This policy explains what personal data we process, why we process it, and the rights you have. It applies to this website and to orders placed through it.
1. Controller
The controller responsible for data processing on this website is:
[TO CONFIRM: 运营主体法定名称]
[TO CONFIRM: 注册地址]
Email: [TO CONFIRM: 客服邮箱]
Telephone: [TO CONFIRM: 联系电话]
Where a data protection officer has been appointed, they can be reached at [TO CONFIRM: DPO 邮箱].
2. What we process and why
2.1 Visiting the website
When you access this site, our web server automatically records the IP address, date and time of access, the page requested, the browser and operating system used, and the referring page. This data is required to deliver the site securely and to diagnose faults. The legal basis is our legitimate interest in the secure and stable operation of the website (Article 6(1)(f) GDPR). Server log data is deleted after [TO CONFIRM: 7-30] days.
2.2 Orders and customer accounts
To process an order we collect the name, delivery and billing address, email address, telephone number where provided, and the order contents. Payment is handled by the payment service provider you select at checkout; we do not store full payment card details ourselves. The legal basis is the performance of the contract (Article 6(1)(b) GDPR) and, for retention of invoices, our legal obligations (Article 6(1)(c) GDPR).
2.3 Customer support
If you contact us by email or through a contact form, we process the information you provide in order to answer your request. The legal basis is the performance of the contract or our legitimate interest in responding to enquiries (Article 6(1)(b) and (f) GDPR).
2.4 Reviews
Where we publish product reviews, we process the name or pseudonym you provide together with the review content. The legal basis is your consent (Article 6(1)(a) GDPR), which you may withdraw at any time.
2.5 Cookies and consent
Technically necessary cookies are used to operate the shop, for example to maintain your cart and session. These are set on the basis of our legitimate interest in providing a functioning shop (Article 6(1)(f) GDPR) and are not subject to consent. Any non-essential cookie or similar technology is set only with your consent, which you can give or refuse via the cookie banner and change at any time. Details of the individual cookies are listed in our Cookie Policy.
3. Who receives your data
We share personal data only where necessary to fulfil the contract or where we are legally required to do so. Recipients can include:
- Payment service providers, for processing payments and handling refunds
- Shipping and logistics partners, for delivering your order
- Our hosting provider, which operates the servers on which this site and its data are stored
- Tax advisors and auditors, where required by law
- IT service providers who maintain the shop, bound by data processing agreements
Where a processor acts on our behalf, a data processing agreement within the meaning of Article 28 GDPR is in place.
4. Transfers outside the EEA
Where personal data is transferred to a country outside the European Economic Area, we ensure an adequate level of protection, for example through an adequacy decision of the European Commission or through the standard contractual clauses approved by the Commission together with additional safeguards where required.
5. How long we keep data
We keep personal data only for as long as it is needed for the purposes described above or as required by law. Order and invoice data are retained for the statutory commercial and tax retention periods, which are [TO CONFIRM: 按适用法域填写, 德国为 6 年/10 年]. Server logs are deleted after [TO CONFIRM: 7-30] days. Account data is deleted when you close your account, provided no statutory retention obligation applies.
6. Your rights
You have the right to request access to the personal data we hold about you, to have inaccurate data corrected, to have data erased, to have processing restricted, to receive data you provided in a structured, commonly used and machine-readable format, and to object to processing based on legitimate interests. Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
To exercise any of these rights, contact us at [TO CONFIRM: 客服邮箱].
7. Right to complain
You have the right to lodge a complaint with a data protection supervisory authority. You may contact the authority responsible for your place of residence, your place of work, or the place of the alleged infringement.
8. Changes to this policy
We update this policy when our processing activities change or when legal requirements change. The version published on this page at the time of your visit applies.
Last updated: [TO CONFIRM: 生效日期]