Privacy Policy

Last updated: June 2025 — Berliner Vinylwerk | berlinervinylwerk.de

I. Data Controller

Francesco Passantino Mengerzeile 14, 12435 Berlin, Germany Steuernummer: DE358921989 Email: berlinervinyl@gmail.com Phone: +49 0176 31636842

II. Data We Collect

2.1 Data you provide directly

• Full name, email address, shipping and billing address
• Phone number (if provided)
• Payment information (processed securely by third-party providers)
• Audio files and creative materials submitted for vinyl production
• Messages sent via contact forms or email
• Account login credentials (if you register on our site)

2.2 Data collected automatically

• IP address and browser type
• Pages visited and time spent on the site
• Device type and operating system
• Referring website
• Cookies and similar tracking technologies

III. Purpose and Legal Basis of Processing

Purpose	Legal Basis (GDPR)
Processing and fulfilling your order	Art. 6(1)(b) — Contract performance
Sending order confirmations and updates	Art. 6(1)(b) — Contract performance
Processing payments securely	Art. 6(1)(b) — Contract performance
Complying with tax and legal obligations	Art. 6(1)(c) — Legal obligation
Improving website and user experience	Art. 6(1)(f) — Legitimate interest
Sending newsletters (when activated)	Art. 6(1)(a) — Consent
Fraud prevention and site security	Art. 6(1)(f) — Legitimate interest

IV. Payment Processors

We use the following secure payment providers. We never store your full payment card details on our servers.

• PayPal — PayPal (Europe) S.à r.l. et Cie, S.C.A. Privacy policy: paypal.com/privacy
• Stripe — Stripe Payments Europe Ltd. Privacy policy: stripe.com/privacy
• WooPayments — Powered by Stripe via WooCommerce/Automattic. Privacy policy: automattic.com/privacy
• Bank Transfer (SEPA) — Your banking details are used solely to process your payment and are not shared with third parties.

V. Third-Party Services

Service	Purpose	Privacy Policy
Google Analytics	Website traffic analysis (anonymized)	policies.google.com/privacy
Facebook for WooCommerce	Product catalog sync, advertising	facebook.com/privacy
Wordfence Security	Security monitoring, spam/malware protection	wordfence.com/privacy-policy
Akismet	Anti-spam protection for forms	automattic.com/privacy
CookieYes	Cookie consent management	cookieyes.com/privacy-policy
SwissTransfer	Large audio file transfers for orders	swisstransfer.com/privacy-policy

VI. Cookies

We use the following types of cookies:

• Essential cookies — necessary for the website and shop to function correctly
• Analytics cookies — help us understand how visitors use the site (Google Analytics)
• Marketing cookies — used by Facebook for WooCommerce for advertising purposes
• Preference cookies — remember your settings and choices

You can manage your cookie preferences at any time via the cookie banner on our website, or through your browser settings.

VII. International Data Transfers

As we sell worldwide, some of your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. All such transfers are carried out in compliance with GDPR Chapter V, using one or more of the following safeguards:

• EU Standard Contractual Clauses (SCCs)
• EU-US Data Privacy Framework (where applicable)
• Adequacy decisions by the European Commission

VIII. Data Retention

• Order data — retained for 10 years to comply with German tax law (§147 AO)
• Customer account data — retained as long as the account is active, then deleted within 2 years of last activity
• Contact form messages — deleted within 12 months
• Newsletter subscribers — retained until unsubscribe or consent withdrawal
• Security logs — retained for up to 30 days

IX. Your Rights (GDPR Art. 15–22)

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of your personal data
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your data (“right to be forgotten”)
• Right to restriction — limit how we process your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — withdraw consent at any time (e.g. for newsletter)

To exercise any of these rights, contact us at: berlinervinyl@gmail.com You also have the right to lodge a complaint with the Berlin data protection authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit Alt-Moabit 59–61, 10555 Berlin — www.datenschutz-berlin.de

X. Newsletter

We plan to offer a newsletter service in the near future. When activated, subscription will require your explicit consent (double opt-in). You may unsubscribe at any time via the link in any newsletter email. Your email address will only be used for the newsletter and will never be shared with third parties.

XI. Minors

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us at berlinervinyl@gmail.com and we will delete it promptly.

XII. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction or alteration. These include SSL/TLS encryption, firewall protection (Wordfence), and secure payment processing via certified third-party providers.

XIII. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available at berlinervinylwerk.de/privacy-policy. We will notify users of significant changes via a notice on our website.