Privacy policy

1. Controller

Robert

2. Hosting and shop system

Our store is operated via Shopify (Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). Shopify processes order, customer and usage data on our behalf (Art. 28 GDPR). Data may be transferred to third countries (in particular the USA) on the basis of the EU-U.S. Data Privacy Framework or standard contractual clauses.

3. Orders

To process orders we process your name, address, email, phone number if provided, and payment data. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Statutory retention obligations (§ 147 AO, § 257 HGB) remain unaffected (Art. 6(1)(c) GDPR).

3a. Waitlist before launch

As long as our store does not take orders yet, you can join the waitlist at checkout with your email address. For this we store your email address, the contents of your cart and the time of your consent, and send you a confirmation email (double opt-in). After you confirm, we notify you once by email when the store opens. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link in every email. The technical service provider for storage and sending is Unicorn Asset Management GmbH, Weidenbornstraße 8a, 65189 Wiesbaden, Germany (5minstore), using the mail server of united-domains (Starnberg, Germany), alternatively the email service Resend (Resend, Inc., USA); they process the data on our behalf (Art. 28 GDPR). Transfers to the USA (only with Resend) are based on the EU-U.S. Data Privacy Framework or standard contractual clauses. After you confirm, we receive a short email notification that someone joined (with a shortened email address and the cart). Unconfirmed entries are deleted after 30 days, all others after 12 months at the latest.

3b. Newsletter

If you sign up for our newsletter, we store your email address, the text of your consent and the time and IP address of your sign-up and confirmation. You first receive a confirmation email (double opt-in); only after you confirm do we send you information about new products and offers by email. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link in every email. We keep the log data to be able to prove your consent (Art. 6(1)(c) and (f) GDPR). The technical service provider for storage and sending is Unicorn Asset Management GmbH, Weidenbornstraße 8a, 65189 Wiesbaden, Germany (5minstore), which processes the data on our behalf (Art. 28 GDPR) and uses an email service provider for sending. Unconfirmed sign-ups are deleted after 30 days; when you unsubscribe, we delete your data.

4. Payment providers

Depending on the payment method you choose, we pass your payment data to the respective provider (Shopify Payments, PayPal, Klarna (Rechnung / Ratenkauf / Sofort), Vorkasse / Überweisung). The legal basis is Art. 6(1)(b) GDPR.

5. Shipping

For delivery we pass your name and delivery address to the shipping company (DHL Paket). We only share your email address or phone number with your consent to announce the delivery (Art. 6(1)(a) GDPR).

6. Cookies and consent

We use technically necessary cookies on the basis of § 25(2) TDDDG and Art. 6(1)(f) GDPR. All other cookies and tracking technologies (e.g. statistics, marketing) are only used with your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw your consent at any time in the cookie settings.

7. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), as well as the right to lodge a complaint with a data protection supervisory authority.

8. Storage period

We only store personal data for as long as necessary for the respective purpose or as required by statutory retention periods.