Privacy Policy

General Information on Data Processing

We take the protection of your personal data very seriously and treat it confidentially and in accordance with the statutory data protection regulations of the GDPR, the German Federal Data Protection Act (BDSG) and other national data protection laws. In general, our website can be used without providing personal data. Personal data is only processed to the extent necessary to provide our services (e.g. orders, contact, newsletter).

No Use of Cookies

Our website does not use cookies, tracking tools or comparable technologies to create user profiles or analyse behaviour.

Server Log Files

When you visit our website, information is automatically collected by the page provider and stored in server log files. This may include:

browser type and version
operating system used
referrer URL
host name of the accessing computer
time of the server request
IP address

The collection of this data is technically necessary to provide the website (Art. 6 (1) (f) GDPR). This data is not merged with other data sources.

Orders and Data Processing in the Online Shop (Big Cartel)

Our online shop is operated via the Big Cartel service. When you place an order, we process personal data such as:

first and last name
billing and delivery address
email address
payment information (via the respective payment service provider)
order data

Legal basis: Art. 6 (1) (b) GDPR (performance of a contract).

Big Cartel provides the technical shop infrastructure and may process certain data in the course of shop usage. Payment processing, however, is handled by external providers (e.g. Stripe, PayPal) with their own privacy policies. Data processing by Big Cartel is governed by the Big Cartel Privacy Policy. Big Cartel may also store and process data outside the EU. Appropriate safeguards such as standard contractual clauses are in place to ensure an adequate level of data protection.

Further information: Big Cartel Privacy Policy

Payment Service Providers

During payment processing, personal data may be passed on to payment service providers, e.g.:

PayPal
credit card providers

These process the data in accordance with their own privacy policies. Legal basis: Art. 6 (1) (b) GDPR.

Contact

If you contact us by email or via a contact form, we process the data you provide solely to handle your request. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in communication).

If you subscribe to the newsletter, we process:

email address

Legal basis: Art. 6 (1) (a) GDPR (consent). You can withdraw your consent at any time with effect for the future.

Storage Period

We store personal data only for as long as:

it is necessary to fulfil contractual obligations,
statutory retention periods exist (in particular under the German Commercial Code (HGB) and Fiscal Code (AO)),
you have not withdrawn your consent.

Data Sharing

Your data is only shared:

where necessary for the performance of the contract (e.g. shipping providers),
where there is a legal obligation,
where you have expressly consented.

No other data sharing takes place.

Your Rights (GDPR)

You have the following rights:

access to the data stored about you
rectification of inaccurate data
erasure (“right to be forgotten”)
restriction of processing
data portability
objection to certain processing operations
withdrawal of consent given

Please direct any such requests to: Email

Data Security

We use technical and organisational measures to protect your data against loss, misuse, unauthorised access or disclosure.

Changes to this Privacy Policy

We reserve the right to amend this privacy policy to reflect changes in legal requirements or in our services. The current version as published on this website applies.