Privacy Policy

1. Controller

Diztree
Owner: Benjamin Klügel
Achtern Diek 7
25436 Uetersen
Germany
Email: [email address]
Phone: [phone number]

2. Legal Bases

We process personal data on the basis of Art. 6(1)(a) (consent), (b) (contract/pre-contractual), (c) (legal obligation) and (f) GDPR (legitimate interest).

3. Your Rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Consent may be withdrawn at any time (Art. 7(3) GDPR). You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

4. Hosting & Server Log Files

The shop is hosted in Germany: [hosting provider + address] (data processing on our behalf pursuant to Art. 28 GDPR). When the shop is accessed, server log files are processed (IP address, date/time, requested resource, referrer, browser/OS) for the purposes of delivery, stability and security. Legal basis: Art. 6(1)(f) GDPR.

5. Cookies & Consent

We use cookies in the categories necessary, functional, analytics and marketing. Your selection is stored in the cookie_consent cookie and can be changed at any time via the cookie settings. Necessary cookies: § 25(2) TDDDG in conjunction with Art. 6(1)(f) GDPR. Functional/analytics/marketing cookies only with consent: § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

6. Orders & Contract Processing

To process your order, we process the data required for this purpose: name, email address, billing and, where applicable, delivery address, ordered items as well as order/payment status. If you create a customer account, we additionally process your access credentials (email, password as a hash). Legal basis: Art. 6(1)(b) GDPR; for statutory retention, Art. 6(1)(c) GDPR.

7. Payment (Stripe)

Payments are processed via Stripe (Stripe Payments Europe Ltd., Ireland; where applicable Stripe, Inc., USA). In this context, payment- and transaction-related data is processed by Stripe; full payment-instrument data is processed/stored by Stripe, not by us. Legal basis: Art. 6(1)(b) GDPR. Stripe's privacy notices additionally apply.

8. Shipping & Merch Fulfillment

When you order physical products (merch), production and shipping are carried out by our service provider Shirtigo GmbH (Cologne, Germany) using a print-on-demand process. For this purpose, the data required for production and shipping (name, delivery address, order details) is transmitted to Shirtigo or the commissioned shipping company. Legal basis: Art. 6(1)(b) GDPR.

9. Digital Products (Downloads)

When you purchase digital products (e.g. music downloads), we process the data required to provide them (purchase, provision of the download/access). Note on the right of withdrawal for digital content: see the Terms and Conditions/withdrawal instructions. Legal basis: Art. 6(1)(b) GDPR.

10. Reach Measurement & Marketing

Where activated, the shop may use marketing/tracking technologies (e.g. TikTok Pixel, Meta tools). These are loaded only after your consent in the "marketing" category; in doing so, usage/device/event data is transmitted to the respective providers. Legal basis: Art. 6(1)(a) GDPR; withdrawal at any time via the cookie settings.

11. Transfers to Third Countries

Individual services (e.g. Stripe, TikTok, Meta) may process data outside the EU/EEA – in particular in the USA. To the extent that no adequacy decision (e.g. EU-US Data Privacy Framework) applies, we base the transfer on the EU Standard Contractual Clauses (Art. 46 GDPR).

12. Retention Period, Data Security & Changes

We store personal data only for as long as is necessary for the stated purposes or as long as statutory retention obligations exist (commercial/tax law, generally 6 or 10 years respectively). We take appropriate technical and organizational protective measures (including TLS encryption). The version of this statement published here at any given time applies.