Privacy policy
Sample template – not legal advice. Have it reviewed and adapted by a lawyer before use. All company details are fictional.
Sample template for the "Stille Räume" demo store. Not legal advice, fictional details, have it reviewed before use.
1. Controller
Stille Räume Handelsgesellschaft mbH (fictional)
Werkstattgasse 15
79098 Freiburg
Germany
Email: datenschutz@stille-raeume.example
2. Hosting and server log files
When you visit our pages we process technically necessary data (IP address, time, page requested, browser type) to deliver the website securely (Art. 6 (1) (f) GDPR). Log files are deleted after 14 days.
3. Cookies and consent
We set technically necessary cookies (cart, session, security) on the basis of § 25 (2) TDDDG. Analytics and marketing services are loaded only after your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR), which you can withdraw at any time in the cookie settings. We treat the Global Privacy Control signal as a refusal.
4. Customer account and orders
To perform the contract we process your name, address, email address, phone number (optional), order and payment data (Art. 6 (1) (b) GDPR). Invoice-related data is retained for up to eight or ten years pursuant to § 147 AO and § 257 HGB (Art. 6 (1) (c) GDPR).
5. Payment service providers
Depending on the payment method chosen, we transfer the necessary data to the respective payment service provider. Card data never reaches our servers.
6. Shipping
For delivery we pass your name and delivery address to the carrier. We only share your email address for delivery notifications with your consent.
7. Newsletter
Our newsletter uses double opt-in; we log the time and text version of your consent. You can unsubscribe at any time via the link in every email.
8. Reviews
If you publish a review, we display your first name, the initial of your surname and your country. Linking it to your order serves solely to label it as a verified purchase.
9. Fonts and external content
Fonts are served from our own server; no data is transferred to font providers.
10. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR) as well as the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). No automated decision-making takes place.