Privacy policy

Placeholder – replace with a legally reviewed version

This text is a non-binding template and not legal advice. Before launching sales, replace this page with a legally sound version tailored to your business.

This is a translation provided for your convenience. Only the German version is legally binding.

1. Controller

The controller within the meaning of the GDPR is the service provider named in the legal notice. Contact for data protection enquiries: krimiabend24@gmail.com.

2. Hosting (Vercel)

This website is hosted by Vercel. Technically necessary server log data (e.g. IP address, time, page accessed) is processed. The legal basis is Art. 6 (1) (f) GDPR.

3. Payment processing (Stripe)

Payments are processed by Stripe. The data required for payment (including name, email and payment details) is transmitted to Stripe. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract). We do not store complete payment details ourselves.

4. Sending emails (Resend)

We use the Resend service to send order confirmations, download links and newsletter confirmations. Your email address is processed for this purpose. The legal basis is Art. 6 (1) (b) GDPR (order) or Art. 6 (1) (a) GDPR (newsletter consent).

5. Newsletter (double opt-in)

We use the double opt-in procedure for newsletter sign-ups: after signing up you receive an email with a confirmation link. You are only subscribed once you click it. You can withdraw your consent at any time with effect for the future.

6. Contact form

If you contact us via the contact form, we process your details to handle your enquiry (Art. 6 (1) (b) or (f) GDPR).

7. Cookies & consent

We use technically necessary cookies (or local storage), for example for the shopping cart and to remember your language. Statistics and marketing cookies are only set with your consent via the cookie banner. You can change your selection at any time.

8. Your rights

Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection (Art. 21 GDPR)
Complaint to a supervisory authority (Art. 77 GDPR)

9. Storage period

We only store personal data for as long as necessary for the stated purposes or as required by statutory retention periods.