top of page

DATA PROTECTION

We take the protection of your personal data very seriously. Your personal data is processed confidentially and in accordance with applicable data protection law (in particular the GDPR) and this Privacy Policy.
Personal data is only collected where technically necessary or where you provide it to us voluntarily (e.g. when placing an order).

Controller
The controller responsible for data processing within the meaning of the GDPR is Simon Obrusnik. Full contact details can be found in our Imprint.

Hosting via Wix.com
Our website is operated via Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel.
Wix stores data on servers worldwide, including in the USA and Israel. Israel is recognised as a safe third country under an EU adequacy decision. For data transfers to the USA, Wix relies on the European Commission's Standard Contractual Clauses.
Further information can be found in Wix's Privacy Policy: https://www.wix.com/about/privacy

Cookies
Our website does not currently use any deliberately set cookies that require consent. However, technically necessary cookies may be set via the Wix hosting platform, which are required for the operation and security of the website (e.g. session management). Further information is available in Wix's Cookie Policy: https://www.wix.com/about/cookie-policy
 

Data Collected When Placing an Order
When you place an order, we collect the following data:

  • First and last name

  • Address

  • Phone number (optional)

  • Order details

This processing is carried out for the performance of a contract (Art. 6(1)(b) GDPR).
 

Payment Processing
Payments are processed via the payment provider PayPal.
As part of payment processing, personal data is transferred to PayPal. Processing is carried out by:
PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
Further information: https://www.paypal.com/ie/webapps/mpp/ua/privacy-full

 

Disclosure to Shipping Providers
To deliver your order, we share the following data:

  • First and last name

  • Delivery address

Recipients are:

  • Deutsche Post

  • DHL

This disclosure is carried out for the performance of a contract (Art. 6(1)(b) GDPR).
 

Internal Data Processing
To manage our product inventory, the following data is processed in an internal application:

  • First and last name

  • Payment method ("Cash," "Online")

  • Order quantity

This processing is based on our legitimate interest in efficient business organisation and inventory management (Art. 6(1)(f) GDPR).

​​

Retention Period
We only store personal data for as long as necessary to fulfil the relevant purpose, and to comply with applicable statutory retention obligations (including retention periods under German commercial and tax law, §257 HGB and §147 AO). Once these periods have expired, the data is deleted, unless a legal obligation requires further retention.
 

Your Rights
You have the following rights:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object (Art. 21 GDPR)

  • Right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR)

​

Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy as necessary to reflect legal requirements or changes to our services.

Last updated: May 2026

bottom of page