Privacy Policy
1. Controller
The controller responsible for data processing on this website is the operator named in the imprint. For any privacy-related questions, you can reach us using the contact details provided in the imprint.
2. Hosting
This website is hosted by an external provider. The host processes server log files on our behalf (including IP address, date and time of access, page requested). The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). Where the host processes data outside the EU (e.g. the USA), this is done on the basis of appropriate safeguards (EU Standard Contractual Clauses).
3. Contact Form
If you send us inquiries via the contact form, your details (name, email address, phone number if provided, message) are stored in order to process the request. The legal basis is Art. 6(1)(b) GDPR (initiation/performance of a contract) or (f) GDPR (handling of inquiries). The data is deleted once it is no longer required to achieve the purpose and no statutory retention obligations apply.
4. Payment Processing
To process payments we use the payment service provider Stripe (Stripe Payments Europe, Ltd., Ireland) and, where applicable, PayPal. When you make a purchase, the data required for payment (e.g. name, email address, payment details) is transmitted to the respective payment provider. Payment details (e.g. card or bank account data) are processed exclusively by the payment provider; we have no access to them. The legal basis is Art. 6(1)(b) GDPR.
5. Cookies
This website only uses technically necessary cookies or comparable technologies required for operation. Cookies from the payment providers may be set for payment processing. Tracking or analytics services for marketing purposes are not used without your consent.
6. Your Rights
You have the right at any time to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and a right to object (Art. 21). You also have the right to lodge a complaint with a data protection supervisory authority.