Privacy Policy

1. Privacy at a glance

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations (in particular the GDPR and the German Federal Data Protection Act, BDSG) as well as this privacy policy. Below we inform you about which data we process, when and for what purpose.

2. Controller

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

3. Legal bases for processing

Insofar as we obtain consent for processing operations, Art. 6 (1) (a) GDPR serves as the legal basis. When processing to fulfil a contract or to carry out pre-contractual measures, Art. 6 (1) (b) GDPR is the legal basis. To fulfil a legal obligation, Art. 6 (1) (c) GDPR applies. To safeguard our legitimate interests, we process data on the basis of Art. 6 (1) (f) GDPR.

4. Hosting

This website is hosted by Shopify. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”). When you visit our website, Shopify records various log files including your IP address. For details, please refer to Shopify's privacy policy: https://www.shopify.com/legal/privacy.

The use of Shopify is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in presenting our website as reliably as possible. Insofar as corresponding consent was requested, processing takes place exclusively on the basis of Art. 6 (1) (a) GDPR; the consent can be revoked at any time.

We have concluded a data processing agreement (DPA) with Shopify. This is a contract required under data protection law that ensures Shopify processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are in particular: browser type and browser version, operating system used, referrer URL, host name of the accessing computer, time of the server request and the IP address. This data is not merged with other data sources. The collection is based on Art. 6 (1) (f) GDPR for the purpose of the technically error-free and secure operation of the website.

5. Cookies

Our website uses technically necessary cookies that are required for the operation of the site (e.g. cart and session functions of Shopify). These are stored on the basis of Art. 6 (1) (f) GDPR; we have a legitimate interest in providing our services in a technically flawless manner. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases or generally exclude them. If cookies are deactivated, the functionality of this website may be limited.

Insofar as cookies or comparable technologies are used that are not technically necessary (e.g. for statistics or marketing), this only takes place with your consent in accordance with § 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR. This consent can be revoked at any time with effect for the future.

6. Contacting us

By email or phone

If you contact us by email or phone, your details (e.g. name, email address or phone number as well as the content of your enquiry) will be stored by us for the purpose of processing your enquiry and in case of follow-up questions. We will not pass on this data without your consent.

The processing of this data is based on Art. 6 (1) (b) GDPR if your enquiry is related to the fulfilment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR).

The data you send us via contact enquiry will remain with us until you ask us to delete it, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

Via WhatsApp

You can also contact us via the messenger service WhatsApp. The data you transmit (in particular your phone number, your displayed name and the content of your message) is processed to handle your enquiry. The provider of the service is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a company of the Meta group. We point out that when using WhatsApp, data may also be processed outside the European Union (in particular in the USA).

The legal basis is Art. 6 (1) (b) GDPR if your enquiry serves to initiate or fulfil a contract, otherwise our legitimate interest in fast and uncomplicated communication (Art. 6 (1) (f) GDPR). If you wish to avoid data processing by WhatsApp, please contact us by email or phone instead. Further information can be found in WhatsApp's privacy policy: https://www.whatsapp.com/legal/privacy-policy-eea.

7. Online shop, orders and customer account

As soon as a direct purchase via our online shop (cart and checkout) is possible, the following applies to order processing: We collect the data required for the execution of the contract (e.g. name, billing and delivery address, email address, phone number if applicable, as well as order and payment data). The processing takes place to fulfil the contract and to carry out pre-contractual measures in accordance with Art. 6 (1) (b) GDPR. We store the data collected as part of the order until the expiry of the statutory retention periods (in particular under commercial and tax law, generally 6 or 10 years).

Currently, a direct purchase via the shop is not yet enabled; enquiries are made via our contact form or by email or phone (see section 6).

8. Payment methods and payment service providers

To process payments in the shop, we use Shopify Payments as well as other payment service providers. Depending on the selected payment method, the data required for payment processing (e.g. name, billing and payment data, card or account data and amount) is transmitted to the respective provider and processed there. The legal basis is Art. 6 (1) (b) GDPR (contract processing) as well as Art. 6 (1) (f) GDPR (secure and efficient payment processing).

Shopify Payments

The payment service Shopify Payments is provided by Shopify itself (Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, Ireland). The technical processing of card payments takes place via Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. The following payment methods in particular are available via Shopify Payments:

• Credit and debit cards: Visa, Mastercard, American Express
• Shop Pay
• Apple Pay
• Google Pay

Other payment service providers

• PayPal – PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg.
• Klarna – Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

The digital wallets are provided by Apple (Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland) and Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). For details of the respective data processing, please refer to the privacy policies of the providers named.

9. Shipping

As soon as shipping takes place via the shop, we pass on the data required for delivery (name and delivery address, and email address or phone number for tracking if applicable) to the commissioned shipping or logistics company. The legal basis is Art. 6 (1) (b) GDPR.

10. Newsletter and advertising

We do not currently send any newsletters or any email or messenger advertising. Should we offer a newsletter or advertising messages in the future, they will be sent exclusively on the basis of your express consent using the double opt-in procedure in accordance with Art. 6 (1) (a) GDPR. You can revoke any consent given at any time with effect for the future, e.g. via the unsubscribe link in each message or by notifying us.

11. Web analytics – Google Analytics

We do not yet use Google Analytics. As soon as we activate the service, it will be used exclusively after integration of a cookie/consent banner and only with your prior consent.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and comparable technologies that enable an analysis of your use of the website. The information generated about your use of this website is generally transmitted to a Google server and stored there; this may also involve a transfer to the USA.

The use takes place exclusively on the basis of your consent in accordance with § 25 (1) TDDDG and Art. 6 (1) (a) GDPR. Consent is obtained via our consent banner and can be revoked at any time with effect for the future. As long as no consent is given, no analytics cookies are set and no corresponding data is processed.

12. Recipients and order processing

Your data is only transferred to third parties insofar as this is legally permitted or necessary for the processing of the contract or enquiry. With service providers who process personal data on our behalf (e.g. hosting, payment and shipping service providers), we have – where necessary – concluded order processing agreements in accordance with Art. 28 GDPR.

13. Storage period

Insofar as no more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a justified request for deletion or revoke consent, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law); in the latter case, deletion takes place after these reasons no longer apply.

14. Your rights

Within the framework of the applicable statutory provisions, you have the right at any time to:

• information about your stored personal data (Art. 15 GDPR),
• rectification of incorrect data (Art. 16 GDPR),
• erasure of the data stored by us (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• revocation of a consent given with effect for the future (Art. 7 (3) GDPR),
• objection to the processing (Art. 21 GDPR, see below).

You can contact us at any time regarding this and other questions on the subject of data protection (contact details see above).

Right to object (Art. 21 GDPR)

If the processing of your data is based on Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation. If your data is processed for the purpose of direct advertising, you have the right to object at any time to the processing; after that, your data will no longer be used for these purposes.

Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

15. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

16. Currency and changes to this privacy policy

This privacy policy is currently valid. Due to the further development of our website or due to changed legal or official requirements, it may become necessary to adapt this privacy policy.

---

Last updated: June 2026