1. Person responsible

Responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

STRAMM Design UG
Kölnerstraße 146, 51702 Bergneustadt
shop@strammdesign.com

2. Collection and storage of personal data as well as the type and purpose of use

a) When you visit the website

When you visit our website, the following data is automatically collected:

• IP address
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• Browser type, operating system, internet provider

Purpose: technical provision, stability, security.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest).

b) For orders in the webshop

We process the following data:

• Name, billing and delivery address
• Email address, telephone number
• Payment information (depending on the payment method chosen)

Purpose: Contract processing (orders, delivery, invoicing, communication).
Legal basis: Art. 6 (1) (b) GDPR.

c) Contact

If you contact us via contact form or email, we will save your information for processing.
Legal basis: Art. 6 (1) (b)/(f) GDPR.

d) Newsletter

If you subscribe to our newsletter, we will use your email address to regularly send you information about our products and promotions.

• Shipping only after express consent (double opt-in).
• You can unsubscribe at any time, e.g., via the unsubscribe link in the newsletter.

Legal basis: Art. 6 (1) (a) GDPR.
If we use an external service provider (e.g. Shopify Email, Klaviyo, Mailchimp, Brevo), order processing takes place in accordance with Art. 28 GDPR.

3. Sharing of data

Data will only be passed on if it is necessary for the fulfilment of the contract or if there is a legal obligation:

• Shopify system: Shopify International Ltd., Ireland. Data may be transferred to Shopify Inc., Canada/USA. Basis: EU standard contractual clauses. Information: https://www.shopify.com/legal/privacy

Payment service providers:

PayPal (Europe) S.à rl et Cie, SCA , Luxembourg

Shopify Payments (Stripe Payments Europe Ltd.) , Ireland

Klarna Bank AB (publ) , Sweden – Klarna may conduct a credit check and transmit data to credit agencies when certain payment methods (e.g., purchase on account, installment purchase) are selected. Information: https://www.klarna.com/de/datenschutz/

4. Data transfer to third countries

Shopify, Google, and Meta may transfer data to the USA. Basis: EU standard contractual clauses (SCCs) pursuant to Art. 46 GDPR.

5. Storage period

• Order data: according to commercial and tax law regulations 10 years
• Customer data: as long as your customer account is active
• Newsletter data: until consent is revoked

6. Cookies and tracking

We use cookies and tracking tools.

a) Necessary cookies

For the functionality of the shop (e.g. shopping cart, login).
Legal basis: Art. 6 (1) (b) GDPR.

b) Google Analytics

We use Google Analytics, a web analysis service provided by Google Ireland Ltd. (Ireland).

• Collection: IP address, browser information, click behavior
• Purpose: Analysis of user behavior, optimization of the shop
• Data transfer: USA (SCCs) if applicable

Legal basis: Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TTDSG (consent via cookie banner).
Further information: https://policies.google.com/privacy

7. Obligation to provide data

• Certain data (name, address, payment information) is required for orders.
• Without this information, a contract cannot be concluded.
• Providing additional information (e.g. telephone number) is voluntary but facilitates processing.

8. Rights of data subjects

You have the right to:

• Information (Art. 15 GDPR)
• Correction (Art. 16 GDPR)
• Deletion (Art. 17 GDPR)
• Restriction (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Revocation of consent (Art. 7 para. 3 GDPR)

You can also lodge a complaint with a data protection supervisory authority (Article 77 GDPR).

9. Security

Our website uses SSL/TLS encryption to protect your data during transmission.

10. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy to legal changes or new services.
Version: August 2025

11. Contact

For questions about data protection:

STRAMM Design UG
Kölnerstraße 146, 51702 Bergneustadt

shop@strammdesign.com