Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data is:

2. Types of Data Collected

We collect and process the following categories of personal data:

2.1 Data You Provide

• Account Data: Name, email address, password (encrypted), phone number
• Order Data: Delivery address, billing address, payment information
• Communication Data: Messages sent through our contact form, customer service inquiries
• Review Data: Product reviews and ratings you submit

2.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, device type, operating system
• Usage Data: Pages visited, time spent on pages, click patterns, search queries
• Location Data: Country and city (derived from IP address)
• Referral Data: The website that referred you to us

2.3 Data from Third Parties

• Payment Providers: Transaction confirmations and fraud prevention data
• Social Media: Profile information if you connect your social media accounts
• Address Verification: Address validation from postal services

3. Purposes of Processing

We process your personal data for the following purposes:

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

4.1 Contract Performance (Art. 6(1)(b) GDPR)

Processing is necessary for the performance of the sales contract or to take steps at your request prior to entering into a contract (e.g., creating an account, processing orders).

4.2 Consent (Art. 6(1)(a) GDPR)

Where you have given us explicit consent, for example to receive our newsletter or allow certain cookies. You can withdraw your consent at any time.

4.3 Legitimate Interest (Art. 6(1)(f) GDPR)

Processing is necessary for our legitimate interests, such as fraud prevention, website security, and improving our services, provided these interests are not overridden by your rights.

4.4 Legal Obligation (Art. 6(1)(c) GDPR)

Processing is necessary for compliance with legal obligations, such as tax and accounting requirements.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

• Order Data: 10 years (statutory retention period for commercial and tax documents)
• Account Data: Until account deletion, plus 30 days for backup purposes
• Newsletter Data: Until you unsubscribe
• Analytics Data: 26 months maximum
• Server Logs: 7 days
• Customer Support Tickets: 3 years

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

6.1 Right of Access (Art. 15 GDPR)

You have the right to obtain confirmation as to whether we process your personal data and, if so, to access this data and receive a copy.

6.2 Right to Rectification (Art. 16 GDPR)

You have the right to request the correction of inaccurate personal data and the completion of incomplete data.

6.3 Right to Erasure (Art. 17 GDPR)

You have the right to request the deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

6.4 Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request the restriction of processing under certain circumstances, for example while we verify the accuracy of your data.

6.5 Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit this data to another controller.

6.6 Right to Object (Art. 21 GDPR)

You have the right to object to the processing of your personal data based on legitimate interests, including profiling. You can object to direct marketing at any time.

6.7 Right to Withdraw Consent (Art. 7(3) GDPR)

Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

6.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. The competent authority for us is:

To exercise any of these rights, please contact us at: [email protected]

7. Cookies Policy

Our website uses cookies and similar technologies. Cookies are small text files stored on your device that help us provide and improve our services.

7.1 Types of Cookies We Use

7.2 Managing Cookies

You can manage your cookie preferences through our Cookie Settings panel, accessible via the cookie icon in the bottom left corner of the website. You can also configure your browser to block or delete cookies.

8. Third-Party Services

We use the following third-party services that may process your personal data:

8.1 Payment Processors

• Stripe (USA) - Credit card processing. Privacy Policy: stripe.com/privacy
• PayPal (Luxembourg) - PayPal payments. Privacy Policy: paypal.com/privacy
• Klarna (Sweden) - Buy now, pay later. Privacy Policy: klarna.com/privacy

8.2 Shipping Partners

• DHL (Germany) - Package delivery and tracking
• UPS (USA) - Express shipping
• DPD (France) - European delivery

8.3 Analytics and Marketing

• Google Analytics (USA) - Website analytics with IP anonymization enabled
• Meta Pixel (USA) - Advertising measurement (with consent only)
• Mailchimp (USA) - Email marketing (newsletter subscribers)

8.4 International Data Transfers

Some of our third-party service providers are located outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, including:

• EU-U.S. Data Privacy Framework certification
• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for all data transmissions
• Encrypted storage of sensitive data
• Regular security audits and penetration testing
• Access controls and employee training
• Secure data centers within the EU

10. Children's Privacy

Our website and services are not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete this information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through a prominent notice on our website. We encourage you to review this policy periodically.

12. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us: