1. Data Protection at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. For detailed information on data protection, please refer to our Privacy Policy set out below.
Data Collection on This Website
Who is responsible for data collection on this website?
The processing of data on this website is carried out by the website operator. You can find the operator's contact details in the section "Information on the Data Controller" of this Privacy Policy.
How do we collect your data?
Some data is collected when you voluntarily provide it to us, for example by completing a contact form.
Other data is collected automatically, or after you have given your consent, when you visit this website through our IT systems. This primarily includes technical information such as your web browser, operating system, or the time at which you accessed the website. This data is collected automatically as soon as you access this website.
What do we use your data for?
Some of the data is collected to ensure that the website is provided without technical errors. Other data may be used to analyse user behaviour.
Where contracts can be concluded or initiated via this website, the transmitted data will also be processed for quotations, orders, or other business enquiries.
What rights do you have regarding your data?
You have the right to obtain information, free of charge and at any time, about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of your personal data.
Where you have given your consent to data processing, you may withdraw that consent at any time with effect for the future. Furthermore, under certain circumstances, you have the right to request the restriction of the processing of your personal data.
You also have the right to lodge a complaint with the competent supervisory authority.
If you have any questions regarding data protection or your personal data, you may contact us at any time.
2. Hosting
We host the content of our website with the following provider:
Shopify
The provider is Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter referred to as "Shopify").
Shopify is a platform used to create and host websites. When you visit our website, Shopify collects your IP address, as well as information about the device and browser you are using.
Shopify also processes data relating to website traffic, visitor sources, customer behaviour, and user statistics. If you make a purchase through our website, Shopify additionally collects your name, email address, shipping and billing addresses, payment information, and other data related to your purchase (such as your phone number, order value, and similar information). Shopify also uses cookies stored in your browser for analytical purposes.
For further information, please refer to Shopify's Privacy Policy:
https://www.shopify.com/legal/privacy
The use of Shopify is based on Article 6(1)(f) GDPR, as we have a legitimate interest in ensuring the reliable and secure operation of our website.
Where your consent has been requested, the processing of your personal data is carried out exclusively on the basis of Article 6(1)(a) GDPR and, where applicable, Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG), insofar as your consent includes the storage of cookies or access to information stored on your device (for example, through device fingerprinting). You may withdraw your consent at any time with future effect.
Data Processing Agreement
We have concluded a Data Processing Agreement (DPA) with Shopify. This agreement ensures that Shopify processes the personal data of visitors to our website solely in accordance with our instructions and in compliance with the requirements of the General Data Protection Regulation (GDPR).
3. General Information and Mandatory Disclosures
Data Protection
We take the protection of your personal data very seriously. We process your personal data confidentially and in accordance with the applicable data protection laws and this Privacy Policy.
When you use this website, various types of personal data are collected. Personal data is any information that can be used to identify you personally. This Privacy Policy explains what data we collect, how we use it, and for what purposes. It also explains how and why this processing takes place.
Please note that data transmission over the Internet (for example, when communicating by email) may be subject to security vulnerabilities. Complete protection of data against unauthorized access by third parties cannot be guaranteed.
Information on the Data Controller
The controller responsible for data processing on this website is:
Roberto Lettow
Am Falkplatz 5
10437 Berlin
Germany
Phone: +49 152 05163846
Email: robertolettow@gmail.com
The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (such as names, email addresses, or similar information).
Data Retention
Unless a more specific retention period is stated in this Privacy Policy, your personal data will remain with us until the purpose for which it was collected no longer applies.
If you request the deletion of your data or withdraw your consent to processing, your personal data will be deleted unless we are legally required or otherwise permitted to retain it (for example, due to statutory tax or commercial record-keeping obligations). In such cases, the data will be deleted once those legal retention obligations no longer apply.
Legal Basis for Data Processing
Where you have provided your consent, we process your personal data on the basis of Article 6(1)(a) GDPR or, where special categories of personal data are processed, Article 9(2)(a) GDPR.
Where you have expressly consented to the transfer of personal data to countries outside the European Economic Area, processing is also based on Article 49(1)(a) GDPR.
Where you have consented to the storage of cookies or the access to information stored on your device (for example through device fingerprinting), processing is additionally based on Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Your consent may be withdrawn at any time.
Where processing is necessary for the performance of a contract or for carrying out pre-contractual measures, it is based on Article 6(1)(b) GDPR.
Where processing is necessary to comply with a legal obligation, it is based on Article 6(1)(c) GDPR.
Processing may also be carried out on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR.
The specific legal basis applicable in each case is explained in the relevant sections of this Privacy Policy.
Recipients of Personal Data
As part of our business activities, we cooperate with various external service providers. In certain cases, this requires the transfer of personal data to these third parties.
We only disclose personal data where:
- this is necessary for the performance of a contract,
- we are legally obliged to do so,
- we have a legitimate interest under Article 6(1)(f) GDPR, or
- another legal basis permits the transfer.
Where we engage data processors, personal data is processed only on the basis of a valid Data Processing Agreement (DPA).
Where personal data is processed jointly with another controller, a corresponding Joint Controller Agreement is concluded where required.
Withdrawal of Your Consent
Many data processing activities require your explicit consent.
You may withdraw any consent you have given at any time with future effect.
The withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
Right to Object (Article 21 GDPR)
Where your personal data is processed on the basis of Article 6(1)(e) or Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data, including any profiling based on those provisions.
The legal basis for the respective processing activity is explained in the relevant sections of this Privacy Policy.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing, including profiling related to direct marketing.
If you object, your personal data will no longer be used for direct marketing purposes.
Right to Lodge a Complaint
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a competent supervisory authority, particularly in the EU Member State of your habitual residence, your place of work, or the place where the alleged infringement occurred.
This right exists without prejudice to any other administrative or judicial remedies available to you.
Right to Data Portability
You have the right to receive personal data that we process automatically on the basis of your consent or for the performance of a contract in a structured, commonly used and machine-readable format.
Where technically feasible, you also have the right to request that this data be transmitted directly to another controller.
Right of Access, Rectification and Erasure
Within the framework of the applicable legal provisions, you have the right at any time to obtain information about your stored personal data, its origin, recipients, and the purpose of its processing.
You also have the right to request the correction or deletion of your personal data.
If you have any questions regarding your personal data, you may contact us at any time.
Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data.
This right applies in particular in the following situations:
- if you contest the accuracy of your personal data while we verify its accuracy;
- if the processing of your personal data is unlawful and you request restriction instead of deletion;
- if we no longer need your personal data, but you require it for the establishment, exercise or defence of legal claims;
- if you have objected to processing pursuant to Article 21(1) GDPR and it has not yet been determined whether our legitimate interests override yours.
Where the processing of your personal data has been restricted, such data may only be processed—with the exception of storage—with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
SSL/TLS Encryption
This website uses SSL/TLS encryption to protect the transmission of confidential information, such as enquiries or other data you send to us through the website.
You can recognise an encrypted connection by the change in your browser's address bar from http:// to https://, as well as by the padlock icon displayed in your browser.
When SSL/TLS encryption is enabled, any data transmitted to us cannot be read by unauthorized third parties.
4. Data Collection on This Website
Cookies
Our website uses cookies. Cookies are small data files that are stored on your device and do not cause any harm.
Cookies may be stored either temporarily for the duration of your visit (session cookies) or permanently on your device (persistent cookies). Session cookies are automatically deleted once you leave our website. Persistent cookies remain stored on your device until you delete them or they are automatically removed by your web browser.
Cookies may be placed either by us (first-party cookies) or by third parties (third-party cookies). Third-party cookies enable the integration of certain services provided by third parties, such as payment processing or analytics services.
Cookies serve a variety of purposes. Many cookies are technically necessary to ensure the proper operation of the website, as certain website features would not function without them (for example, shopping cart functionality or video playback). Other cookies help us analyse user behaviour or provide personalized advertising.
Technically necessary cookies are processed on the basis of Article 6(1)(f) GDPR, as we have a legitimate interest in providing a secure, functional, and optimized website.
Where your consent is required for the use of cookies or similar technologies, processing is carried out solely on the basis of your consent pursuant to Article 6(1)(a) GDPR and, where applicable, Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You may withdraw your consent at any time with future effect.
You may configure your browser to notify you before cookies are stored, allow cookies only in specific cases, reject cookies entirely, or automatically delete cookies when your browser is closed. Please note that disabling cookies may limit the functionality of certain parts of this website.
Further information about the cookies and services used on this website can be found in the relevant sections of this Privacy Policy.
Contact Form
If you submit an enquiry through our contact form, we will store the information you provide, including your contact details, for the purpose of processing your enquiry and responding to any follow-up questions.
We will not disclose this information to third parties without your consent.
The processing of your data is based on Article 6(1)(b) GDPR, where your enquiry relates to the performance of a contract or the implementation of pre-contractual measures.
In all other cases, processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in handling enquiries efficiently, or on your consent pursuant to Article 6(1)(a) GDPR, where such consent has been requested. You may withdraw your consent at any time with future effect.
The data you provide through the contact form will be retained until you request its deletion, withdraw your consent, or the purpose for which the data was collected no longer applies (for example, once your enquiry has been fully resolved). Mandatory statutory retention obligations remain unaffected.
Contact by Email or Telephone
If you contact us by email or telephone, we will process and store your enquiry together with any personal data it contains (such as your name, contact details, and the content of your enquiry) for the purpose of handling your request.
We will not share this information with third parties without your consent.
The processing of your data is based on Article 6(1)(b) GDPR, where your enquiry relates to the performance of a contract or the implementation of pre-contractual measures.
In all other cases, processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in responding efficiently to enquiries, or on your consent pursuant to Article 6(1)(a) GDPR, where such consent has been requested. You may withdraw your consent at any time with future effect.
The data you send us through email or telephone enquiries will be retained until you request its deletion, withdraw your consent, or the purpose for which the data was collected no longer applies (for example, once your enquiry has been fully resolved). Mandatory statutory retention obligations remain unaffected.
5. Social Media
This website integrates features of the Instagram service, which is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
When an Instagram feature is activated, a direct connection is established between your device and Instagram's servers. As a result, Instagram receives information about your visit to this website.
If you are logged into your Instagram account, clicking the Instagram button allows you to link content from this website to your Instagram profile. This enables Instagram to associate your visit to this website with your user account.
Please note that, as the operator of this website, we have no knowledge of the content of the data transmitted to Instagram or how Instagram uses that data.
The use of this service is based on your consent in accordance with Article 6(1)(a) GDPR and, where applicable, Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You may withdraw your consent at any time with future effect.
Where personal data is collected on our website through the Instagram integration and transmitted to Facebook and/or Instagram, we and Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, act as joint controllers for this specific processing activity in accordance with Article 26 GDPR.
This joint responsibility is limited exclusively to the collection of the data and its transmission to Facebook and Instagram. Any subsequent processing carried out by Facebook or Instagram is not covered by this joint responsibility.
Our respective obligations have been set out in a Joint Controller Agreement, which is available at:
https://www.facebook.com/legal/controller_addendum
Under this agreement, we are responsible for providing the required privacy information regarding the use of Facebook and Instagram services on our website and for implementing these services in compliance with applicable data protection laws. Meta is responsible for the security of Facebook's and Instagram's products.
You may exercise your data subject rights (such as requests for access to your personal data) directly with Meta. If you choose to exercise these rights through us, we are legally obliged to forward your request to Meta.
Transfers of personal data to the United States are based on the European Commission's Standard Contractual Clauses (SCCs).
Further information is available at:
- https://www.facebook.com/legal/EU_data_transfer_addendum
- https://privacycenter.instagram.com/policy/
- https://www.facebook.com/help/566994660333381
Additional information on how Instagram processes personal data can be found in Instagram's Privacy Policy:
https://privacycenter.instagram.com/policy/
Meta participates in the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States designed to ensure an adequate level of protection for personal data transferred to certified organizations in the United States.
More information is available at: