Privacy policy

Controller

[Firma fehlt]

[Inhaber fehlt]

[Straße fehlt]

[PLZ/Ort fehlt]

Email: [E-Mail fehlt]

What we process

When you visit the site. Our server processes technically necessary data such as IP address, time and requested address. The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in secure operation.

When you order. We process your name, delivery address, email address, the phone number you may choose to give, the items ordered and the payment method. The legal basis is Art. 6(1)(b) GDPR — performance of the purchase contract.

Age confirmation. We record that you confirmed being of age. The legal basis is Art. 6(1)(c) GDPR.

Cookies

We only use technically necessary cookies:

• pc_sid — recognises your session and protects forms against misuse
• pc_wk — links your cart to you
• pc_admin — for shop administration only

These cookies expire after 30 days at the latest. We use no cookies for advertising, analytics or tracking. That is why there is no cookie banner here.

Sharing with third parties

For delivery we pass your name and address to the shipping company. If you pay through a payment provider, the data needed for processing is transmitted there. No further sharing takes place.

Hosting

The site runs on a server in Germany, operated on our behalf.

Retention

We keep order data for as long as commercial and tax law requires — usually up to ten years. After that we delete it. Carts without an order are deleted after 30 days at the latest.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Write to [E-Mail fehlt].

You may also lodge a complaint with a data protection supervisory authority.

Note: This English version is provided for convenience. In case of doubt the German version applies.