Privacy policy


The data controller responsible for data processing is:
Yasar Can Özkan
STRATCHD by cfab
Am Seestern 18
40547 Düsseldorf

Contact: The fastest way we can help you is if you contact us via the contact option on our website.
We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below we inform you in detail about the handling of your data.

1. Access data and hosting

You can visit our websites without providing any personal information. Each time a website is called up, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call.

This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. This serves to protect our legitimate interests in a correct presentation of our offer, which predominate in the context of a balancing of interests, in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

All access data will be deleted no later than seven days after the end of your site visit.

2. Data processing for contract execution and for contacting us

2.1 Data processing for contract execution
For the purpose of contract execution (including inquiries about and processing of any existing warranty and performance disruption claims as well as any statutory update obligations) in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR, we collect personal data if you voluntarily provide it to us as part of your order.

Mandatory fields are marked as such, as we absolutely need this data for contract execution and we cannot send the order without providing it. Which data is collected can be seen from the respective input forms.

Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this privacy policy.

After complete execution of the contract, your data will be restricted for further processing and deleted after expiry of the tax and commercial law retention periods in accordance with Art. 6 Para. 1 S. 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

2.2 Customer account
Insofar as you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR by deciding to open a customer account, we use your data for the purpose of opening a customer account and for storing your data for future orders on our website.

The deletion of your customer account is possible at any time and can be done either by a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account.

After deletion of your customer account, your data will be deleted, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this as permitted by law.

2.3 Contacting us
As part of customer communication, we collect personal data to process your inquiries in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR if you voluntarily provide it to us when contacting us, e.g. via contact form or email.

After complete processing of your inquiry, your data will be deleted, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this as permitted by law.

3. Data processing for the purpose of shipping processing

For contract fulfillment in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

Data transfer to shipping service providers for the purpose of shipping notification

If you have given us your express consent for this during or after your order, we will pass on your email address to the selected shipping service provider on the basis of this in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, so that they can contact you before delivery for the purpose of delivery notification or coordination.

The consent can be revoked at any time by a message to the contact option described in this privacy policy or directly to the shipping service provider.

General Logistics Systems Germany GmbH & Co. OHG
GLS Germany-Straße 1 - 7
DE-36286 Neuenstein
Germany

United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany

Hermes Germany GmbH
Essener Straße 89
D-22419 Hamburg
Germany

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany

4. Data processing for payment processing

When processing payments in our online shop, we work with technical service providers, credit institutions and payment service providers.

4.1 Data processing for transaction processing
Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers, who work for us as part of order processing, or to the commissioned credit institutions or the selected payment service provider, insofar as this is necessary for processing the payment.

This serves the fulfillment of the contract in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR.

In some cases, payment service providers collect the data required for processing the payment themselves, e.g. on their own website or via a technical integration in the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

4.2 Data processing for the purpose of fraud prevention and the optimization of our payment processes
If necessary, we provide our service providers with further data, which they use together with the data necessary for payment processing as our processors for the purpose of fraud prevention and the optimization of our payment processes.

This serves to protect our legitimate interests in protection against fraud and in efficient payment management in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

5. Advertising by email

5.1 E-mail newsletter with registration, newsletter tracking with separate consent
If you register for our newsletter, we use the data required for this or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR.

You can unsubscribe from the newsletter at any time by sending a message to the contact option described or via a link provided for this purpose in the newsletter.

After unsubscribing, we will delete your e-mail address from the recipient list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law.

If you have also given us your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR to analyze our newsletters, we will also analyze your interaction with our newsletter by measuring, storing, and evaluating open rates and click rates for the purpose of designing future newsletter campaigns.

  • Referrer URL
  • Date and time of access
  • Browser used
  • IP address
  • E-mail address
  • Date and time of registration and confirmation

Unsubscribing from newsletter tracking is possible at any time via the contact option described or a link provided for this purpose in the newsletter.

The information is stored for as long as you have subscribed to the newsletter.

5.2 Newsletter dispatch
The newsletter and the newsletter tracking described above may also be carried out by our service providers as part of processing on our behalf.

6. Cookies and other technologies

6.1 General information
In order to make the visit to our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages.

Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted after the end of the browser session. Other cookies remain on your end device and enable us to recognize your browser on your next visit.

Protection of privacy on end devices
When using our online offer, we use strictly necessary technologies to be able to provide the telemedia service explicitly requested.

For functions that are not strictly necessary, the storage of information on your end device or access to information already stored requires your consent.

If you do not give your consent, parts of the website may not be fully usable.

Any downstream data processing by cookies and other technologies
We use technologies that are necessary for the use of certain functions of our website, e.g. the shopping cart function.

In this context, the IP address, time of visit, device and browser information, and information on the use of our website may be processed in particular.

In addition, we use technologies to fulfill legal obligations and, if necessary, for web analysis and online marketing.

7. Use of cookies and other technologies

Insofar as you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, we use cookies and other technologies from third-party providers on our website.

After the purpose has ceased to exist and the use of the respective technology has ended, the data collected in this context will be deleted, unless there are legal storage obligations.

You can revoke your consent at any time with effect for the future.

Important: The analysis, marketing, and tracking services mentioned in this section must correspond to the services actually used in the STRATCHD by cfab online shop.

8. Social Media

8.1 Social media links
Social media links to various platforms may be integrated on our website. When you click on such a link, you will be redirected to the respective platform.

The data protection regulations of the respective platform operator apply.

8.2 Our online presence
STRATCHD by cfab may be represented on social networks such as Instagram, Facebook, TikTok, Pinterest, YouTube, or other platforms.

When you visit our profiles on these platforms, personal data may be processed by the respective platform operator.

Detailed information on the processing and use of your data as well as your rights and setting options can be found in the privacy policy of the respective platform operator.

9. Contact options and your rights

9.1 Your rights
As a data subject, you have the following rights:

  • pursuant to Art. 15 GDPR, the right to information about your personal data processed by us;
  • pursuant to Art. 16 GDPR, the right to immediate correction of incorrect or completion of incomplete personal data;
  • pursuant to Art. 17 GDPR, the right to deletion of your personal data stored by us, provided that no legal reasons prevent deletion;
  • pursuant to Art. 18 GDPR, the right to restriction of processing of your personal data;
  • pursuant to Art. 20 GDPR, the right to receive your personal data in a structured, common, and machine-readable format or to request its transfer to another controller;
  • pursuant to Art. 77 GDPR, the right to complain to a competent supervisory authority.


Right to object

Insofar as we process personal data as explained above to safeguard our legitimate interests that prevail in the context of a balancing of interests, you can object to this processing with effect for the future.

If the processing is for direct marketing purposes, you can exercise this right at any time.

Insofar as the processing is for other purposes, you have a right to object if there are reasons arising from your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

This does not apply if the processing is for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.


9.2 Contact options
If you have any questions regarding the collection, processing, or use of your personal data, for information, correction, restriction, or deletion of data, as well as for the revocation of consent granted or objection to a specific use of data, you can contact us directly using the contact details in our legal notice.