- controller
- etienne schnaudt // andre schnaudt
altestadt 13, 40213 düsseldorf, germany
mail // ---
- hosting
- vercel inc., 440 n barranca ave #4133, covina, ca 91723, usa. on each request ip address, time, page, user agent and referrer are written to server logs and deleted after 30 days. legal basis art. 6 (1) f gdpr (secure operation). transfer to the usa under standard contractual clauses and the eu-us data privacy framework.
- cookies
- sh_lang (language, 1 year), sh_cart and sh_cart_id (cart, 7 days). strictly necessary, no tracking, no consent required. sh_gate lives in the browser’s sessionstorage and never leaves the device.
- orders
- name, address, mail and order contents are processed to fulfil the contract (art. 6 (1) b gdpr) and deleted after the statutory retention periods (6 or 10 years). confirmation mails are sent via resend inc., 2261 market st #5039, san francisco, ca 94114, usa (processor, standard contractual clauses).
- payment
- card payments run through stripe payments europe ltd., 1 grand canal street lower, dublin, ireland. stripe receives name, mail, address and payment data; we never see card numbers. bank transfer is handled by our bank; only the transfer data is processed.
- shipping
- address and mail are passed to the carrier as far as needed for delivery (art. 6 (1) b gdpr).
- newsletter
- double opt-in: after entering your mail a confirmation link is sent; the address is stored in the list only once that link is clicked (art. 6 (1) a gdpr). sending and list management via resend inc. unsubscribe any time via the link in every mail or by mailing us. we store mail, time of signup and confirmation.
- analytics
- none. no google analytics, no pixels, no external fonts (fonts are served from our own host).
- rights
- access, rectification, erasure, restriction, portability, objection and withdrawal of consent – by mail to the controller. you may complain to the data protection authority of north rhine-westphalia, kavalleriestraße 2–4, 40213 düsseldorf.
- version
- 10 / 2026