Privacy Policy

1. Data Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Jan Kramer

56368 Katzenelnbogen

Germany

Email: serique@outlook.de

2. General Information on Data Processing

We generally process personal data of our customers only to the extent necessary to provide a functional website and our content and services.

The processing of personal data is carried out in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

The legal bases for processing include in particular:

Art. 6(1)(a) GDPR – consent
Art. 6(1)(b) GDPR – performance of a contract and pre-contractual measures
Art. 6(1)(c) GDPR – compliance with a legal obligation
Art. 6(1)(f) GDPR – legitimate interests

3. Hosting and Shop System – Shopify

Our online store is operated using the Shopify platform.

The provider is:

Shopify International Limited

Victoria Buildings

2nd Floor

1–2 Haddington Road

Dublin 4, D04 XN32

Ireland

When you visit or make a purchase from our online store, Shopify processes personal data on our behalf, including in particular:

IP address, date and time of access, browser type and version, operating system and server log data
Order and customer data such as name, address, email address, telephone number, products ordered and payment information

Shopify acts as a data processor on our behalf in accordance with Art. 28 GDPR.

Processing is carried out on the basis of Art. 6(1)(b) GDPR for the performance of contracts and Art. 6(1)(f) GDPR based on our legitimate interest in the secure and efficient operation of our online store.

Personal data may also be transferred to Shopify Inc. in Canada and to servers located in the United States.

The European Commission has issued an adequacy decision for Canada. Transfers to the United States are carried out on the basis of EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

Further information can be found in Shopify's Privacy Policy.

4. Collection and Processing of Data When Placing an Order

To process your order, we collect and process the following information:

Name and address, including billing and shipping address
Email address
Telephone number, where applicable
Order information such as products, prices and order date
Payment information depending on the selected payment method

Processing is carried out for the performance of the purchase contract pursuant to Art. 6(1)(b) GDPR.

After completion of the contract, your data will be restricted from further use and deleted after the expiry of applicable tax and commercial retention periods, unless you have expressly consented to further use of your data.

5. Disclosure to Shipping Providers

To deliver your order, we provide your name, shipping address and, where necessary for delivery, your email address or telephone number to the shipping company responsible for delivering your order, for example DHL, Deutsche Post or Hermes.

The legal basis for this processing is Art. 6(1)(b) GDPR.

6. Payment Providers

During the payment process, your payment information is transmitted directly to the respective payment provider.

We do not store complete payment information such as full credit card numbers ourselves.

The legal basis for this processing is Art. 6(1)(b) GDPR.

Shopify Payments – Credit and Debit Cards, Apple Pay, Google Pay and Shop Pay

Card payments and express payment methods are processed through Shopify Payments. The provider is Shopify International Limited as described above. Technical service providers may include Stripe.

When using Apple Pay or Google Pay, the respective privacy policies of Apple and Google also apply.

When using Shop Pay, your payment and address details may be stored by Shopify to make future checkout processes faster.

PayPal

When paying via PayPal, your payment information is transmitted to:

PayPal (Europe) S.à r.l. et Cie, S.C.A.

22–24 Boulevard Royal

L-2449 Luxembourg

PayPal's own privacy policy also applies.

7. Cookies and Consent Management

Our website uses cookies. Cookies are small text files stored on your device.

Strictly necessary cookies, for example cookies required for the shopping cart, login functions and securing the checkout process, are used on the basis of Art. 6(1)(f) GDPR in conjunction with Section 25(2) TDDDG.

Without these cookies, certain functions of the online store cannot operate properly.

Optional cookies, for example for analytics or marketing purposes, are only used with your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

We obtain your consent through our cookie banner.

You may withdraw your consent at any time with effect for the future by reopening the cookie settings on our website.

8. Contact by Contact Form or Email

If you contact us through our contact form or by email, we process the information you provide, such as:

Name
Email address
Telephone number, where applicable
Content of your message

We process this information to respond to your request.

The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract. In all other cases, processing is based on Art. 6(1)(f) GDPR and our legitimate interest in responding to customer inquiries.

Your information will be deleted once your request has been fully processed, unless statutory retention requirements apply.

9. Newsletter

You may subscribe to our newsletter through our website.

To subscribe, we require your email address.

Registration takes place using a double opt-in procedure. After registering, you will receive an email containing a confirmation link. Your subscription becomes effective only after you click this link.

The legal basis for processing is your consent pursuant to Art. 6(1)(a) GDPR.

The newsletter is sent using Shopify's newsletter service, Shopify Email. The provider is Shopify International Limited as described in Section 3.

You may unsubscribe from the newsletter at any time by using the unsubscribe link included at the bottom of every newsletter or by contacting us directly.

After unsubscribing, your email address will be removed from the newsletter distribution list, subject to any legal retention requirements.

10. Your Rights

You have the following rights regarding your personal data:

Right of access – Art. 15 GDPR
Right to rectification – Art. 16 GDPR
Right to erasure – Art. 17 GDPR
Right to restriction of processing – Art. 18 GDPR
Right to data portability – Art. 20 GDPR
Right to object to processing – Art. 21 GDPR

Right to Object

Where we process your personal data on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you may object to such processing at any time for reasons arising from your particular situation.

Withdrawal of Consent

You may withdraw consent you have previously provided at any time with effect for the future, for example by unsubscribing from the newsletter or changing your cookie settings.

To exercise your rights, you may contact us using the contact details provided above.

Right to Lodge a Complaint

You also have the right to lodge a complaint with a data protection supervisory authority.

The competent authority is generally the supervisory authority at your usual place of residence or at our place of business.

For Rhineland-Palatinate:

The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate

Hintere Bleiche 34

55116 Mainz

Germany

11. Storage Period

Unless otherwise specified in this Privacy Policy, we retain personal data only for as long as necessary for the respective purposes.

Statutory retention obligations, particularly under German commercial and tax law, remain unaffected.

12. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential information, such as orders and inquiries, this website uses SSL/TLS encryption.

You can recognize an encrypted connection by the lock symbol in your browser's address bar and by the fact that the website address begins with “https://”.