Privacy & Data Protection (GDPR)

We are committed to protecting your personal data and respecting your privacy in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

We act as the data controller for personal data collected through this website and during the checkout process.

2. Personal Data We Collect

We may collect and process the following data:

  • Identification information (name, billing address)
  • Contact information (email address)
  • Transaction and payment-related data
  • Technical data (IP address, device, browser, fraud-prevention signals)

Payment information is processed securely by our certified payment service providers.
We do not store full card numbers.

3. Purpose of Processing

Your personal data is processed for the following purposes:

  • Order processing and fulfillment
  • Payment authorization and fraud prevention
  • Compliance with legal and regulatory obligations
  • Customer service and transaction support

4. Legal Basis

Processing is based on:

  • Performance of a contract
  • Legal obligations
  • Legitimate interests (fraud prevention, payment security)

5. Data Sharing

Your data may be shared with:

  • Payment processors and acquiring banks
  • Fraud prevention and authentication providers (e.g. 3D Secure)
  • Regulatory or legal authorities where required

All partners are GDPR-compliant and process data under strict confidentiality obligations.

6. International Data Transfers

Where data is transferred outside the European Economic Area, appropriate safeguards are applied in accordance with GDPR requirements.

7. Data Retention

Personal data is retained only as long as necessary for:

  • Transaction processing
  • Legal, accounting, and compliance purposes

8. Your Rights

As an EU data subject, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability

Requests can be submitted via our contact page.

9. Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.