Privacy Policy

1. Controller

[Your Company Name]
[Street Address]
[Postal Code, City]
Germany
Phone: [Phone Number]
Email: [Email Address]
The controller responsible for data processing under the General Data Protection Regulation (GDPR) is the company listed above.

2. Collection and Storage of Personal Data, and Purpose of Use

1. a) When visiting our website
   When you access our website [afrastore.de], your browser automatically sends information to our server, which is temporarily stored in a log file:

• IP address
• Date and time of access
• Name and URL of the accessed file
• Referring website (referrer URL)
• Browser type and, if applicable, operating system

Purpose:

• Ensuring smooth connection setup
• Ensuring system security and stability
• Technical administration

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

b) When using our contact form or contacting us via email
If you contact us, we process the following data:

• Name
• Email address
• Message content
• Phone number (optional)

Purpose: Responding to your inquiry
Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps)

c) When placing an order
To process your order, we collect the following information:

• First and last name
• Address
• Email address
• Phone number (optional)
• Payment data

Purpose:

• Contract fulfillment
• Shipping and invoicing

Legal basis: Art. 6(1)(b) GDPR (contract performance)

3. Data Sharing

Your personal data is only shared with third parties as necessary for the following purposes:

• Shipping providers (e.g., DHL, Hermes)
• Payment processors (e.g., PayPal, Klarna, Stripe)
• Tax consultants for accounting
• Hosting providers for website operation

We do not share data with third parties for advertising purposes without your explicit consent.

4. Cookies

Our website uses cookies—small text files stored on your device.

Purpose:

• Improving user experience
• Shopping cart functionality
• Analyzing user behavior

You can disable cookies via your browser settings at any time.

Legal basis: Art. 6(1)(a) GDPR (consent), where applicable

5. Analytics Tools (e.g., Google Analytics) (optional)

We may use Google Analytics, a web analytics service provided by Google Ireland Ltd. Information collected is typically transferred to a Google server in the USA.

Consent is requested via our cookie banner when you first visit the site.

Legal basis: Art. 6(1)(a) GDPR (consent)

6. Newsletter (optional)

When you subscribe to our newsletter, we use your email address to send periodic updates and promotional content.

You can unsubscribe at any time using the link provided in each email.

Legal basis: Art. 6(1)(a) GDPR (consent)

7. Your Rights

You have the right to:

• Access your data (Art. 15 GDPR)
• Rectify inaccurate data (Art. 16 GDPR)
• Erase your data (Art. 17 GDPR)
• Restrict processing (Art. 18 GDPR)
• Object to processing (Art. 21 GDPR)
• Data portability (Art. 20 GDPR)

To exercise these rights, contact us at: [Email Address]

8. Withdrawal of Consent

You may withdraw your consent at any time, with future effect.
Processing carried out before withdrawal remains lawful.

9. Data Security

We use SSL encryption and appropriate technical and organizational measures to protect your data against manipulation, loss, or unauthorized access.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection authority. For example:

Federal Commissioner for Data Protection and Freedom of Information (BfDI)
https://www.bfdi.bund.de