Privacy policy

Controller of processing: Nils Goecke Bandelstraße 9F 30171 Hannover Deutschland E-Mail: hello@nilsgoecke.de

We process personal data only as necessary to operate the website, provide user accounts, fulfil orders and meet legal obligations.

The site is operated by a hosting provider. Technically necessary server logs (e.g. IP address, timestamp, user agent, requested URL) may be processed. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). Retention: typically days to weeks depending on host configuration.

We use technically necessary cookies / similar storage, in particular: • Session cookie for sign-in (Better Auth) • Locale preference • Cart in localStorage (guest) • Cookie-notice status (`nilsgoecke:cookie-consent`) Legal basis: Art. 6(1)(b) GDPR (contract/pre-contract) or Art. 6(1)(f) (technically necessary operation), and German TTDSG § 25(2) for necessary storage. We do not set non-essential tracking/marketing cookies without consent. The banner informs about necessary storage.

On registration we process name, email address and password hash. Purpose: account, cart sync, order history. Legal basis: Art. 6(1)(b) GDPR. Retention: until account deletion or as long as statutory retention applies.

At checkout we process order data (items, quantities, prices), contact data (email) and shipping address. Payment is handled by Stripe (Stripe Payments Europe, Ltd. or affiliates). Stripe processes payment data as an independent controller and/or processor — see https://stripe.com/privacy. Legal basis: Art. 6(1)(b) GDPR (contract performance), and where applicable Art. 6(1)(c) (legal retention). We store order records and shipping-address snapshots in our database for fulfilment and accounting.

For manufacturing and shipping we transmit name, delivery address, email and line items to Printful (Printful Inc. / EU entities depending on setup). Printful acts as processor / fulfilment partner for production. Privacy policy: https://www.printful.com/policies/privacy Legal basis: Art. 6(1)(b) GDPR.

If you contact hello@nilsgoecke.de, we process the data you provide to handle the request (Art. 6(1)(b) or (f) GDPR).

We retain personal data only as long as needed for the respective purposes or as required by law (e.g. commercial/tax retention, often 6–10 years for records).

Under applicable law you have rights of access, rectification, erasure, restriction, data portability and objection to processing based on Art. 6(1)(f) GDPR. You may also lodge a complaint with a supervisory authority.

Without data required for contract and payment (especially email, shipping address, Stripe payment processing) we cannot fulfil orders.

We may update this privacy policy when technology, processes or legal requirements change.