Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

2. Order data processing

When you place an order in our shop, we process the data you provide (name, address, email address, phone number if given, and order details) solely to process your order. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Your data will be deleted once it is no longer required for contract processing and no statutory retention obligations apply (e.g. tax and commercial law retention periods of 6 or 10 years).

3. Contact form and email

If you contact us via the contact form or by email, we process your information to handle your enquiry (Art. 6(1)(b) and (f) GDPR). We do not share this data without your consent.

4. Hosting and server log files

This website is hosted by Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). When you visit the site, Cloudflare processes technically necessary data (e.g. IP address, date and time of access, page requested, browser type) to deliver the website securely and reliably (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework, and Standard Contractual Clauses under Art. 46 GDPR are also in place.

5. Cookies and local storage

We do not use tracking or marketing cookies, nor any analytics services. For the shopping cart function, the items you select are stored solely locally in your browser (localStorage). This data does not leave your browser until you place an order.

6. Data sharing

To deliver your order, we share the necessary shipping data (name, delivery address) with the courier responsible for delivery. We do not share your data with any other third parties.

7. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing (Art. 21 GDPR). Simply contact us at [email protected].

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Saxon Data Protection and Transparency Commissioner (Sächsischer Datenschutz- und Transparenzbeauftragter), Devrientstraße 5, 01067 Dresden, Germany. Where you are located in the United Kingdom, we also aim to comply with the UK GDPR and the Data Protection Act 2018.