CART      

Privacy Policy


Last updated: 01.11.2026
1. Who is responsible for your data?

The controller responsible for the processing of personal data on this website is:

Lorena Rode
Lorenarode
Fischbachauerstr. 2
81539 Munich
Germany

Email: lorode99@gmail.com
2. Personal data we collect
When you visit our website, contact us, or place an order, we may process personal data such as:
  • Contact details, including your name, email address, billing address and delivery address.
  • Order information, including the products you purchase, order number and order history.
  • Payment-related information provided through our payment service provider, PayPal.
  • Communications you send to us, including customer service enquiries.
  • Technical information generated when you visit the website, such as your IP address, browser information, access time and server log data.

We only process personal data for specified purposes and where a lawful basis applies. 3. Website hosting and platform
Our website is created and operated using Cargo, a website-building and hosting platform provided by Cargo Collective, Inc.

When you visit our website or use its shopping functions, technical data and information necessary to operate the website and process orders may be handled by Cargo and its service providers.

Provider information and privacy policy:
https://cargo.site/privacy

4. Processing orders and customer enquiries
When you place an order, we process the information necessary to accept, manage and fulfil your purchase. This may include your contact details, delivery address, order details and communications about your order.

We use this information to:
  • Process and fulfil your order.
  • Arrange delivery.
  • Send order and shipping updates.
  • Respond to questions, complaints and return requests.
  • Meet applicable accounting, tax and other legal obligations.

Depending on the purpose, processing is based on Article 6(1)(b) GDPR (performance of a contract or pre-contractual steps) or Article 6(1)(c) GDPR (compliance with a legal obligation).
5. Payment processing through PayPal and Stripe
We offer PayPal and Stripe as payment service providers. When you select one of these payment methods, the information necessary to process your payment and complete your order may be transmitted to the relevant provider.

The payment provider processes personal data in accordance with its own privacy policy. We receive payment confirmations and transaction information necessary to manage your order. We do not intend to store your full payment credentials.

PayPal Privacy Policy: https://www.paypal.com/de/legalhub/paypal/privacy-full

Stripe Privacy Policy: https://stripe.com/privacy 6. Shipping and delivery
To deliver your order, we use the delivery and contact information necessary to prepare and send your package.

We retain order and delivery records for as long as necessary to fulfil the order, handle related issues and comply with legal retention requirements.
7. Cookies and similar technologies
Our website may use technically necessary cookies or similar technologies to provide core website and shopping functions.

Additional technologies, such as analytics, marketing or external embedded content, may process information about your visit.

You can manage your preferences through the cookie settings provided on the website, if available.
8. How long we retain personal data
We retain personal data only for as long as necessary for the relevant purposes, including order fulfilment, customer service, handling legal claims and meeting statutory record-keeping obligations.

Certain business and tax records may need to be retained for statutory periods. Once data is no longer needed and no legal retention obligation applies, it will be deleted or anonymised as appropriate.
9. Sharing personal data
We may share personal data with service providers where necessary to operate our website and business, for example:
  • Cargo, for website hosting and shopping functionality.
  • PayPal, for payment processing when selected.
  • Postal or courier services, for delivery.
  • Professional advisers or public authorities, where required by law.

We do not include services in this list unless they are relevant to our actual operations. 10. International data transfers
Some service providers may process personal data outside the European Economic Area (EEA). Where this occurs, we will ensure that the applicable requirements of the GDPR for international transfers are met.

11. Your data protection rights
Subject to the conditions under applicable law, you may have the right to:
  • Request access to your personal data.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Request restriction of processing.
  • Object to certain processing.
  • Receive certain data in a portable format.
  • Withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise your rights, contact us at:

Email: lorode99@gmail.com

You also have the right to lodge a complaint with a competent data protection supervisory authority. 12. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to our website, business practices or legal requirements. The latest version will be published on this page with an updated date. 13. Contact

If you have questions about this Privacy Policy or how your personal data is handled, please contact:

Lorena Rode
Fischbachauerstr. 2
81539 Munich
Germany

Email: lorode99@gmail.com