Privacy Policy (GDPR)
1. Controller
The controller for data processed through this website is the entity identified in the Impressum. Contact for data protection questions: the email address in the site footer.
2. What we process and why
| Order and delivery data | Name, address, email, telephone, order contents. Legal basis: performance of the contract. Retained as long as tax and commercial law require. |
|---|---|
| Payment data | Processed by our payment provider; we do not store full card numbers. Legal basis: contract performance. |
| Enquiries | Message content and contact details. Legal basis: legitimate interest in responding, or contract performance where a quote follows. |
| Analytics | Aggregated usage data, only where enabled and consented to. Legal basis: consent, withdrawable at any time. |
3. Who receives data
Carriers and customs agents receive the data needed to deliver a consignment. Payment providers receive payment data to process the transaction. Where our DDP process makes us the importer, the customs documentation is in our name — so your details do not create a customs record in your own name.
4. Transfers outside the EU
Order processing and customer service are supported by our team outside the EU. Where data is transferred, we rely on appropriate safeguards such as standard contractual clauses, and we limit the data transferred to what is needed to handle your order.
5. Retention
Order and invoice data are retained for the statutory period (typically six to ten years depending on jurisdiction). Enquiry data that does not lead to an order is deleted after a reasonable period or on request.
6. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time. You also have the right to lodge a complaint with your national supervisory authority.
7. Cookies
We use strictly necessary cookies for cart and session function. Analytics or marketing cookies are used only with consent, and you can refuse them without losing access to the shop. Consent is requested through a banner that appears before any non-essential cookie is set.