Privacy policy

1) Introduction and Contact Information

We are pleased that you are visiting our website and thank you for your interest.

This Privacy Policy explains how we handle your personal data when you use our website. Personal data refers to any information that can personally identify you.

The data controller responsible for data processing on this website is:

Marie Scharf
Hermann-Deppe-Ring 3
38110 Braunschweig
Germany
Email: puffcombb@gmail.com

The controller is the natural or legal person who determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

When you visit our website for informational purposes only, we automatically collect technical data transmitted by your browser (“server log files”), including:

  • Visited website
  • Date and time of access
  • Amount of data transferred
  • Referring URL
  • Browser type and version
  • Operating system
  • IP address (possibly anonymized)

This data is processed to ensure website functionality, stability, and security. It is not used to personally identify visitors.

We may also use SSL/TLS encryption to protect sensitive data transmission.

3) Hosting & Content Delivery Network

We use Shopify as our hosting provider:

Shopify International Ltd., Dublin, Ireland
Data may also be processed by Shopify Inc., Canada, and Cloudflare Inc., USA.

These providers help deliver and secure our website content. Data processing is based on legitimate interest in providing a stable and secure website.

Where applicable, data transfers are protected by adequacy decisions or standard contractual safeguards.

4) Cookies

We use cookies to improve user experience and website functionality. Cookies are small text files stored on your device.

Some cookies are deleted after your session ends, while others remain stored for longer periods.

You can configure your browser to refuse cookies; however, some website functions may be limited.

5) Contacting Us

When you contact us via email or contact form, we process your data solely to respond to your inquiry.

Legal basis:

  • Contract-related inquiries: contract performance
  • General inquiries: legitimate interest in communication

Your data will be deleted once your request has been fully processed, unless legal retention obligations apply.

6) Customer Accounts

If you create a customer account, we store your data necessary for account management.

You may request deletion of your account at any time, provided there are no outstanding transactions or legal retention requirements.

7) Order Processing

We process personal data necessary to fulfill orders, including:

  • Name
  • Address
  • Payment details (if applicable)

Data may be shared with:

  • Shipping providers
  • Payment processors (e.g. PayPal, Shopify Payments)

This is done solely for order fulfillment purposes.

8) Rights of Users

You have the following rights regarding your personal data:

  • Access
  • Correction
  • Deletion
  • Restriction of processing
  • Data portability
  • Withdrawal of consent
  • Complaint to a supervisory authority

9) Data Retention

We store personal data only as long as necessary for the respective purpose or as required by law.

After the purpose ceases or legal retention periods expire, data is deleted.

10) Applicable Law

This Privacy Policy is intended to comply with applicable international data protection principles, including GDPR where applicable. For users outside the EU, local data protection laws may also apply.