Privacy Policy

Controller

What this covers

This policy applies to this website. Checkout and payment run on Shopify and are covered in the Checkout section below.

Hosting

The site is hosted on Vercel. When you visit, the server processes technical data such as your IP address and browser information to deliver the pages securely. The legal basis is our legitimate interest in operating a reliable website, Art. 6(1)(f) GDPR.

Cookies and local storage

Your shopping cart is stored in your browser using local storage so the site remembers the pieces you added. This is strictly necessary for the shop to work and needs no consent, Art. 6(1)(f) GDPR. We also store your cookie choice so we do not ask again on every visit.

Consent

Analytics and advertising tools load only after you agree through the cookie banner, Art. 6(1)(a) GDPR. You can change or withdraw your choice at any time through the Cookie settings link in the footer, with effect for the future.

Analytics: Google Analytics 4

With your consent we use Google Analytics 4, a service of Google Ireland Limited, to understand how the site is used. It sets cookies and may transfer data to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. Until you consent, Google Consent Mode keeps analytics storage disabled. You can withdraw your consent at any time as described above.

Advertising: Google Ads

Where we run advertising we use Google Ads, a service of Google Ireland Limited, for conversion measurement and remarketing. These tools load only with your consent and can be withdrawn at any time. Remarketing uses data only from visitors who have consented.

Privacy-friendly measurement: Vercel Analytics

We use Vercel Analytics to count visits and page views in aggregate. It sets no cookies and does not build a profile of you, so it runs without consent on the basis of our legitimate interest, Art. 6(1)(f) GDPR.

Checkout and orders

When you check out you are taken to Shopify, operated by Shopify International Limited. Shopify processes your order, contact and payment data on our behalf to complete the purchase and handles payments through Shopify Payments. Their processing is described in the Shopify privacy policy.

Product images

Product images are served from Google Cloud Storage. When they load, your IP address is transmitted to Google so the images can be delivered. The legal basis is our legitimate interest in serving the catalogue efficiently, Art. 6(1)(f) GDPR.

Contacting us

If you email us or use the contact page, we process the details you provide to answer your request, Art. 6(1)(b) and (f) GDPR.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, and the right to withdraw consent at any time. You may also lodge a complaint with a data protection supervisory authority.

Retention

We keep personal data only as long as necessary for the purposes described here or as required by law. Analytics retention is set in the Google Analytics property. Order data is retained by Shopify and as required by tax and commercial law.

Changes

We may update this policy as the service or the law changes. Related information is in our Imprint.