Our Partners

This domain is registered in Germany on the platform STRATO, and we adhere to the stringent German and European data protection regulations.

Our UK website building platform, Payhip, and our affiliate partner Amazon will store parts of our website data in accordance with their respective regulatory frameworks.

Our shop payment system is connected to the Payhip platform via PayPal. Payhip only supports connections with PayPal and Stripe, as outlined in their guidelines. We have chosen PayPal, which is the globally recognized payment system commonly used on eBay.

Privacy Policy

This Privacy Policy provides information on the nature, scope, and purpose of the processing of personal data (hereinafter referred to as "data") on this website. Regarding the terminology used, such as "personal data" or its "processing," we refer to the definitions in Article 4 of the German General Data Protection Regulation Datenschutzgrundverordnung (DSGVO).

Responsible

Sebastian Hartz

Alsterdorfer Straße 117

22299 Hamburg

E-Mail: info@sebstianhartz.com

Types of Data Processed: Inventory data, contact data, content data, contract data, payment data, usage data, metadata, communication data.

Categories of Data Subjects Affected by Processing: Customers, interested parties, suppliers, visitors, and users of the online offering.

Purpose of Processing: Provision of the online offering, its content and functions, performance of contractual services, service and customer care, response to contact inquiries and communication with users, marketing, advertising, market research, security measures.

1. Relevant Legal Bases

In accordance with Art. 13 DSGVO, we inform you about the legal bases of our data processing. Unless the legal basis is specified in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6 Para. 1 lit. a and Art. 7 DSGVO; the legal basis for processing to fulfill our services and carry out contractual measures, as well as responding to inquiries, is Art. 6 Para. 1 lit. b DSGVO; the legal basis for processing to fulfill our legal obligations is Art. 6 Para. 1 lit. c DSGVO; and the legal basis for processing to protect our legitimate interests is Art. 6 Para. 1 lit. f DSGVO. In the event that vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6 Para. 1 lit. d DSGVO serves as the legal basis.

2. Changes and Updates to the Privacy Policy

We will adjust the Privacy Policy as soon as changes in our data processing activities make this necessary.

3. Security Measures

3.1. In accordance with Art. 32 DSGVO, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, the implementation costs, and the nature, scope, circumstances, and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons. These measures include, in particular, safeguarding the confidentiality, integrity, and availability of data by controlling physical access to the data, as well as access to, input, transfer, ensuring availability, and separation of the data. Furthermore, we have established procedures to ensure the exercise of data subjects' rights, the deletion of data, and the response to data threats. Additionally, we take into account the protection of personal data in the development or selection of hardware, software, and procedures, in accordance with the principle of data protection by design and by default (Art. 25 DSGVO).

3.2. Among the security measures is particularly the encrypted transmission of data between your browser and our server.

4. Collaboration with Data Processors and Third Parties

4.1 If, as part of our processing, we need to disclose data to other individuals and companies (data processors or third parties), transmit them to them, or otherwise grant them access to the data, this only occurs on the basis of a legal permission (e.g., if a transfer of data to third parties, such as payment service providers, is necessary for the performance of a contract in accordance with Art. 6 Para. 1 lit. b DSGVO), if you have consented to it, if a legal obligation provides for it, or on the basis of our legitimate interests (e.g., when using agents, web hosts, etc.).

4.2 If we commission third parties with the processing of data, this is done on the basis of Art. 28 DSGVO.

4.3 The operators of this website participate in the Amazon EU Partner Program. Amazon advertisements and links to Amazon.de are integrated on some pages, through which we can earn money through advertising reimbursement. Amazon uses cookies to track your click on the affiliate link and thus trace the origin of orders.

The storage of Amazon cookies is based on Art. 6 Para. 1 lit. f DSGVO. The website operator has a legitimate interest in this, as only through the cookies the amount of his affiliate compensation can be determined. Further information on data usage by Amazon can be found in Amazon's privacy policy.

5. Data transfers to the UK (e.g. our website platform Payhip) or the USA (e.g. our ad partner Amazon)

If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or this occurs in the context of using third-party services or disclosing/transferring data to third parties, this will only take place if it is necessary to fulfill our contractual obligations, based on your consent, due to a legal obligation, or based on our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only if the special requirements of Articles 44 et seq. DSGVO are met. This means that processing is, for example, based on special guarantees, such as the officially recognized determination of a data protection level equivalent to that of the EU (e.g., for the USA through the "Privacy Shield") or compliance with officially recognized specific contractual obligations/standard contractual clauses.

6. Rights of Customers

6.1. You have the right to request confirmation as to whether or not data concerning you is being processed and to obtain information about this data as well as further information and a copy of the data in accordance with Art. 15 DSGVO.

6.2. In accordance with Art. 13 DSGVO, you have the right to request the completion of data concerning you or the correction of inaccurate data concerning you.

6.3. In accordance with Art. 17 DSGVO, you have the right to demand that the data concerning you be erased without delay, or alternatively, in accordance with Art. 18 DSGVO, to demand a restriction of the processing of the data.

6.4. In accordance with Art. 20 DSGVO, you have the right to receive the personal data concerning you that you have provided to us and to request their transmission to other controllers.

6.5. Furthermore, in accordance with Art. 77 DSGVO, you have the right to lodge a complaint with the supervisory authority.

7. Right of Withdrawal

You have the right to withdraw consent given pursuant to Art. 7 Para. 3 DSGVO with effect for the future.

8. Right to Object

You can object to future processing of data concerning you in accordance with Art. 21 DSGVO at any time. The objection can be made in particular against processing for direct marketing purposes.

9. Cookies and Right to Object to Direct Marketing

We use temporary and permanent cookies, i.e., small files that are stored on users' devices. Some of the cookies are used for security purposes or are necessary for the operation of our online offering (e.g., for displaying the website) or to store user decisions when confirming the cookie banner. In addition, we or our technology partners use cookies for audience measurement and marketing purposes. The storage of cookies can be prevented by disabling them in the browser settings. Please note that in this case, not all functions of this online offering may be available.

10. Deletion of Data

10.1. The data processed by us will be deleted or its processing restricted in accordance with Articles 17 and 18 DSGVO. Unless expressly stated in this privacy policy, the data stored by us will be deleted once it is no longer necessary for its intended purpose and there are no legal retention obligations preventing its deletion. If the data is not deleted because it is required for other legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.

10.2. In accordance with legal requirements, data retention occurs in particular for 6 years in accordance with § 257 (1) HGB (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.) and for 10 years in accordance with § 147 (1) AO (books, records, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.).

11. Online Shop

11.1. We process inventory data (e.g., names and addresses as well as contact information of users) and contract data (e.g., services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and providing customer service in accordance with Art. 6 Para. 1 lit. b DSGVO. The entries marked as mandatory in online forms are required for the conclusion of the contract.

11.2. Users have the option of creating a user account, in which they can view their orders in particular. During registration, the required mandatory information will be communicated to the users. User accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data relating to the user account will be deleted, subject to retention being necessary for commercial or tax law reasons in accordance with Art. 6 Para. 1 lit. c DSGVO. It is the responsibility of the users to secure their data before the end of the contract in the event of termination. We are entitled to irretrievably delete all data stored during the term of the contract.

11.3. Deletion takes place after the expiry of statutory warranty and comparable obligations. The necessity of retaining the data is reviewed every three years; in the case of statutory archiving obligations, deletion occurs after their expiry (end of commercial (6 years) and tax (10 years) retention obligation); data in the customer account remains until it is deleted.

Last update:

Hamburg/Germany August 20th 2024