Privacy policy

Datenschutzerklärung

This is a template, not finished legal text. It describes the site's data handling honestly as of today, but you (or a lawyer/Datenschutzbeauftragter) should review and finalize the exact wording before relying on it — data protection law has specific phrasing requirements this draft doesn't guarantee to meet. Fields marked [FILL IN] need your real details.

1. Who this applies to

This policy covers personal data collected by Mr.plainT ([FILL IN — full legal name, same as Impressum]) through this website, including when you place an order, write a review, or contact us.

2. What data we collect

Depending on how you use the site, we may collect:

3. Why we collect it

Legal basis: contract fulfillment (Art. 6(1)(b) GDPR) for orders, and consent (Art. 6(1)(a) GDPR) for marketing emails.

4. How your data is stored

Order and review data is stored in our database (Cloudflare D1) and associated file storage (Cloudflare R2 for review photos), hosted within Cloudflare's infrastructure. Access is restricted to the site owner via a password-protected admin panel. We keep order records for as long as required by German commercial and tax record-keeping law (generally 10 years for accounting-relevant records), even if you later ask us to delete other personal data.

5. Payment processing — PayPal

When you pay via PayPal, your payment details are handled entirely by PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A.) — we never see or store your card or bank details. PayPal's own privacy policy governs that part of the transaction: paypal.com/privacy.

6. Cookies and analytics

This site does not currently use tracking cookies, advertising cookies, or third-party analytics (e.g. Google Analytics). The only cookie in use is a strictly necessary, functional login cookie for the owner's admin panel — it is not set for regular site visitors and does not track you.

[FILL IN / UPDATE] if you add analytics, ad pixels, or marketing cookies later, this section needs to be rewritten to disclose them and, in most cases, a cookie consent banner will become legally required.

7. Your rights

Under GDPR, you have the right to access, correct, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at:

[FILL IN — contact email for data requests]

You also have the right to lodge a complaint with a data protection supervisory authority.

← Back to Mr.plainT