1. Controller
StartUp Shop Creations
Owner: Leni Rosenbauer
Elbener Weg 3
57580 Gebhardshain, Germany
E-Mail: contact@startupshop-creations.de
2. Data Collection and Processing
Contact Form
When using our contact form, we collect the data you provide (name, e-mail address, message) to process your inquiry. These data will not be passed on without your consent.
Customer Account / Registration
When you register for a customer account, we store your information (e.g. name, address, login data) in order to provide account access and process orders.
Newsletter
If you subscribe to our newsletter, we will store your e-mail address and possibly other information in order to send you regular updates. You can unsubscribe at any time via the link in each e-mail or by contacting us directly.
3. Cookies
Our website uses cookies. These are small text files stored on your device. They serve session management (e.g. shopping cart), analytics, and marketing purposes. You can configure your browser to block cookies or to notify you when cookies are set.
4. Analytics
We use Google Analytics (Google Ireland Ltd.) to analyze website usage. Google uses cookies to evaluate your use of our website and compile reports. Your IP address is anonymized. More details: Google Privacy Policy.
5. Third-Party Services
Google Fonts
We integrate fonts (“Google Fonts”) from Google Ireland Ltd. This may involve the transmission of your IP address to Google.
Google Maps
For displaying interactive maps, we use Google Maps. Usage data may be transmitted to Google in this process.
Embedded Content (YouTube, Instagram)
Our website may contain embedded content from third-party providers (e.g. YouTube videos, Instagram posts). When you load such content, your IP address and other usage data may be transmitted to the respective provider.
Payment Providers
We use PayPal and Stripe to process payments. Payment data is transmitted directly to the respective provider for contract fulfillment. Details: PayPal Privacy Policy, Stripe Privacy Policy.
6. Hosting and Security
Our website is hosted by Strato AG, Pascalstraße 10, 10587 Berlin, Germany. Strato stores data (e.g. log files) to provide and secure the website. More details: Strato Privacy Policy.
We also use Cloudflare (Cloudflare, Inc., USA) as a Content Delivery Network and security service. Data such as IP addresses may be processed to protect against attacks and improve performance. More details: Cloudflare Privacy Policy.
7. Legal Bases
Data processing is carried out under Art. 6 (1) lit. a GDPR (consent), Art. 6 (1) lit. b GDPR (contract performance), Art. 6 (1) lit. c GDPR (legal obligation), and Art. 6 (1) lit. f GDPR (legitimate interests).
8. Your Rights
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
Please contact us via the above details if you wish to exercise your rights.
9. Changes to This Privacy Policy
We reserve the right to amend this privacy policy in order to comply with updated legal requirements or to reflect changes to our services. The current version always applies.
10. Supervisory Authority
You have the right to lodge a complaint with the competent data protection supervisory authority. In our case, this is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Germany.