This data protection information applies to data processing by:
Data Controller: Dirk Hoch ('DH'),
Address: Vaalser Str. 97, 52074 Aachen
VAT ID No. DE 815 394 858
The contact person for data protection issues is Mr. Dirk Horch.

When accessing our website www.bauchladenmanufaktur.de, your browser automatically sends information to our server. This information is temporarily stored in a log file. The following data is collected without your intervention and stored until automatic deletion:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which access was made (referrer URL)
• Browser used and, if applicable, your computer's operating system and your access provider's name

This data is processed for:

• Ensuring smooth website connection
• Ensuring comfortable website use
• Evaluating system security and stability
• Other administrative purposes

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest follows from the listed purposes. We never use this data to identify individuals.

We also use cookies and analytics services (see sections 8 and 9).

During registration we store:

• Date and time of registration
• First and last name
• Email
• Password
• Phone number

Our registration form is encrypted to prevent third-party access. You can modify your registration data anytime.

We store this data to enable orders and access to order history (including orders, account details, address book, password, newsletter subscription, user data, and reviews).

Processing occurs under Art. 6(1)(b) GDPR for contract fulfillment. For purchases, storage follows section 4. Without purchases, data is kept for up to 3 months.

Only registered users can order. We collect:

• Salutation, name
• Email address
• Address
• Phone number
• Order date/time
• Ordered items
• Account details
• Payment method

We also store the contract text and applicable terms.

This data is used to:

• Identify you as customer
• Deliver goods and fulfill contract
• Process invoices
• Handle payment claims

Processing occurs under Art. 6(1)(b) GDPR. Data is stored for 3 years after claim arises (§199 BGB), unless longer retention is legally required (Art. 6(1)(c) GDPR) or you've consented to longer storage (Art. 6(1)(a) GDPR).

With your consent (Art. 6(1)(a) GDPR), we use your email to send newsletters. Only your email is required. Unsubscribe anytime via link in newsletters or our contact form.

For inquiries, we provide a contact form requiring a valid email. Additional information is optional. Processing occurs under Art. 6(1)(a) GDPR. Data is automatically deleted after request handling. Our encrypted form prevents third-party access.

We only share data with third parties when:

• Legally permissible under Art. 6(1)(b) GDPR for:
  • Order fulfillment
  • Shipping (to delivery companies)
  • Payment processing (to our bank)
• Required for legal claims under Art. 6(1)(f) GDPR
• Legally required under Art. 6(1)(c) GDPR
• You've consented under Art. 6(1)(a) GDPR (e.g., installment payments)

For installment payments, we share data with PayPal for credit checks (name, address, birthdate, phone, order details).

Non-EEA transfers only occur if:

• Delivery address is outside EEA
• EU adequacy decision exists (e.g., Canada, Switzerland)

See EU adequacy decisions: EU Adequacy Decisions

We use cookies to optimize our website. Cookies are small text files stored by your browser. They cannot execute programs or transmit viruses.

Types:

• Session cookies: Deleted when closing browser
• Persistent cookies: Automatically deleted after set period

You can configure your browser to reject cookies, but this may limit functionality.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

Google Analytics

We use Google Analytics (Google Inc.) to analyze website use. Pseudonymized usage profiles are created using cookies.

Collected data includes:

• Browser type/version
• Operating system
• Referrer URL
• IP address (anonymized)
• Server request time

This data is transmitted to Google servers in the U.S. and used to evaluate website usage.

You can prevent tracking by:

• Installing the browser add-on: Opt-out Add-on
• Clicking our opt-out link (sets a cookie)

More information: Google Analytics Help

Under GDPR, you have the right to:

• Access (Art. 15): Request information about your data
• Rectification (Art. 16): Correct inaccurate data
• Erasure (Art. 17): Delete your data when:
  • No longer needed
  • Withdraw consent
  • Object to processing
  • Unlawfully processed
• Restriction (Art. 18): Limit processing when:
  • Contesting accuracy
  • Processing is unlawful
  • Need data for legal claims
  • Verifying objection
• Data portability (Art. 20): Receive your data in machine-readable format
• Withdraw consent (Art. 7(3)): Revoke previously given consent
• Complain (Art. 77): Lodge a complaint with a supervisory authority

Under Art. 21 GDPR, you may object to processing based on legitimate interests (Art. 6(1)(f) GDPR). For direct marketing, you have an unconditional right to object.

To object, email [email protected] or use our contact form.

Current as of May 2018. We may update this policy due to website changes or legal requirements.

The current version is always available at: Privacy Policy