Data Controller

stilform GmbH
Buttstraße 4
22767 Hamburg
Germany

Email: info@stilform.com

Thank you for visiting our online store. Protecting your personal data is of utmost importance to us. Below, you will find detailed information about how your data is handled.

1. Access Data and Hosting

You may use our website without disclosing personal information. Each time the website is accessed, the web server automatically stores a server log file that includes the name of the requested file, IP address, date and time of access, data volume transferred, and the requesting provider (access data). This data is evaluated solely to ensure the smooth operation of the website and to improve our services. This serves our legitimate interest in accordance with Art. 6 (1)(f) GDPR. Access data is deleted no later than seven days after your visit.

1.1 Hosting

Some hosting and presentation services for our website are provided by external service providers acting on our behalf. Unless stated otherwise in this policy, all access and form-submitted data is processed on their servers. For more information about our service providers and the legal basis for our cooperation with them, please contact us.

Service provider countries without adequacy decision by the EU Commission: USA. Safeguards: Standard contractual clauses by the European Commission.

Service provider countries with adequacy decision: Canada.

1.2 Content Delivery Network

We use a Content Delivery Network (CDN) to improve load times for certain content. Large files are delivered via regional CDN servers of external providers. Accordingly, access data is processed on these servers under a processing agreement. For more information, please refer to our contact details.

Service provider countries with adequacy decision: Israel, Canada.
Without adequacy decision: Australia, China, India, USA. Safeguards: Standard contractual clauses by the European Commission.

2. Data Collection and Use for Contract Processing and Customer Contact

We collect personal data when you voluntarily provide it during your order or when contacting us (e.g., via contact form or email). Required fields are marked accordingly. The data collected is used in accordance with Art. 6 (1)(b) GDPR for contract execution and inquiry handling. With your consent under Art. 6 (1)(a) GDPR, your data is also used to create your customer account.

Further processing is restricted after contract fulfillment and your data is deleted after retention periods expire unless further use is legally permitted or you have consented to such use. You may delete your account anytime via your account settings or by contacting us.

2.1 Merchandise Management System

We use external merchandise management systems to process orders and contracts. These providers act under processing agreements. Contact us for more information.

2.2 Age Verification

For age-restricted products, we perform age verification using SCHUFA Identity Check (SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden). Personal data (name, address, DOB) is submitted for this check. This verification complies with Art. 6 (1)(f) GDPR and does not include a credit check.

3. Data Processing for Shipping

To deliver your order, we forward your data to shipping providers as necessary per Art. 6 (1)(b) GDPR.

Shipping Notification

If you consent during or after your order, we share your email and phone number per Art. 6 (1)(a) GDPR with the shipping provider for delivery updates. You can revoke this at any time.

UPS: Görlitzer Straße 1, 41460 Neuss, Germany
DHL: Sträßchensweg 10, 53113 Bonn, Germany
VDS Fulfillment: Siemensstraße 14, 37412 Herzberg, Germany

4. Payment Processing

We cooperate with technical service providers, financial institutions, and payment providers to process payments.

4.1 Transaction Processing

Depending on the payment method, we share required data with the respective provider under Art. 6 (1)(b) GDPR. In some cases, data is collected directly by the payment provider. Their privacy policies apply.

4.2 Fraud Prevention

To prevent fraud and optimize payment processes, we may share data with service providers acting under processing agreements per Art. 6 (1)(f) GDPR.

4.3 Credit Assessment

For purchases on invoice, we may conduct identity and credit checks via the following agencies under Art. 6 (1)(f) and Art. 22 (2)(a) GDPR:
Tesch mediafinanz GmbH, SCHUFA Holding AG, Creditreform Boniversum GmbH.

4.4 Klarna Services

If using Klarna, we may forward your data for identity and credit checks with your consent (Art. 6 (1)(a) GDPR). You can withdraw your consent at any time.

4.5 Debt Collection

If payments are overdue, we may forward your data to a collection agency (e.g., Tesch mediafinanz GmbH) under Art. 6 (1)(b) and (f) GDPR.

5. Marketing Communication

5.1 Newsletter

With your consent (Art. 6 (1)(a) GDPR), we send regular newsletters. You can unsubscribe at any time using the link in the newsletter or by contacting us.

5.2 Product Recommendations

If we have your email address from a prior purchase, we may email you related product offers unless you object. You can opt out at any time.

5.3 Newsletter Dispatch

Our newsletter is sent via a service provider under a processing agreement. For information on this provider, please contact us.

5.4 Review Requests

With your consent (Art. 6 (1)(a) GDPR), we may send review requests after your order. You may revoke consent at any time.

5.5 Postal Advertising

We may use your name and address for postal advertising to promote our products, based on Art. 6 (1)(f) GDPR. You can object to this at any time.

6. Cookies and Other Technologies

Cookie Preferences:

Cookie Preferences

6.1 General Information

We use cookies and other technologies for functionality, personalization, analytics, and marketing. This may include the collection of IP addresses, usage data, and device information. Some cookies are necessary; others require your consent under Art. 6 (1)(a) GDPR. You can manage cookies via browser settings or revoke consent at any time.

6.2 Consentmanager

We use Consentmanager (Jaohawi AB, Sweden) to obtain and document your cookie consent per Art. 6 (1)(c) GDPR. Data is retained for 365 days.

7. Analytics and Advertising

With your consent (Art. 6 (1)(a) GDPR), we use tools such as Google Analytics, Google Ads, Facebook Pixel, etc., for performance tracking and marketing. Data may be transferred to the USA under standard contractual clauses. For details, refer to the respective service's privacy policy.

8. Social Media

We maintain profiles on platforms like Facebook, Instagram, YouTube, etc. When you visit these, your data may be processed for advertising and analytics. For details, see each platform’s privacy policy.

9. Your Rights and Contact

You have the following rights under GDPR: access, rectification, erasure, restriction, data portability, and to lodge a complaint with a supervisory authority. You can also object to certain processing and withdraw consent at any time. For any requests, contact us via the details above.

Privacy Policy created using the Trusted Shops Legal Text Generator in cooperation with FÖHLISCH Attorneys.

This Privacy Policy is intended to provide transparent and comprehensive information about the handling of your personal data. Please contact us if you have any questions or require further clarification.