Privacy policy
Draft: this text is a framework. Passages in square brackets will be replaced before launch.
1. Controller
Imperion UG (haftungsbeschränkt), [ANGABE FEHLT], [ANGABE FEHLT], Deutschland. E-Mail: [ANGABE FEHLT].
2. Hosting and server log files
The shop runs on a server of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). When you open our pages the server processes technically necessary data (IP address, time, requested address, browser identifier) to deliver the page and to prevent abuse. Legal basis: Art. 6(1)(f) GDPR.
Retention of log files: [INFORMATION MISSING – duration]. A data processing agreement with Hetzner: [INFORMATION MISSING – please confirm].
3. Font
The font “Archivo” is hosted on our own server and loaded from there. There is no connection to Google Fonts or other font services.
4. Cookies and local storage
We only use technically necessary cookies and storage. No consent is required for this under § 25(2) no. 2 TDDDG, so there is no cookie banner. We do not use statistics, advertising or tracking cookies. If that changes, we will ask first with equal buttons “Necessary only” and “Allow all”.
- 7gz_zugang (cookie, at most 24 hours): remembers that you entered a valid drop code.
- 7gz_lang (cookie, 1 year): remembers the language you chose.
- 7gz_tasche (local storage in your browser, until you delete it): your shopping bag.
5. Visitor counts
To show “visitors now” in the admin area we count page views without a cookie. The IP address is only held as a hash in memory and not stored permanently; nothing is passed on.
6. Orders and contract performance
For your order we process your name, delivery address, email address, order data and payment status. Legal basis: Art. 6(1)(b) GDPR (contract), for invoices and bookkeeping Art. 6(1)(c) GDPR. Retention follows the statutory periods (§ 147 AO, § 257 HGB).
7. Payment via Stripe
Payment takes place on the secure page of Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland). Depending on the payment method (e.g. card, Apple Pay, Google Pay, PayPal, Klarna) payment data goes directly to Stripe or the payment provider – it does not pass through our server. Stripe may also transfer data to Stripe, Inc. (USA).
Stripe privacy information: stripe.com/privacy. Basis for transfers to third countries: [INFORMATION MISSING – please check].
8. Shipping
For delivery we pass your name and delivery address to the parcel carrier (DHL, Deutsche Post DHL Group). DHL only sends a parcel announcement by email if you expressly ask for it at checkout.
9. Email sending
We send order confirmations, confirmations of receipt of withdrawals and drop news through this mail server: [MAIL PROVIDER – set in Boss → Settings → Email sending]. Your email address is processed together with the content of the message. Legal basis: Art. 6(1)(b) GDPR.
10. Drop news (email sign-up)
If you enter your email on the start page for the drop code, we send a confirmation email (double opt-in) and the code when the drop starts. Legal basis: consent, Art. 6(1)(a) GDPR. You can unsubscribe at any time with the link in every email.
11. Withdrawal button
In the form “Withdraw from contract” we record order number, email address, optionally name and the items concerned, and the time of receipt, to process the withdrawal and confirm receipt. Legal basis: Art. 6(1)(b) and (c) GDPR.
12. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and to withdraw consent with effect for the future. Write to us at the email address above. You can also complain to a data protection authority.
13. Further information
[TEXT VON IHNEN – z. B. aus einem Rechtstext-Generator]