Privacy Policy

Last updated: 30 August 2026

1. Controller

The controller responsible for the processing of your personal data under the General Data Protection Regulation (GDPR) is:

Branka Braun Finkenweg 14 34317 Habichtswald Germany Email: ecombennet210@gmail.com

We have not appointed a data protection officer, as we are not legally required to do so.

2. What data we collect

Data you give us

• Order data: name, shipping and billing address, email address, telephone number if provided, order contents
• Payment data: payment method and the transaction data required to process it. Full card details are handled by our payment providers, not by us.
• Communication data: the content of emails, contact form messages and support requests
• Account data, if you create a customer account: email address, password stored in encrypted form, order history
• Newsletter data, if you subscribe: email address and consent record

Data collected automatically

• Server log data: IP address, date and time of access, pages requested, referring URL, browser type and version, operating system
• Cookie and device data as described in section 6

3. Why we process it, and on what legal basis

Purpose	Legal basis
Processing and delivering your order, customer service, invoicing	Art. 6(1)(b) GDPR – performance of a contract
Retaining commercial and tax records	Art. 6(1)(c) GDPR – legal obligation (German Commercial Code, Fiscal Code)
Operating and securing the website, fraud prevention	Art. 6(1)(f) GDPR – legitimate interest
Analytics, marketing and non-essential cookies	Art. 6(1)(a) GDPR – your consent
Newsletter	Art. 6(1)(a) GDPR – your consent

You may withdraw any consent at any time with effect for the future, without affecting the lawfulness of processing carried out before withdrawal.

4. Who we share data with

We share personal data only where necessary, and only with:

• Our shop platform, Shopify, which hosts this store and processes orders on our behalf
• The payment provider you select at checkout, for the purpose of processing your payment
• Shipping and logistics providers, including the German postal or courier service that collects the parcel and the delivering US carrier, for delivery and customs clearance
• Our tax adviser and, where legally required, the tax authorities, for accounting and legal obligations

Processors act on our instructions under data processing agreements pursuant to Art. 28 GDPR.

5. International transfers

Because we ship to the United States, your address data is necessarily transmitted to carriers and customs authorities there. Some of our service providers are also located in, or process data in, the United States or other countries outside the EU and EEA.

Where data is transferred outside the EU and EEA, we rely on the EU Standard Contractual Clauses, on an adequacy decision of the European Commission including the EU–US Data Privacy Framework where the recipient is certified, or on Art. 49(1)(b) GDPR where the transfer is necessary to perform your contract, which is the case for shipping and customs data.

6. Cookies and tracking

We use cookies and comparable technologies.

Essential cookies keep the shopping cart, checkout, login and security functions working. They are set on the basis of § 25(2) TTDSG and Art. 6(1)(f) GDPR and do not require consent.

Functional, analytics and marketing cookies are only set once you consent through our cookie banner. You can change or withdraw your choice at any time through the cookie settings in our store.

You can also block or delete cookies in your browser settings. Essential functions of this store may then not work correctly.

7. Newsletter

If you subscribe, we use your email address to send information about our products and offers. We use the double opt-in procedure: you will receive a confirmation email and are only added once you click the link in it. We log the subscription and confirmation for evidentiary purposes.

You can unsubscribe at any time using the link in every newsletter or by emailing ecombennet210@gmail.com. After unsubscribing, your address is stored on a blocklist solely to ensure we do not contact you again.

8. How long we keep data

• Order, invoice and accounting data: 10 years, in line with German tax and commercial retention obligations
• Business correspondence: 6 years
• Customer account data: until you delete the account
• Newsletter data: until you unsubscribe
• Server log files: up to 30 days
• Consent records: as long as required to prove the consent

After the applicable period expires, data is deleted or anonymised unless a legal obligation requires longer storage.

9. Your rights

Under the GDPR you have the right to:

• Access (Art. 15): obtain confirmation of, and a copy of, the data we hold about you
• Rectification (Art. 16): have inaccurate data corrected
• Erasure (Art. 17): have data deleted where no retention obligation applies
• Restriction of processing (Art. 18)
• Data portability (Art. 20): receive your data in a machine-readable format
• Object (Art. 21): object to processing based on legitimate interests, including profiling. You may object to direct marketing at any time.
• Withdraw consent (Art. 7(3)) at any time with effect for the future

To exercise any of these rights, contact us at ecombennet210@gmail.com. We will respond within one month.

10. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit Gustav-Stresemann-Ring 1 65189 Wiesbaden Germany https://datenschutz.hessen.de

You may also complain to the supervisory authority of your habitual residence or place of work.

11. Data security

We use SSL/TLS encryption for all data transmitted between your browser and this store, recognisable by the https prefix and the padlock icon in your browser. We apply appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.

12. No automated decision-making

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

13. Children

This store is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

14. Notice for California residents

If you are a California resident, you may have rights under the CCPA and CPRA to know what personal information we collect, to request its deletion, and to opt out of its sale or sharing. We do not sell personal information for money. To exercise these rights, contact us at ecombennet210@gmail.com. We will not discriminate against you for exercising them.

15. Changes to this policy

We may update this Privacy Policy to reflect changes in our processing or in the law. The current version is always available on this page.