Privacy policy

1) Introduction and Contact Details of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how your personal data is handled when using our website. Personal data means all data by which you can be personally identified.

1.2 The controller resonsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:Diana Ispas - Stickcaravan Alter Bahnhof 14 , 93093 Donaustauf,Germany, Phone: 0151 4004 9541
Email: dianaispas.office@gmail.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.


2) Data Collection When Visiting Our Website

2.1 When using our website purely for informational purposes, meaning if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (“server log files”). When you access our website, we collect the following data technically necessary to display the website to you:

  • Visited website

  • Date and time of access

  • Amount of data sent in bytes

  • Source/reference from which you accessed the page

  • Browser used

  • Operating system used

  • IP address used (possibly in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.


3) Hosting & Content Delivery Network

Shopify

For hosting our website and displaying the page content, we use the system of the following provider:

Shopify International Limited
Victoria Buildings, 2nd Floor
1-2 Haddington Road
Dublin 4, D04 XN32
Ireland

Data may also be transferred to:

Shopify Inc.
150 Elgin St
Ottawa, ON K2P 1L4
Canada

All data collected on our website is processed on the provider’s servers. We have concluded a data processing agreement with the provider, ensuring the protection of our visitors’ data and prohibiting unauthorized disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.


4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some cookies are automatically deleted after closing the browser (“session cookies”), while others remain on your device longer and enable the storage of page settings (“persistent cookies”).

If personal data is processed through individual cookies used by us, the processing takes place:

  • according to Art. 6(1)(b) GDPR for contract performance,

  • according to Art. 6(1)(a) GDPR in the case of consent,

  • or according to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible website functionality and customer-friendly website design.

You can configure your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies in certain cases or generally.

Please note that if cookies are not accepted, the functionality of our website may be limited.


5) Contacting Us

When contacting us (e.g. via contact form or email), personal data is processed exclusively for the purpose of handling and responding to your inquiry and only to the extent necessary.

The legal basis for processing this data is our legitimate interest in responding to your inquiry according to Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR.

Your data will be deleted once your request has been fully resolved, provided that no statutory retention obligations prevent deletion.


6) Comment Function

When using the comment function on this website, information about the time of comment creation and the chosen commenter name will be stored and published. Your IP address will also be logged and stored for security reasons in case third-party rights are violated or illegal content is posted.

Your email address is required so we can contact you if a third party objects to your published content as unlawful.

The legal basis for storing your data is Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties.


7) Data Processing When Opening a Customer Account

According to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide this data when opening a customer account. Which data is required can be seen from the input form on our website.

Deletion of your customer account is possible at any time by sending a message to the controller mentioned above. After deletion, your data will be deleted provided all contracts concluded via the account have been fully processed and no statutory retention obligations apply.


8) Use of Customer Data for Direct Advertising

8.1 Email Newsletter Registration

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address.

We use the double opt-in procedure to ensure that you only receive newsletters after explicitly confirming your consent.

You may unsubscribe at any time using the unsubscribe link in the newsletter or by contacting us directly.


8.2 Newsletter for Existing Customers

If you provided your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar products or services from our range via email.

You can object to the use of your email address for advertising purposes at any time.


9) Data Processing for Order Handling

9.1 Transmission of Image Files by Email

Customers may send image files by email to personalize products. The submitted image is used exclusively for producing the personalized product.

After order completion, the transmitted image files are automatically and completely deleted.


9.2 Shipping and Payment Processing

Personal data necessary for processing the contract may be transferred to shipping providers and payment service providers.


9.3 Shipping Service Providers

We work with the following shipping providers:

  • Deutsche Post

  • DHL

  • Hermes

If you have expressly consented, your email address and/or phone number may be shared with the shipping provider to coordinate delivery.


9.4 Payment Service Providers

PayPal

This website offers payment methods from:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
L-2449 Luxembourg

Depending on the payment method selected, payment data and order information may be transferred to PayPal for payment processing or credit checks.


10) Web Analytics Services

Shopify Analytics

This website uses Shopify Analytics to evaluate user behavior and create pseudonymized usage profiles.

Processing only takes place if you have given explicit consent according to Art. 6(1)(a) GDPR.


11) Website Functionalities

YouTube

This website uses YouTube plugins provided by:

Google Ireland Limited
Gordon House
4 Barrow St
Dublin
Ireland

When playing embedded videos, data including your IP address may be transferred to Google.


12) Tools and Miscellaneous

12.1 sevDesk

We use sevDesk cloud accounting software for bookkeeping and invoice processing.

12.2 Cookie Consent Tool

This website uses a cookie consent tool to obtain legally required consent for cookies and cookie-based services.


13) Rights of the Data Subject

You have the following rights under GDPR:

  • Right of access

  • Right to rectification

  • Right to erasure

  • Right to restriction of processing

  • Right to notification

  • Right to data portability

  • Right to withdraw consent

  • Right to lodge a complaint

Right to Object

If we process your personal data based on legitimate interests, you have the right to object at any time for reasons arising from your particular situation.

If your data is processed for direct marketing purposes, you may object at any time.


14) Storage Duration of Personal Data

Personal data is stored according to the applicable legal basis, processing purpose, and statutory retention periods.

Data processed based on consent will be stored until consent is withdrawn.

Data required for contractual or legal obligations will be deleted after statutory retention periods expire unless further storage is necessary.