Privacy Policy
1. Data Controller
Jennifer Eichler
Emser Str. 3
65307 Bad Schwalbach
Email: hello@jennifereichler.de
2. Hosting
This website is hosted by:
Strato AG
Otto-Ostrowski-Straße 7
10249 Berlin
www.strato.de
When the website is accessed, the host automatically processes connection data in server log files (IP address, date/time, URL accessed, status code, browser type). This processing is based on Article 6(1)(f) of the GDPR (legitimate interest in the secure operation of the website). The log files are deleted after 30 days at the latest. A data processing agreement pursuant to Article 28 of the GDPR is in place between the operator and Strato.
3. Cookies
This website uses cookies—small text files stored in your browser. We use only technically necessary cookies that are essential for the operation of the online store. Consent is not required for this.
Cookies Used:
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| OCSESSID | jennifereichler.de | Session management (shopping cart, login, order process) | Session duration |
| language | jennifereichler.de | Saving the language setting | Session duration |
| currency | jennifereichler.de | Saving the currency selection | Session Duration |
| policy | jennifereichler.de | Saves your decision regarding the cookie notice | 1 year |
You can delete cookies in your browser at any time or disable the use of cookies. Please note that disabling technically necessary cookies may limit the functionality of the online store (e.g., shopping cart, login).
4. Embedded Videos
Some pages on this website feature videos embedded via the YouTube service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
We exclusively use YouTube’s enhanced privacy mode via the domain youtube-nocookie.com. This ensures that YouTube does not set any cookies unless you actively play the video. Only when you click on the video can YouTube store cookies in your browser and transmit data to Google’s servers.
The legal basis for this integration is Article 6(1)(f) of the GDPR (legitimate interest in providing video content). For more information on data protection at YouTube, please refer to Google’s Privacy Policy: https://policies.google.com/privacy
5. Order Process and Customer Account
When you place an order or create a customer account, I process the data you provide (name, address, email address, order details) to fulfill the purchase contract and to handle your inquiries. The legal basis is Art. 6(1)(b) of the GDPR (performance of a contract). The data will be deleted after the statutory retention periods have expired (up to 10 years under commercial and tax law).
6. Payment Processing – PayPal
If you choose to pay via PayPal, you will be redirected to the PayPal platform. Payment processing is handled by:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
PayPal processes your payment data as an independent provider. PayPal’s privacy policy applies. The legal basis for the transfer of data is Article 6(1)(b) of the GDPR (performance of a contract).
7. Contact Form
If you use the contact form or send me an email, the data you provide (name, email address, message) will be stored to process your inquiry. This data will not be disclosed to third parties. The legal basis is Article 6(1)(b) of the GDPR (performance of a contract) or Article 6(1)(f) (legitimate interest). The data will be deleted once your request has been resolved, provided there are no retention obligations to the contrary.
8. External Links
This website contains links to external third-party platforms. By clicking on these links, you will leave this website. The respective operator is responsible for the privacy practices of those platforms:
- Instagram / Meta Platforms Ireland Ltd. – Instagram Privacy Policy
- DeviantArt / Wix.com Ltd., Tel Aviv, Israel – DeviantArt Privacy Policy
Data transfers to third countries are based on the respective Standard Contractual Clauses or an adequacy decision by the European Commission.
9. Your Rights
Under the GDPR, you have the following rights with respect to the data controller:
- Access (Art. 15 GDPR) to the personal data stored about you
- Rectification (Art. 16 GDPR) of inaccurate data
- Erasure (Art. 17 GDPR) of your data
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR) to processing
To exercise your rights, please contact: hello@jennifereichler.de
You also have the right to file a complaint with a data protection supervisory authority. The Hessian Commissioner for Data Protection and Freedom of Information (datenschutz.hessen.de) is responsible for the state of Hesse.
10. Cancellation of Contracts via the Cancellation Function
On our website, you can withdraw from a contract concluded with us using a dedicated withdrawal function. We process the information entered there to receive your notice of withdrawal, confirm receipt to you, and verify the time of receipt.
The data controller is Jennifer Eichler, Emser Str. 3, 65307 Bad Schwalbach, hello@jennifereichler.de.
The following data is processed: first and last name, email address, order reference, any voluntary information you provide in the free-text field, the language used, and the time of receipt. Completing the required fields is necessary so that we can associate your notice with a specific order; without them, we cannot process the cancellation.
The legal basis for receiving and acknowledging receipt is Article 6(1)(c) of the GDPR in conjunction with Section 356a(2) and (4) of the German Civil Code (BGB). We base the subsequent retention of this information on our legitimate interest in proving compliance with the deadline and in defending against unjustified claims pursuant to Article 6(1)(f) of the GDPR, as well as—to the extent that retention requirements under commercial and tax law apply— on Article 6(1)(c) of the GDPR in conjunction with Section 147 of the German Fiscal Code (Abgabenordnung).
The recipients are our hosting service provider and our email service provider, who process the data exclusively on our behalf in accordance with our instructions. No data is transferred to third countries.
We delete the information you voluntarily provide in the free-text field three months after receipt, as its purpose is then fulfilled. We delete the remaining information six years after the end of the calendar year in which the declaration was received.
You have the right to access, rectification, erasure, and restriction of processing; the right to data portability; and the right to object to processing based on Article 6(1)(f) of the GDPR. You may also file a complaint with a data protection supervisory authority.