Privacy Policy
Last updated:
Draft — company details will be completed before launch.
1. Controller
[Company legal name], [Street, City, Postal code, Country], e-mail [email protected], is responsible for the processing of personal data on this website.
2. Visiting the website
This website does not use cookies, analytics, advertising pixels or external fonts. Our hosting provider Cloudflare, Inc. processes technical data (IP address, time, requested page, browser) to deliver the website and protect it against attacks (legitimate interest, Art. 6(1)(f) GDPR); Cloudflare acts as our processor. Your shopping bag is stored only in your own browser (local storage) and is not sent to us until you check out.
3. Orders and payment
When you check out, you are redirected to Stripe, which collects your name, e-mail, delivery address, phone number and payment details on our behalf to process payment and fraud prevention, and sends you a payment receipt by e-mail. We receive your order and contact details, but never your full card details. Providing your name, e-mail, delivery address, phone number (used only for the carrier’s delivery notifications and to contact you about the delivery) and payment details is necessary to conclude and perform the contract; without them we cannot accept your order. To prevent fraud, Stripe may automatically assess and decline a payment; you can contact us to have such a decision reviewed. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and legal obligations such as tax records (Art. 6(1)(c) GDPR). Stripe Payments Europe Ltd., Dublin, Ireland, acts as an independent controller for certain payment data; see stripe.com/privacy. The Stripe checkout page is operated by Stripe and may use Stripe’s own strictly necessary cookies for security and fraud prevention.
4. Shipping
To deliver your order we pass your name, address and, where required, phone number or e-mail to the carrier.
5. E-mail
After your payment we send you an order confirmation by e-mail (performance of the contract, Art. 6(1)(b) GDPR). We send it via the e-mail service Resend (Resend, Inc.), which processes your name, e-mail address, delivery address and order details on our behalf as our processor, in its EU region. If you write to us, we use your message only to answer it. We do not send newsletters without your separate consent.
6. Retention
Order and invoice data are kept as long as required by tax and accounting law (generally up to 10 years). Other data is deleted once it is no longer needed.
7. International transfers
Some service providers (Cloudflare, Stripe, Resend) may process data outside the EU. Such transfers rely on the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses.
8. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a data protection supervisory authority, in particular the one in your country of habitual residence. To exercise your rights, write to [email protected].