Privacy Policy

1. Controller

2. General

We take the protection of your personal data very seriously. We treat your information confidentially and in accordance with the statutory data protection regulations (EU General Data Protection Regulation (GDPR), German Federal Data Protection Act (BDSG), German Telecommunications Digital Services Data Protection Act (TDDDG)) and this privacy policy. As our company is based in Germany, these regulations also apply to orders from customers outside the EU.

3. Hosting

Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. To ensure technical operation, the provider collects server log files (e.g. IP address, browser user agent, time of access). We have concluded a data processing agreement pursuant to Art. 28 GDPR with Hetzner. Data is processed exclusively in data centers within the EU.

4. Cookies, browser storage and consent management

Technically necessary cookies and browser storage entries are used on the basis of Art. 6(1)(f) GDPR. These include in particular:

• mauspad-magento-cart-id:en: stores the ID of your shopping cart locally in your browser so that its contents are preserved between page views
• mauspad_auth:en: stores your session token after a successful login so that you stay signed in
• PHPSESSID (on shop.mauspad.net): technical session of the Magento shop backend

Analytics and marketing cookies require your consent pursuant to Art. 6(1)(a) GDPR.

5. Customer account

If you create a customer account, we process the data you provide (name, email address, password as a hash, delivery address and phone number if applicable) for the purpose of performing the contract and managing your account. Legal basis: Art. 6(1)(b) GDPR (performance of a contract). You can have your account deleted at any time via your account area or by email; your data will then be deleted unless statutory retention obligations (German Commercial Code (HGB), German Fiscal Code (AO)) prevent this.

6. Orders and order processing

When you place an order, we process your order data (name, delivery address, billing address, email address, items purchased, order total, time of order) on the basis of Art. 6(1)(b) GDPR to perform the contract. To produce and ship your order, we transmit your name, delivery address, phone number (if provided) and the items ordered to our production and fulfillment provider Printful Inc. (Charlotte, North Carolina, USA), which processes the data on our behalf as a processor pursuant to Art. 28 GDPR. Transfers to the United States are based on the EU Standard Contractual Clauses and, where necessary, Art. 49(1)(b) GDPR (performance of a contract for delivery to the United States). Your delivery address is also passed on to the carrier delivering your order. Order data is retained in accordance with commercial and tax law requirements (usually 6–10 years).

7. Payment processing

Payments are processed by the payment service provider Stripe Payments Europe Limited (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). When you pay, the data required for the transaction (cardholder, card number, CVV, amount, or authentication data of the selected payment method) is transmitted directly to Stripe; mauspad.net does not store any credit card information. Legal basis: Art. 6(1)(b) GDPR. Stripe’s privacy information: stripe.com/privacy.

8. Transactional emails

Order confirmation, shipping and invoice emails are sent via Amazon Web Services (AWS) Simple Email Service (Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg). The AWS Service Terms and the AWS GDPR Data Processing Addendum (data processing pursuant to Art. 28 GDPR) apply. Data transfers to third countries (USA) are based on the EU Standard Contractual Clauses.

9. Contact forms

If you send us a form (e.g. name, email address, inquiry), we process this data to handle your request on the basis of Art. 6(1)(b) or (f) GDPR. The data is deleted as soon as it is no longer required to process your request.

10. Fonts

The font we use is delivered as a local resource with the website (self-hosting). No connection is made to external font providers, so no data is transmitted to third parties such as Google.

11. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the padlock symbol in your browser.

12. Your rights as a data subject

You have the right at any time to:

• access the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)
• withdraw any consent given (Art. 7(3) GDPR)

To exercise your rights, email us at info@e-companion.de.

13. Right to lodge a complaint

You have the right to lodge a complaint with the competent supervisory authority. In Bavaria, this is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht): www.lda.bayern.de.

14. Storage period

Personal data is deleted as soon as the purpose of storage no longer applies, unless statutory retention obligations (e.g. under the HGB or AO) prevent this.

15. Changes to this policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services.