Privacy Policy

Controller / Responsible Party:
Atelier BACH.Bogen
Michael Bach
Im Schellenkönig 56 B
Germany
E-Mail: contact@bach-bogen.de

Data Protection Officer:
No data protection officer has been appointed, as the legal requirements do not apply.


1. General Information on Data Processing

The protection of your personal data is very important to us. This Privacy Policy explains which data we collect, how we use it, and what rights you have under the General Data Protection Regulation (GDPR).

This Privacy Policy applies to the use of our online shop at https://www.bach-bogen.de and its services. External websites we link to (e.g., blogs on the WordPress multisite) are subject to their own privacy policies.


2. Collection and Processing of Personal Data

A. Website Visit

When you visit our shop, certain data is automatically collected by the web server, which your browser transmits. This includes:

  • IP address (anonymized or pseudonymized where possible)

  • Browser type and version

  • Date and time of access

  • Referring website

  • Pages accessed

Legal basis: Art. 6(1)(f) GDPR (legitimate interest: operation and security of the shop).


B. Orders and Customer Account

When you place an order or create a customer account, we collect personal data such as:

  • Name, address, e-mail address

  • Order details (items, quantity, price)

  • Payment information (PayPal account, credit card details via Stripe)

Purpose: Order processing, contract fulfillment, delivery, invoicing.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).


C. Payment Processing

PayPal:

  • When using PayPal, personal data is transmitted to PayPal to process the payment.

  • Responsible party: PayPal Pte. Ltd.

  • Privacy information: https://www.paypal.com/privacy

Stripe (credit card payments):

  • Credit card data is transmitted to Stripe Payments Europe Ltd. (Ireland) for payment processing and fraud prevention.

  • Privacy information: https://stripe.com/privacy

  • Data may be transferred to the USA under standard contractual clauses.


3. Cookies

We use technically necessary cookies only, e.g.:

  • Shopping cart functionality

  • Session management

  • Ensuring proper operation of the shop

Legal basis: Art. 6(1)(f) GDPR (legitimate interest: shop operation).
Note: If you do not accept cookies, certain features may not function properly.

Optional tracking/marketing: Currently, we do not use any additional analytics or marketing cookies.


4. Data Retention

  • Order data: legal retention periods (commercial and tax law)

  • Customer account: until deletion by the user or by us after inactivity

  • Server logs: maximum 90 days


5. Data Sharing

Personal data is only shared when necessary for order processing (e.g., shipping service providers, payment providers). Further sharing only occurs:

  • as required by law (e.g., tax authorities)

  • to protect our rights (e.g., in case of fraud)

  • with your explicit consent


6. Your Rights

Under GDPR, you have the following rights:

  1. Right of access to your personal data

  2. Right to rectification of incorrect data

  3. Right to erasure (“right to be forgotten”)

  4. Right to restriction of processing

  5. Right to object to processing

  6. Right to data portability

  7. Right to lodge a complaint with a supervisory authority

Contact for exercising your rights: contact@bach-bogen.de


7. External Links

Our website contains links to external websites (e.g., WordPress multisite blogs). We are not responsible for the data processing on these sites. Please consult the respective privacy policies of the operators.


8. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy if necessary. Changes will be posted on this page. By continuing to use our shop, you agree to the current version.