Note: this page is a template. It has to be adapted to the services, tools and processing purposes actually in use, and reviewed legally before going live. The content is not a substitute for legal advice.
1. Controller
The controller for data processing on this website is:
[Full company name]
[Address]
Email: [email address]
2. Your rights
You have the right at any time to information about the data stored about you, its origin and recipients, and the purpose of processing. You also have a right to rectification, erasure, restriction of processing and data portability, as well as a right to object. You may also lodge a complaint with the competent supervisory authority.
3. Contact form and email contact
If you contact us through the contact form or by email, we process the details you provide (in particular name, email address, message and, where applicable, the service package selected) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR for pre-contractual measures, or Art. 6(1)(f) GDPR based on our legitimate interest in answering enquiries. The data is deleted as soon as it is no longer needed for the purpose of processing and no statutory retention obligations prevent this.
4. Hosting and shop system
This website runs on Shopify. The provider is [enter the Shopify contracting party and address]. When the site is accessed, technically necessary data such as IP address, date and time of access, browser type and pages viewed is processed. The legal basis is Art. 6(1)(f) GDPR. [Add details of the data processing agreement and of any transfers to third countries.]
5. Cookies and reach measurement
[List the cookies and the analytics or marketing services actually in use, each with purpose, legal basis, storage period and how consent can be withdrawn. If non-essential cookies are used, a consent solution is additionally required.]
6. Fonts
This website embeds fonts from Google Fonts. This opens a connection to Google servers and transmits your IP address. [Add the legal basis and, where applicable, the consent mechanism, or embed the fonts locally.]
7. Storage period
Unless stated otherwise in this notice, we store personal data only for as long as is necessary for the respective purpose or as statutory retention periods require.
Last updated: [enter date]