1. Controller
The controller under the GDPR is:
Kristian Lust / SBMiniatures
Kristian Lust
Amselweg 14
21529 Kröppelshagen
Deutschland
Email: kontakt@sbminiatures.com
2. Hosting and server logs
When you access this website, the hosting provider processes technically necessary connection data such as IP address, date and time, requested URL, HTTP status, referrer and browser/device information. This is done on the basis of Art. 6(1)(f) GDPR for secure and stable operation of the website. Data is deleted when no longer necessary unless statutory retention or security requirements apply.
3. Necessary cookies and local storage
WooCommerce uses technically necessary cookies or comparable storage technologies for the cart, checkout, login and session functions. The SBMiniatures wishlist stores product IDs locally in your browser under sbm_wishlist. These functions are not used for advertising or tracking. The theme itself currently does not include analytics or marketing trackers.
4. Orders, accounts and payment
We process customer, billing, delivery, order and payment-status data to enter into and perform contracts (Art. 6(1)(b) GDPR) and to comply with statutory accounting and tax duties (Art. 6(1)(c) GDPR). If you create a customer account, data required to maintain that account and your order history is stored. Depending on the payment method selected at checkout, necessary data is transmitted to the relevant payment service provider.
5. Shipping
For fulfilment we transfer required recipient data to shipping providers. We use Packlink (Auctane, S.L.U.) as a shipping platform for many shipments and primarily DPD/UPS within Germany and the EU and DHL for international shipments. The legal basis is Art. 6(1)(b) GDPR. International delivery may require processing in third countries where necessary to perform the contract.
6. Contact and electronic withdrawal
Contact-form and email data is processed to respond to requests (Art. 6(1)(b) or (f) GDPR). Electronic withdrawal submissions include your name, email address, contract/order identifier, optional item information and receipt timestamp. They are stored privately in WordPress and sent by email for legal compliance and contract handling (Art. 6(1)(c) and (b) GDPR).
7. Retention and recipients
We retain data only for as long as necessary for the relevant purpose or statutory retention requirements. Hosting, payment, shipping and technical providers receive only data required for their role. Where they act as processors, processing is governed by Art. 28 GDPR agreements where applicable.
8. Your rights
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction, data portability and objection under Articles 15–21 GDPR and the right to withdraw consent for the future. You may contact kontakt@sbminiatures.com.
9. Supervisory authority
You may lodge a complaint with a data protection supervisory authority. The competent authority for businesses based in Schleswig-Holstein is the Independent Centre for Privacy Protection Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany, www.datenschutzzentrum.de.
If analytics, marketing, newsletter, embedded media or additional payment services are added later, this privacy policy and any required consent management must be updated before those services are activated.