Privacy Policy

1. General Information and Mandatory Information The protection of your personal data is a matter of great importance to us. We treat your personal data confidentially and in accordance with the statutory data protection regulations (GDPR) and this Privacy Policy. When you use this website, various personal data are collected. This Privacy Policy explains what data we collect, what we use it for, and for what purpose this happens. 2. Controller The data controller responsible for data processing on this website is:

Ulrike Meta Maria Schneider

3. Hosting and Website Provision (Hetzner) We host our online shop on a Virtual Private Server (VPS) provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hereinafter referred to as "Hetzner"). When you visit our website, the web server automatically collects information that your browser transmits to us (so-called server log files). This includes:

IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which access is made (referrer URL)
Browser used and, if applicable, the operating system of your computer

This data is processed based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free presentation, stability, and security of our website. The data is temporarily stored to ensure security after collection and is then automatically deleted. We have concluded a Data Processing Agreement (DPA) with Hetzner in accordance with Art. 28 GDPR. This ensures that Hetzner processes the data of our website visitors strictly according to our instructions and in compliance with the GDPR.

4. Data Collection for Orders in the Online Shop When you order goods in our webshop, we collect the data necessary for the processing of the purchase contract. This includes:

First and last name
Billing and delivery address
Email address
Payment data (depending on the selected payment method)

This data is processed based on Art. 6 (1) (b) GDPR, as it is required for the fulfillment of the contract or to carry out pre-contractual measures. Without this data, we cannot conclude or execute the contract with you. After completion of the contract, your data will be blocked for further use and deleted after expiry of the tax and commercial retention periods (generally 10 years for accounting records), unless you have expressly consented to further use of your data.

5. Transfer of Data to Third Parties (Shipping and Payment) To process your order, we forward your data to selected service providers to the extent necessary:

Shipping Service Providers: For the delivery of the goods, we transfer your name and delivery address to the commissioned transport company (e.g., DHL, DPD, UPS) based on Art. 6 (1) (b) GDPR.

Payment Service Providers: Depending on the selected payment method, we forward the data required for payment to the commissioned credit institution or the selected payment service provider. Processing is based on Art. 6 (1) (b) GDPR.

6. Cookies and Contacting Us

Cookies: Our shop may use technically necessary cookies if necessary to maintain core functions such as the shopping cart or login status during your session. This processing is based on Art. 6 (1) (f) GDPR (legitimate interest in a functioning online shop). You can deactivate cookies in your browser at any time, but this may restrict the functionality of the website.

Contact: If you send us inquiries via email or contact form, your details will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We process this data based on Art. 6 (1) (b) GDPR (if the inquiry is related to a contract) or Art. 6 (1) (f) GDPR (legitimate interest in answering customer inquiries).

7. Your Rights as a Data Subject Under the applicable legal regulations, you have the right at any time to:

Access your personal data stored by us (Art. 15 GDPR)
Rectification of incorrect data (Art. 16 GDPR)
Erasure of your data, provided that no legal retention obligations prevent this (Art. 17 GDPR)
Restriction of processing of your data (Art. 18 GDPR)
Data portability in a structured, commonly used format (Art. 20 GDPR)
Withdrawal of consent given at any time with future effect (Art. 7 (3) GDPR)
Object to the processing of your data based on legitimate interests (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us (Art. 77 GDPR). Back