Data protection

1. General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified.

For detailed information on data protection, please refer to the explanations below.

2. Controller

Volker Pfaff
Pfarrgartenweg 4
72141 Walddorfhäslach
Phone: 0176 / 40196395
E-mail: volkerpfaff@arcor.de

3. Hosting via Shopify

This website is hosted via Shopify.
Provider:
Shopify International Ltd.
2nd Floor, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Shopify collects personal data when you interact with this online shop. This data processing is carried out on our behalf based on a data processing agreement in accordance with Art. 28 GDPR.

More information: https://www.shopify.de/legal/datenschutz

4. Data Collection on this Website

a) Server Log Files & Technical Data

When you visit the website, technical data is automatically collected by Shopify:

  • IP address

  • Browser type and version

  • Time of access

  • Visited pages

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

b) Contact Forms / Email / Phone

If you contact us, we process your information to handle your request.

Legal bases:

  • Art. 6 para. 1 lit. b GDPR (contract/initiation)

  • Art. 6 para. 1 lit. f GDPR (legitimate interest)

5. Cookies & Consent

This website uses cookies and similar technologies. Technically necessary cookies are set without your consent, all others only after consent via a cookie banner (e.g. Consentmo GDPR App or comparable app).

Legal bases:

  • Art. 6 para. 1 lit. a GDPR & § 25 TTDSG (consent)

  • Art. 6 para. 1 lit. f GDPR (technically necessary cookies)

6. Data Transfer to Third Countries

Shopify also uses servers in Canada and possibly in the USA. Canada is considered a safe third country by the EU Commission. For the USA, data transfer is based on Standard Contractual Clauses (SCCs) in accordance with Art. 46 GDPR.

7. Payment Processing via Shopify

When you make a purchase from us, payment data is processed via the integrated services of Shopify Payments, PayPal or similar.
These providers receive access to payment information (e.g., credit card data) depending on the method chosen.

Legal basis: Art. 6 para. 1 lit. b GDPR

8. Your Rights

You have the right at any time to:

  • Information according to Art. 15 GDPR

  • Rectification according to Art. 16 GDPR

  • Erasure according to Art. 17 GDPR

  • Restriction according to Art. 18 GDPR

  • Objection according to Art. 21 GDPR

  • Data portability according to Art. 20 GDPR

  • Withdrawal of given consents with effect for the future

9. Right to Complain

You have the right to lodge a complaint with a supervisory authority regarding data protection matters. For example, the competent authority is:

State Commissioner for Data Protection Baden-Württemberg
https://www.baden-wuerttemberg.datenschutz.de

10. Storage Duration

Personal data is only stored for as long as necessary for the respective purpose or as required by legal retention periods.

11. SSL/TLS Encryption

This page uses SSL encryption. You can recognize a secure connection by "https://" and the padlock symbol in your browser.

12. Third-Party Providers & Tools (if used)

a) WhatsApp Business

Communication via WhatsApp is based on legitimate interest (Art. 6 para. 1 lit. f GDPR). Provider:
WhatsApp Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland
Privacy Policy: https://www.whatsapp.com/legal/#privacy-policy

b) Facebook / Instagram Plugins

When social plugins are activated, data is transferred to Meta. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR).

c) Google Maps / Google Fonts (if integrated)

If used, their use is based on legitimate interest or consent.

Submit Withdrawal Request

Please fill out the following form to submit your withdrawal request.

EU Widerrufsbutton logo EU Withdrawal Button