Privacy Policy

1. General Information

This Privacy Policy explains how personal data is collected, processed, and protected when using the online store [STORE NAME], operated via WooCommerce and available at [WEBSITE URL].

The controller of personal data (data controller) pursuant to Article 4(7) of the GDPR is:

[COMPANY NAME]
[LEGAL FORM – e.g. Einzelunternehmen / GmbH]
[REGISTERED ADDRESS]
[POSTAL CODE, CITY, GERMANY]
Email: [EMAIL ADDRESS]
VAT ID: [VAT NUMBER – if applicable]

Personal data is processed in accordance with the General Data Protection Regulation (GDPR / DSGVO) and German data protection laws.


2. Types of Personal Data Collected

We may collect and process the following personal data:

  • first and last name

  • billing and shipping address

  • email address

  • phone number

  • company name and VAT ID (if applicable)

  • order and transaction details

  • payment-related data (processed by external payment providers)

  • IP address

  • browser and device information

  • data provided via contact forms or customer account

Providing personal data is voluntary but necessary to conclude contracts or use certain services.


3. Purpose of Data Processing

Personal data is processed for the following purposes:

  • processing orders placed via WooCommerce

  • creating and managing customer accounts

  • handling inquiries via contact forms or email

  • processing payments and refunds

  • shipping products and providing order-related communication

  • fulfilling legal obligations (e.g. accounting, tax law)

  • ensuring proper technical operation of the website

  • marketing activities (only with user consent)


4. Legal Basis for Processing

Personal data is processed based on the following legal grounds under Article 6 GDPR:

  • Art. 6(1)(b) GDPR – performance of a contract

  • Art. 6(1)(c) GDPR – compliance with a legal obligation

  • Art. 6(1)(a) GDPR – consent of the data subject

  • Art. 6(1)(f) GDPR – legitimate interests of the controller (e.g. website security, business operations)


5. WooCommerce & Customer Accounts

Our store is built using WooCommerce.
When you place an order or create an account, WooCommerce stores personal data such as name, address, email address, and order history in order to process purchases and manage customer accounts.

WooCommerce itself does not share personal data with third parties without consent, except as required to operate the store (e.g. payment and shipping).


6. Payment Service Providers

Depending on the selected payment method, personal data may be transferred to external payment providers such as:

  • PayPal

  • Stripe

  • Klarna

  • bank transfer service providers

Data is transferred only to the extent necessary to process the payment and in accordance with GDPR.


7. Shipping & Service Providers

Personal data may be shared with trusted service providers, including:

  • shipping and courier companies

  • hosting and IT service providers

  • accounting and legal service providers

All recipients process data in compliance with GDPR.


8. Data Retention Period

Personal data is stored only for as long as necessary to fulfill the purposes for which it was collected or as required by German and EU law (e.g. tax retention periods).


9. User Rights

Under GDPR, users have the right to:

  • access their personal data (Art. 15 GDPR)

  • rectify incorrect data (Art. 16 GDPR)

  • request deletion of data (Art. 17 GDPR)

  • restrict processing (Art. 18 GDPR)

  • data portability (Art. 20 GDPR)

  • object to processing (Art. 21 GDPR)

  • withdraw consent at any time (Art. 7(3) GDPR)

Requests can be sent to: [EMAIL ADDRESS]

Users also have the right to lodge a complaint with the competent supervisory authority in Germany.


10. Cookies

This website uses cookies to ensure proper functionality and to improve user experience.
Cookie usage and consent management are handled in accordance with GDPR and German regulations.

Detailed information can be found in the Cookie Policy.


11. Data Security

We apply appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, alteration, or disclosure.


12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time.
The current version will always be available on the website.

×