Privacy policy
Datenschutzerklärung
1. Who this applies to
This policy covers personal data collected by Mr.plainT ([FILL IN — full legal name, same as Impressum]) through this website, including when you place an order, write a review, or contact us.
2. What data we collect
Depending on how you use the site, we may collect:
- Your name and delivery address, when you place an order
- Your email and/or phone number, if you provide them with an order or a review
- Payment information — handled entirely by PayPal, not stored on our own systems (see section 5)
- Review text, star rating, and any photo you choose to submit with a review
- If you subscribe to marketing emails: your email address, until you unsubscribe
3. Why we collect it
- Order fulfillment and shipping — we need your name and address to send you what you ordered
- Customer service — to contact you about your order if needed
- Marketing emails — only sent to customers who have actively opted in; you can unsubscribe at any time
- Reviews — displayed publicly on the site if you choose to submit one, after we moderate it
Legal basis: contract fulfillment (Art. 6(1)(b) GDPR) for orders, and consent (Art. 6(1)(a) GDPR) for marketing emails.
4. How your data is stored
Order and review data is stored in our database (Cloudflare D1) and associated file storage (Cloudflare R2 for review photos), hosted within Cloudflare's infrastructure. Access is restricted to the site owner via a password-protected admin panel. We keep order records for as long as required by German commercial and tax record-keeping law (generally 10 years for accounting-relevant records), even if you later ask us to delete other personal data.
5. Payment processing — PayPal
When you pay via PayPal, your payment details are handled entirely by PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A.) — we never see or store your card or bank details. PayPal's own privacy policy governs that part of the transaction: paypal.com/privacy.
6. Cookies and analytics
This site does not currently use tracking cookies, advertising cookies, or third-party analytics (e.g. Google Analytics). The only cookie in use is a strictly necessary, functional login cookie for the owner's admin panel — it is not set for regular site visitors and does not track you.
[FILL IN / UPDATE] if you add analytics, ad pixels, or marketing cookies later, this section needs to be rewritten to disclose them and, in most cases, a cookie consent banner will become legally required.
7. Your rights
Under GDPR, you have the right to access, correct, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at:
[FILL IN — contact email for data requests]
You also have the right to lodge a complaint with a data protection supervisory authority.
← Back to Mr.plainT