shipping
We pass your delivery address to the carrier [carrier] so the parcel can be delivered (Art. 6(1)(b) GDPR).
7. Order emails
Order confirmations and status messages go to the address you provide. They are part of performing the contract, not marketing.
8. Search
Product search runs on our own infrastructure. Search terms are not passed to third parties.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Consent can be withdrawn at any time with future effect. Write to [email protected].
You may also lodge a complaint with a data protection supervisory authority, usually the one where you live or [competent authority].
Last updated: [date]