Note: This is a standard draft created by an AI, based on the software used on this website. It must be reviewed by a responsible person before publication and completed with the full, correct details (in particular the name and address of the party responsible). This page does not replace legal advice.
1. Controller
The party responsible for data processing on this website is:
[Insert name / company]
[Street, number]
[Postal code, city]
Email: carlo@kollektiv-kosok.de
2. General Information on Data Processing
We generally only process personal data of our users to the extent necessary to provide a functioning website and our content and services. Processing of personal data regularly only takes place with the consent of the user, or, if consent could not be obtained and processing is permitted by law, on the basis of Art. 6 (1) lit. a to f of the General Data Protection Regulation (GDPR).
3. Hosting
This website is hosted with an external service provider. Personal data collected on this website is stored on the host’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access data, and other data generated via a website. The host is used for the purpose of fulfilling contracts with our (potential) customers (Art. 6 (1) lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6 (1) lit. f GDPR). A data processing agreement (DPA) has been concluded with the host.
4. Server Log Files
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request, and IP address. This data is not merged with other data sources. The collection of this data is based on Art. 6 (1) lit. f GDPR and serves the technically error-free presentation and optimisation of the website as well as ensuring system security.
5. Contact Form
If you send us enquiries via the contact form, the information you provide, including the contact details you give there, is stored by us for the purpose of processing the enquiry and in case of follow-up questions. For our contact form we use the plugin “Contact Form 7” together with the plugin “Flamingo”. Flamingo permanently stores the messages sent via the form in this website’s WordPress database, so that enquiries can still be traced even if the actual email could not be delivered. We do not pass on this data without your consent. Processing of this data is based on Art. 6 (1) lit. b GDPR, insofar as your enquiry serves the fulfilment of a contract or is necessary for the performance of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR), where this has been obtained. You can also send your enquiry directly by email to carlo@kollektiv-kosok.de; personal data stored this way will likewise be deleted once it is no longer required to achieve the purpose for which it was collected.
6. Web Analytics with Burst Statistics
This website uses “Burst Statistics”, a privacy-friendly, self-hosted analytics tool. Unlike many other analytics services, the data collected is processed exclusively on our own server and is not passed on to third parties. No cookies are set and no user profiles that are unique across websites and devices are created; IP addresses are not stored permanently. Data collected includes, among other things, pages visited, referral sources, device type, and browser, in order to statistically evaluate the use of our website and improve our offering. The legal basis is our legitimate interest in the needs-based design and continuous optimisation of our website (Art. 6 (1) lit. f GDPR).
7. Order Processing in the Online Shop (Abstauber.Shop)
To operate our online shop, we use WooCommerce as well as the “Germanized for WooCommerce” extension, which adapts the shop to the legal requirements of the German market. To process your order, we collect and process the data required for the performance of the contract, in particular name, address, email address, and payment and order data. The legal basis for this is Art. 6 (1) lit. b GDPR (performance of a contract). This data is used exclusively to process your order and is deleted after statutory retention periods have expired, unless a statutory retention obligation (e.g. under commercial or tax law) prevents this.
8. Shipping
To deliver ordered goods, we pass on the data required for this purpose (in particular name and delivery address) to the shipping company commissioned with the delivery. We use the “Shiptastic” plugin along with the associated integrations for DHL and/or UPS to create shipping labels. This disclosure is made exclusively for the purpose of delivering the goods, on the basis of Art. 6 (1) lit. b GDPR.
9. Duration of Storage
Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion will take place after these reasons cease to apply.
10. Your Rights
You generally have the rights to information, correction, deletion, restriction of processing, data portability, and objection to the processing of your personal data. Please feel free to contact us at the contact address given above. You also have the right to lodge a complaint with a data protection supervisory authority.
11. Changes to This Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements, or to implement changes to our services. The new privacy policy will then apply to your next visit.
Draft status: September 2026
