0

Privacy Policy

Information about the processing of your personal data under Art. 13 GDPR

1. Controller

The controller responsible for data processing on this website is
Email: [email protected]

You can find further information in our Legal Notice. We have not appointed a data protection officer, as we are not legally required to do so. If you have any questions about data protection, you can reach us at the email address above.

2. Overview

We take the protection of your personal data seriously. Personal data is any information that can be used to identify you personally, such as your name, address, email address or IP address.

We process your data only insofar as this is necessary to provide the website, process your orders, respond to your inquiries or comply with legal obligations. The legal basis is the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG).

3. Your rights

You have the right at any time:

  • to access the data we store about you (Art. 15 GDPR),
  • to have inaccurate data corrected (Art. 16 GDPR),
  • to have your data erased (Art. 17 GDPR), unless statutory retention obligations prevent this,
  • to restrict processing (Art. 18 GDPR),
  • to data portability (Art. 20 GDPR),
  • to withdraw consent you have given, with effect for the future (Art. 7(3) GDPR),
  • to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

Right to object (Art. 21 GDPR): If we process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation.

To exercise your rights, simply send an informal message to [email protected].

4. Hosting

This website is hosted by [Name und Anschrift des Hosting-Anbieters]. When you visit our website, the resulting data is processed on the host's servers. The legal basis is a data processing agreement under Art. 28 GDPR. Processing is based on Art. 6(1)(f) GDPR; our legitimate interest is to provide our online shop securely and reliably.

5. Server log files

Each time you access our website, the server automatically stores information transmitted by your browser:

  • IP address
  • Date and time of the request
  • Page or file accessed
  • Referrer URL (previously visited page)
  • Browser type and version, operating system

This data is used to ensure the security and stability of the website, for example to defend against attacks. The legal basis is Art. 6(1)(f) GDPR. Log files are deleted after no more than 14 days unless they are needed for longer to investigate a security incident.

6. SSL/TLS encryption

For security reasons, this website uses SSL or TLS encryption. You can identify an encrypted connection by the lock icon and „https://“ in your browser's address bar. Data you send us, such as order or payment details, cannot then be read by third parties.

7. Cookies

We use only technically necessary cookies. They are required for the online shop to function, for example to save the contents of your shopping cart, keep you signed in to your customer account and complete the ordering process. These include, in particular, the WooCommerce cookies „woocommerce_cart_hash“, „woocommerce_items_in_cart“, „wp_woocommerce_session_*“ and the WordPress login cookies.

The legal basis is § 25(2) No. 2 TDDDG in conjunction with Art. 6(1)(b) and (f) GDPR. Consent is not required for technically necessary cookies. Shopping cart cookies are deleted after no more than 48 hours or when the session ends. You can delete or block cookies in your browser at any time; however, the shop will then only be usable to a limited extent.

8. Orders and customer account

When you place an order with us, we process the data required to fulfil the purchase contract: name, billing and delivery address, email address, telephone number if applicable, products ordered and payment information. The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

If you create a customer account, we also store your data in that account so that you can complete future orders more quickly and view your order history. You can have your customer account deleted at any time; simply send us a brief message.

We retain order and invoice data for up to ten years to comply with commercial and tax law requirements (§ 147 AO, § 257 HGB). It is then deleted.

9. Shipping

To deliver your order, we share your name and delivery address with the shipping company commissioned to handle the delivery. We only share your email address if you have expressly consented to this, so that the shipping provider can notify you about delivery. The legal basis is Art. 6(1)(b) GDPR or, for sharing your email address, Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

Shipping providers used: [e.g. DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn]

10. Payment Processing

To process payment for your order, we share the data required for this purpose with the payment provider you selected. Payment methods and providers used: [e.g. advance payment / bank transfer, name of payment provider].

This information is shared solely for payment processing on the basis of Art. 6(1)(b) GDPR. The payment provider’s own privacy policy applies to its processing of your data.

11. Contact Form and Email

When you send us an inquiry via the contact form, we process the information you provide (name, email address, optional address, and the content of your inquiry) to respond to your inquiry. The legal basis is Art. 6(1)(b) GDPR if your inquiry relates to a contract; otherwise, it is your consent under Art. 6(1)(a) GDPR, which you give by ticking the checkbox in the form.

We use FormSubmit (formsubmit.co) to send messages submitted via the form. Your entries are forwarded to our email inbox via FormSubmit’s servers. This may involve transferring data to countries outside the EU, particularly the USA. For more information, see FormSubmit’s privacy policy at formsubmit.co.

We receive and send our emails using Proton Mail (Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland). The European Commission has adopted an adequacy decision for Switzerland.

We delete your inquiry once it has been fully processed and there are no statutory retention obligations, generally no later than two years afterward.

12. Google Fonts

This website uses so-called Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to ensure consistent font display. When you visit a page, your browser loads the required fonts directly from Google’s servers. Your IP address is transmitted to Google; a transfer to the USA is possible. Google is certified under the EU-US Data Privacy Framework.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is to present our online services consistently and attractively. For more information: policies.google.com/privacy.

13. Disclosure of Data

We only disclose your data to third parties when necessary to perform a contract (shipping, payment), when we are legally required to do so, or when you have given your consent. We do not sell your data. We do not use analytics, tracking, or advertising tools.

14. Data Security

We take appropriate technical and organizational measures to protect your data from loss, misuse, and unauthorized access. These include encrypted transmission, access restrictions, and regular system updates.

15. Changes to This Privacy Policy

We update this privacy policy if our website, service providers, or the law changes. The version published on this page is the one that applies.

As of: October 2026