Privacy Policy

How we handle your personal data

We take the protection of your personal data seriously. This page explains, in general terms, what data we collect when you use this online store and for what purpose.

Data controller

The data controller responsible for this store is the store operator named on our page. Impressum

Data we collect

When you place an order, we collect your name, mobile number, delivery address and order details in order to process and deliver your order. When you create an account, we also store your login information.

Purpose of processing

We process your data to fulfil your order, to communicate with you about your order, and — only with your consent — to send you marketing messages.

Payment and financial data

To process payments we share the necessary order and payment amount data with our payment service provider (Stripe). Card and other payment details are handled directly by the payment provider and are not stored on our servers. See Stripe's own privacy policy for details on how it processes payment data.

Retention of order and invoice data

Invoices and accounting records are retained for 8 years from the end of the calendar year of invoicing, pursuant to § 147 (3) AO and § 257 (4) HGB. Commercial and business letters relevant for taxation are retained for 10 years. Data without tax relevance – such as your customer account – is deleted once it is no longer needed to process your order, and at the latest upon your request, unless a statutory retention obligation applies.

Your rights

You have the right to access, correct, delete or export the personal data we hold about you, and to withdraw any consent you have given at any time. Please contact us using the details on our page to exercise these rights. Impressum

Cookies

This store does not use tracking cookies. Only strictly necessary storage is used: a login session cookie (HttpOnly, SameSite=Lax, sent only to /api) so you stay signed in, and local storage in your browser for the cart and the selected language. No analytics or marketing services are active, so no consent is required for them.