Skip to content
Vorstandsmappe

This English version is a translation for your convenience. The German version is legally binding. Draft – to be legally reviewed before publication.

Privacy policy

1. Controller

Lukas-Domenik Sonnenfeld
Vorstandsmappe
Anschrift siehe Impressum
Germany
Email: sunfieldshops@gmail.com

2. In brief

  • No analytics or tracking tools, no cookies, no advertising, no social media plug-ins.
  • No fonts or scripts from third-party servers. PayPal and Stripe are not embedded; you only reach them via a link if you click it.
  • We only use the data from your order to perform the contract and comply with legal obligations.

3. Hosting

This website is hosted by Cloudflare, Inc., San Francisco, USA. On every visit Cloudflare processes technically necessary data (IP address, date and time, page visited, browser and device information) to deliver the pages and protect against misuse. Legal basis: Art. 6(1)(f) GDPR. A data processing agreement (Art. 28 GDPR) is in place with Cloudflare. Transfers to the USA are based on den Angemessenheitsbeschluss der EU-Kommission zum EU-US Data Privacy Framework (Art. 45 DSGVO) sowie EU-Standardvertragsklauseln.

4. Order

For your order we process name, email address, country, language of the order page, optionally the name of the association, the package ordered, price, order number, the time of your consent to early performance, the chosen payment method (PayPal or Stripe) and the payment status. The order reaches us as an email sent by your email program. Purpose: conclusion and performance of the contract, invoicing and bookkeeping. Legal bases: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) GDPR in conjunction with § 147 AO and § 14b UStG. Recipient: our email provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (Gmail bzw. Google Apps Script). Soweit Daten in die USA übermittelt werden, geschieht das auf Grundlage des EU-US Data Privacy Framework bzw. von Standardvertragsklauseln as processor. We need your country to apply the correct rules for digital sales (including VAT thresholds).

5. Payment with PayPal

When you click “Continue to PayPal”, you go to the website of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. PayPal processes your payment data under its own responsibility. PayPal sends us the payment details (name, email address, amount, date, message). Legal basis: Art. 6(1)(b) GDPR.

6. Online payment via Stripe

If you choose “Order with obligation to pay – card, Apple Pay, Google Pay, Klarna, SEPA & more” at checkout, after ordering you reach Stripe’s payment page via “Continue to Stripe”. The provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland (“Stripe”). Data is transferred to Stripe only once you click this button; before that, this website does not load any content from Stripe. Stripe processes the data you enter there (name, optionally company name, email address, billing address, payment details such as card number or IBAN), the amount and the product purchased, as well as technical data about your device (for example your IP address), in order to process the payment, prevent fraud and comply with legal obligations.

We do not receive card numbers or other complete payment details. From Stripe we receive your name, company name if provided, email address, billing address, amount, product and payment status in order to send you the download link and issue the invoice. The legal bases are Art. 6(1)(b) GDPR (contract and pre-contractual measures) and Art. 6(1)(c) GDPR (statutory retention obligations under Section 147 of the German Fiscal Code (AO) and Section 14b of the German VAT Act (UStG)). Stripe itself is responsible for fraud prevention and for complying with its own regulatory obligations.

Stripe may transfer data to affiliated companies, in particular to Stripe, Inc. in the USA. According to Stripe, such transfers are based on the European Commission’s adequacy decision for the EU-US Data Privacy Framework or on standard contractual clauses. If you pay with Klarna, Apple Pay, Google Pay or by SEPA Direct Debit, the respective providers additionally process data in accordance with their own privacy notices. On its payment page, Stripe uses cookies and similar technologies that are necessary for secure payment and fraud prevention; this website itself still does not set any cookies. Stripe’s privacy policy: stripe.com/privacy.

7. Contact by email

If you write to us, we process your details to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them once it has been dealt with and no retention obligation applies.

8. Withdrawal via our website

If you withdraw via “Withdraw from contract”, your name, order details and email address are sent to us via Cloudflare Workers KV (Cloudflare, Inc., see section 3, as processor). We process this data and the date and time of receipt to handle the withdrawal and confirm receipt (Art. 6(1)(c) GDPR in conjunction with § 356a BGB).

9. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). A message to sunfieldshops@gmail.com is sufficient. You can lodge a complaint with a supervisory authority; responsible for us is die für den jeweiligen Wohnort zuständige Datenschutz-Aufsichtsbehörde (Übersicht: https://www.bfdi.bund.de).