Privacy Policy

Last updated: March 2026

1. Controller (Data Controller under GDPR)

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Laszlo Horvath
Sole Proprietorship (Einzelunternehmen)
Pionierstraße 79
13589 Berlin
Germany
Email: info@drucktoner.de

2. General Information on Data Processing

We process personal data exclusively in accordance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Personal data means any information relating to an identified or identifiable natural person.

3. Legal Basis for Processing (Art. 6 GDPR)

We process personal data based on:

• Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures

• Art. 6(1)(c) GDPR – compliance with legal obligations

• Art. 6(1)(f) GDPR – legitimate interests

• Art. 6(1)(a) GDPR – your consent

4. Categories of Personal Data Collected

We may process the following personal data:

• Name

• Billing and shipping address

• Email address

• Phone number

• Payment information

• Order history

• IP address

• Usage data (e.g. page views, interactions)

5. Purpose of Data Processing

Contract Fulfillment

To process orders, deliver goods, handle payments and provide customer service.

Legal Obligations

To comply with statutory retention requirements under commercial and tax law.

Legitimate Interests

To improve our website, ensure system security, and prevent fraud.

Consent

For marketing communications and tracking technologies (only if explicitly consented).

6. Payment Processing (Stripe)

We use:

Stripe Payments Europe Ltd.
1 Grand Canal Street Lower
Grand Canal Dock
Dublin, Ireland

for payment processing.

Processing is based on Art. 6(1)(b) GDPR.

Stripe may transfer data to third countries. Such transfers are based on EU Standard Contractual Clauses in accordance with Art. 46 GDPR.

We have concluded a Data Processing Agreement (Art. 28 GDPR) with Stripe.

7. Hosting

Our website is hosted by a European hosting provider.

A Data Processing Agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

8. Shipping Providers

To deliver your order, we may share necessary data with:

• HERMES

Data transfer is based on Art. 6(1)(b) GDPR for contract fulfillment.

9. Cookies and Consent Management

Our website uses cookies.

Strictly Necessary Cookies

Required for website functionality (e.g. shopping cart, login).
Legal basis: Art. 6(1)(f) GDPR.

Analytics and Marketing Cookies

Used only with your explicit consent.
Legal basis: Art. 6(1)(a) GDPR.

You may withdraw or modify your consent at any time via the cookie settings on our website.

10. Google Analytics (with Consent Mode v2)

If you have given consent, we use:

Google Analytics (Google Ireland Ltd., Dublin, Ireland)

We use Google Consent Mode v2.
Without consent, only anonymized, cookieless signals may be transmitted.

IP addresses are anonymized.

Data may be transferred to the United States. Transfers are based on EU Standard Contractual Clauses.

11. Google Ads and Conversion Tracking

If you have provided consent, we use Google Ads conversion tracking.

Legal basis: Art. 6(1)(a) GDPR.

Without consent, no personalized advertising will be carried out.

12. Data Retention

Personal data is stored only as long as:

• necessary for contract fulfillment

• required by statutory retention obligations (e.g. 10 years under German tax law)

13. Your Rights Under GDPR

You have the following rights:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR)

• Right to withdraw consent

To exercise your rights, please contact us at info@drucktoner.de.

14. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection law.

Competent supervisory authority:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59-61
10555 Berlin
Germany

15. Data Security

We use SSL encryption and appropriate technical and organizational measures pursuant to Art. 32 GDPR to protect your data.

16. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy when necessary.
The current version is always available on our website.