Privacy Policy

Draft. Complete and have it reviewed before publishing — in particular section 4 (services used) must match your actual technical setup.

1. Controller

[Full company name]
[Street and number]
[Postcode and city]
Email: will be added shortly
Phone: [phone number]

2. General information on data processing

We process personal data of our users only to the extent necessary to provide a functioning website and our content and services. The legal bases are in particular Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(c) GDPR (legal obligation, e.g. retention duties) and Art. 6(1)(f) GDPR (legitimate interest).

3. Server log files

Our hosting provider automatically collects and stores information in server log files that your browser automatically transmits to us (e.g. browser type, operating system used, referrer URL, hostname of the accessing device, time of the server request, IP address). This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR.

[Name your hosting provider, e.g. "Our site is hosted by [provider, address]. A data processing agreement is in place with this provider."]

4. Orders and customer account

When you place an order, we collect and process the personal data required to fulfil the contract (name, address, email address, phone number where applicable, payment data). The legal basis is Art. 6(1)(b) GDPR. Data is shared with the following recipients where necessary for contract performance:

• Shipping provider (currently: DHL) for delivery of the goods
• Payment service provider for processing payment [name provider once confirmed]
• Our accountant/bookkeeping as required for tax purposes

5. Cookies

Our website uses cookies. [List: strictly necessary cookies for cart/checkout; the cookie used for the age-verification prompt; the cookie used to remember the chosen language. If analytics or marketing cookies are used, a cookie consent banner with opt-in under § 25 TTDSG is required — please add.]

6. Contacting us

If you contact us by email or contact form, the information you provide will be stored to process your enquiry and for any follow-up questions. The legal basis is Art. 6(1)(b) or (f) GDPR.

7. Age confirmation

On your first visit you are asked to confirm that you are of legal age. This confirmation is remembered technically via a cookie/local storage in your browser so the prompt is not repeated on every visit. No third-party age verification takes place.

8. Storage period

We store personal data only as long as necessary for the purposes stated above or as required by statutory retention periods (in particular commercial and tax law retention periods of up to ten years).

9. Your rights

You have the right to access, rectify, erase, and restrict the processing of your personal data, the right to data portability, the right to object to processing, and the right to lodge a complaint with a data protection supervisory authority.

10. Contact for privacy enquiries

For privacy-related enquiries, please contact: will be added shortly. [Name a data protection officer here if one has been appointed.]

Last updated: [insert date]

This English version is provided for your customers' convenience; the German version governs in case of conflict.