Legal Notice

Information according to § 5 TMG (German Telemedia Act):

Name: Constanze Chrosch
Address: Bruchstraße 80
40235 Düsseldorf
Germany
Please note: This is a private residence and not open to the public.

Contact:
Email: mail@constanzechrosch.de
Website: https://constanzechrosch.de

Responsible for content according to § 55 para. 2 RStV:
Constanze Chrosch (address as above)

VAT Information:
Small business owner according to § 19 UStG – VAT not shown due to exemption.

Privacy Policy

1. Controller

The data controller for this website and online shop is:
Constanze Chrosch
Bruchstraße 80
40235 Düsseldorf
Germany
Email: mail@constanzechrosch.de

2. Data We Collect

When visiting this website:

  • Anonymized IP address

  • Date and time of request

  • Browser type and version

  • Operating system

  • Referrer URL

When placing an order in the online shop:

  • Full name

  • Billing and shipping address

  • Email address

  • Payment method (e.g., PayPal – no credit card data is stored)

  • Ordered items

  • Order history

When contacting us via email or contact form:

  • Your email address and message content

When signing up for a newsletter (if available):

  • Email address

  • Subscription preferences

3. Purpose of Processing

We process your personal data to:

  • Accept and fulfill product orders

  • Process payments and arrange delivery

  • Respond to customer inquiries

  • Send updates or newsletters (if subscribed)

  • Maintain the security and usability of our website

  • Comply with applicable legal requirements

4. Legal Basis

We process data based on:

  • Art. 6 (1)(b) GDPR – performance of a contract

  • Art. 6 (1)(f) GDPR – legitimate interest

  • Art. 6 (1)(c) GDPR – legal obligation

  • Art. 6 (1)(a) GDPR – consent (e.g., for newsletters)

5. Cookies and Tracking

This website uses cookies necessary for basic functions like shopping cart, preferences, and secure access.

Squarespace, our website provider, may also use its own analytics or session cookies. These cookies do not track personal activity beyond the site.

Google Analytics:
As of now, Google Analytics is not actively used.

6. Third-Party Services

Hosting provider: Squarespace, Inc. (USA)
A Data Processing Agreement (DPA) with Squarespace is recommended.
https://www.squarespace.com/dpa

Payment provider: PayPal
When selecting PayPal during checkout, your payment data is transmitted to PayPal. Their Privacy Policy applies:
https://www.paypal.com/webapps/mpp/ua/privacy-full

Shipping providers (e.g., DHL, Deutsche Post):
Shipping information such as name and address will be shared with logistics providers for the purpose of delivering your order.

7. Data Retention

We retain order-related data for as long as legally required (e.g., 6–10 years under tax law).
Contact inquiries and newsletter data are stored only as long as necessary or until you withdraw consent.

8. Your Rights

You have the right to:

  • Access your personal data

  • Request correction or deletion

  • Restrict or object to processing

  • Withdraw consent (e.g., newsletter)

  • Request data portability

  • Lodge a complaint with a data protection authority

9. Data Security

We use SSL encryption and host our website with a professional provider (Squarespace) that implements technical and organizational measures to secure your data.

10. Changes to this Policy

This Privacy Policy may be updated to reflect legal, technical, or service-related changes.
Please review this page periodically.

Last updated: June 9, 2025

Legal Notice & Privacy Policy