Privacy Policy

GDPR-compliant placeholder. Replace with your final policy before launch.

1. Controller

The controller responsible for data processing on this site is [Full Name, Address, Email]. See the Impressum for full contact details.

2. Data we collect

We collect data you provide directly (e.g. email address, name, message) and a minimal amount of technical data necessary to operate the site (e.g. server logs).

3. Purposes and legal basis

Order processing (Art. 6(1)(b) GDPR), email communication you opt into (Art. 6(1)(a) GDPR), and legitimate interests in operating a secure website (Art. 6(1)(f) GDPR).

4. Payments

Payments are processed by Stripe. We do not store full card details. Stripe's privacy policy applies to data they process.

5. Your rights

You have the right to access, rectify, delete, and restrict processing of your data, data portability, and to object to processing. Contact us to exercise these rights.

6. Contact

For privacy questions, contact [email@example.com].