Privacy policy
What we process, why, and who else sees it.
Controller
Visiting the shop
Our server records the usual access data, IP address, time, the page requested, browser and operating system. This is needed to deliver the pages and to keep the server secure. Legal basis is Article 6(1) (f) GDPR. Logs are deleted after a short retention period. We use no analytics and no tracking cookies.
Cart and order
To process an order we store your name, address, email, the items and the payment status. Legal basis is Article 6(1)(b) GDPR. Invoice data is kept for the statutory retention period under German commercial and tax law.
Account and sign in
Sign in runs through our own Supabase instance, which also serves lifad.world. It stores your email address and, for password sign in, a hashed password. If you use Google or Apple, the provider tells us your email address and name. Legal basis is Article 6(1)(b) GDPR.
Payment
Payments are processed by Stripe Payments Europe, Ltd., Dublin, Ireland. Payment details are entered directly with Stripe and never reach our server. Stripe receives the amount, the order reference and your billing data. Legal basis is Article 6(1)(b) GDPR.
Production and shipping
Printing and shipping run through Printful. For that, your name and delivery address are passed on. Without this the order cannot be fulfilled. Legal basis is Article 6(1)(b) GDPR.
Hosting and files
Product images and files are stored with Cloudflare R2. The shop itself runs on our own server inside the European Union.
Your rights
You have the right to information, correction, deletion, restriction of processing, data portability and objection, and the right to complain to a supervisory authority. Write to kontakt@lifad.world.