1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR; German: DSGVO) is Damian Haller, Ártala – Jahrzähler, Haldenrainstraße 156, 70437 Stuttgart, Germany, email: [email protected]. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website for informational purposes only, i.e. when you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to the page server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently review server log files if there are concrete indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). You can recognise an encrypted connection by the character string "https://" and the lock symbol in your browser bar.

3) Hosting & Content Delivery Network

For the hosting of our website, we use Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare provides the infrastructure through which our static web pages are delivered (Cloudflare Pages) and also serves as a Content Delivery Network (CDN).

Cloudflare is a US-based company. The data transfer to the USA is secured on the basis of EU Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR and the Data Processing Addendum (DPA) from Cloudflare. Cloudflare is also certified under the EU-US Data Privacy Framework.

When accessing our website, Cloudflare may process access data for technical reasons (IP address, page accessed, time of access). Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in a secure and efficient provision of our website.

Further information on data protection at Cloudflare can be found at: cloudflare.com/privacypolicy

3.2 For displaying current prices on our shop page, a server-side function at Supabase, Inc., 970 Toa Payoh North #07-04, Singapore 318992, is called. In this process, your IP address may be technically transmitted to Supabase. No further personal data is collected. The data transfer is secured on the basis of EU Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. Further information: supabase.com/privacy

4) Cookies

This website uses no tracking cookies and does not set any cookies for advertising purposes. Only technically necessary cookies are used insofar as they are required for the functioning of the website (e.g. session cookies). Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in the best possible functionality of the website.

You can configure your browser to be informed about the setting of cookies and to decide individually whether to accept them, or to exclude the acceptance of cookies for certain cases or in general.

5) Contacting Us

When contacting us (e.g. by email), personal data is collected. This data is stored and used exclusively for the purpose of responding to your enquiry or for contacting you and the associated technical administration.

The legal basis for the processing of this data is our legitimate interest in responding to your enquiry pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted after your enquiry has been conclusively processed. This is the case when the circumstances indicate that the matter in question has been conclusively clarified and provided that no statutory retention obligations apply.

6) Data Processing When Opening a Customer Account

Pursuant to Art. 6(1)(b) GDPR, personal data continues to be collected and processed to the extent necessary if you provide it to us when opening a customer account. Which data is required for opening an account can be found in the input mask of the corresponding form on our website.

Your customer account can be deleted at any time by sending a message to the aforementioned address of the controller. After deletion of your customer account, your data will be deleted, provided that all contracts concluded through it have been fully processed, no statutory retention periods apply, and there is no legitimate interest on our part in the continued storage.

7) Use of Customer Data for Direct Marketing

7.1 Registration for Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving newsletters.

By activating the confirmation link, you give us your consent for the use of your personal data pursuant to Art. 6(1)(a) GDPR. When registering for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when registering for the newsletter is used exclusively for the purpose of promotional communication by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we have reserved a further use of data that is permitted by law and about which we inform you in this statement.

7.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you email offers for products similar to those already purchased from our range. Pursuant to § 7(3) UWG (German Unfair Competition Act), we do not need to obtain your separate consent for this. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalised direct marketing pursuant to Art. 6(1)(f) GDPR. If you have initially objected to the use of your email address for this purpose, we will not send any emails.

You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller mentioned at the beginning. Only transmission costs at basic rates will be incurred. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

7.3 Brevo

Our email newsletters and other promotional email communications are sent via the provider Brevo Deutschland GmbH, Köpenicker Str. 126, 10179 Berlin, Germany.

On the basis of our legitimate interest in effective and user-friendly email marketing, we pass on the data you provided during registration to this provider pursuant to Art. 6(1)(f) GDPR so that it can handle the email dispatch on our behalf.

We reserve the right, exclusively on the basis of your express consent pursuant to Art. 6(1)(a) GDPR, to carry out a statistical performance evaluation of email campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the content of the newsletter. In this process, device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but not merged with other data sets.

You can revoke your consent to email tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.

8) Data Processing for Order Processing

8.1 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us is passed on to the commissioned credit institution pursuant to Art. 6(1)(b) GDPR.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data you provided when ordering in order to personally inform you within the scope of our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your contact data is used strictly for the purpose of notifications about updates owed by us and is only processed by us to the extent necessary for the respective notification.

For the processing of your order, we also work with the following service provider, who supports us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to this service provider in accordance with the following information.

8.2 Use of Stripe

The following provider's online payment method is available on this website: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

When selecting a payment method from this provider that requires advance payment by you (such as credit card payment or SEPA direct debit), the payment data you have provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order are passed on to the provider pursuant to Art. 6(1)(b) GDPR. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only insofar as it is necessary for this purpose.

You can object to this processing of your data at any time by sending us a message or by contacting the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.

9) Rights of the Data Subject

9.1 The applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby the respective legal basis for the exercise conditions is referenced:

9.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

10) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, the processing purpose and, if applicable, additionally by the respective statutory retention period (e.g. commercial and tax retention periods).

When processing personal data on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you revoke your consent.

If statutory retention periods exist for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6(1)(b) GDPR, this data is routinely deleted after the retention periods have expired, provided that it is no longer necessary for the fulfilment or initiation of a contract and/or there is no legitimate interest on our part in the continued storage.

When processing personal data on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

The following specific retention periods apply:

Last updated: 28 June 2026