Privacy policy

[Company name / full name], [Street and number], [Postcode City]
Email: [Email address]

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit the site, technically necessary data (IP address, date/time, requested page, browser and operating system information) is processed to deliver and secure the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). Transfers to the USA rely on the EU-US Data Privacy Framework adequacy decision or standard contractual clauses.

When you place an order we redirect you to Stripe Checkout. Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin, Ireland, processes the data required for payment (name, email, shipping and billing address, payment details, order contents) as an independent controller or on our behalf. Payment details never reach our servers. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). More information: stripe.com/privacy.

We receive your order data from Stripe (name, email, shipping address, order contents, amount) and use it to process and ship your order. Statutory retention periods (e.g. 6 to 10 years for accounting records under German commercial and tax law) remain unaffected (Art. 6(1)(c) GDPR).

Incoming orders and waitlist sign-ups (name, email, and where applicable shipping address and order contents) are forwarded to us internally via a Telegram bot. The data is transmitted through the servers of Telegram Messenger Inc. or its group companies. The legal basis is Art. 6(1)(b) or (f) GDPR (efficient order processing).

If you contact us by email, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer required.

We store your language choice in your browser's local storage (localStorage). This is necessary for the language switch to work (§ 25(2) TDDDG). We currently do not use tracking cookies. Note: before analytics or marketing tools (e.g. Google Analytics, PostHog, Meta Pixel) are added, consent (a cookie banner) must be obtained and this policy updated.

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw any consent at any time with effect for the future. Contact [Email address] for this. You also have the right to lodge a complaint with a data protection supervisory authority.