1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Trevor's Arts and Crafts Shop
Auf Der Breiten 16,
92366, Hohenfels, Germany
Email: trevors_sattel_shop@yahoo.de
Phone: 01623635899

​

2. General Information on Data Processing

We process personal data only to the extent necessary to provide a functional website, our content, and our services. Processing of personal data is carried out regularly only with the user’s consent or where permitted by law.

Legal Bases for Processing

• Art. 6(1)(a) GDPR – Consent

• Art. 6(1)(b) GDPR – Performance of a contract

• Art. 6(1)(c) GDPR – Legal obligation

• Art. 6(1)(f) GDPR – Legitimate interests

​

3. Hosting and Website Platform (Wix)

This website is hosted using Wix.com Ltd.,
40 Namal Tel Aviv St., Tel Aviv 6350671, Israel.

Wix processes personal data on our behalf as a data processor. Data may be transferred to servers outside the EU. Israel is recognized by the EU as providing an adequate level of data protection (Art. 45 GDPR).

A data processing agreement (DPA) is in place with Wix in accordance with Art. 28 GDPR.

​

4. Access Data and Server Log Files

When visiting our website, Wix automatically collects the following data:

• IP address

• Date and time of access

• Browser type and version

• Operating system

• Referrer URL

This data is processed to ensure website security and stability.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

​

5. Cookies and Consent Management

This website uses cookies. Cookies are small text files stored on your device.

• Essential cookies are required for website functionality.

• Optional cookies (e.g. analytics, marketing) are used only with your consent.

Consent is obtained via a cookie banner in accordance with Art. 6(1)(a) GDPR and §25 TTDSG.

You may revoke your consent at any time via the cookie settings.

​

6. Customer Accounts and Orders

When you place an order or create a customer account, we process:

• Name

• Billing and shipping address

• Email address

• Payment information (processed via payment providers)

• Order details

Processing is necessary for contract fulfillment and legal obligations.

Legal basis:

• Art. 6(1)(b) GDPR (contract)

• Art. 6(1)(c) GDPR (legal obligation)

​

7. Payment Service Providers

Payments are processed via external payment service providers (e.g. PayPal, credit card providers). Personal data is transmitted only as necessary to complete the transaction.

Legal basis: Art. 6(1)(b) GDPR

The respective payment provider is independently responsible for data processing under their own privacy policies.

​

8. Contact Form and Email Communication

If you contact us via form or email, the data you provide will be processed to handle your inquiry.

Legal basis:

• Art. 6(1)(b) GDPR (pre-contractual measures)

• Art. 6(1)(f) GDPR (legitimate interest)

​

9. Analytics and Marketing Tools

If analytics or marketing tools (e.g. Google Analytics) are used, they are activated only after consent.

Legal basis: Art. 6(1)(a) GDPR

Details are provided in the cookie banner and consent settings.

​

10. Data Retention

Personal data is stored only as long as necessary for the respective purpose or as required by law (e.g. tax and commercial retention periods).

​

11. Your Rights as a Data Subject

You have the following rights under the GDPR:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR)

To exercise your rights, contact us using the details above.

​

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority.

Competent authority (example):
Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
or your local state data protection authority.

​

13. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or manipulation.

​

14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to comply with legal requirements or changes to our services.

​