Draft. Every field in square brackets must be replaced by the seller and reviewed by a lawyer before going live. This is not legal advice.

Privacy Policy

Data Controller

[COMPANY OR FULL NAME], [ADDRESS], [COUNTRY].
Contact: [CONTACT EMAIL]

Data Protection Officer

[APPOINTED: NAME AND CONTACT / NOT APPOINTED, as not required]

Hosting

This website is hosted by Vercel Inc. When you access it, technically necessary server log data is processed, including IP address, timestamp, requested resource, and user agent. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in secure and stable operation.

[CONFIRM AND LINK THE DATA PROCESSING AGREEMENT WITH VERCEL]

Payment Processing

Purchases are processed via Stripe. When you start the checkout process, you are redirected to Stripe. Stripe processes the data required for payment, including payment method, name, and billing address, under its own responsibility. The legal basis is Art. 6(1)(b) GDPR, the performance of the purchase agreement.

We ourselves do not receive complete payment data. Further information can be found in Stripe's privacy policy.

Cookies and Analytics

[CONFIRM STATUS. This website currently does not use analytics or marketing cookies. If such a tool is added, a consent banner under Section 25 TDDDG and an update to this section will be required.]

Your Rights

Right to access under Art. 15 GDPR
Right to rectification under Art. 16 GDPR
Right to erasure under Art. 17 GDPR
Right to restriction of processing under Art. 18 GDPR
Right to data portability under Art. 20 GDPR
Right to object under Art. 21 GDPR
Right to lodge a complaint with a supervisory authority under Art. 77 GDPR

Data Retention

[ADD RETENTION PERIOD PER CATEGORY. Purchase receipts are subject to statutory retention periods.]

Last Updated

[DATE OF LAST UPDATE]