Privacy Policy

 

  1. Controller

Constans Attic
Owner: Ignatios Ioannidis
Sonnenhalde 9
73453 Abtsgmünd
Germany
Email: info@constansattic.com
Phone: +49151 22249081

 

  1. Collection and Processing of Personal Data

We collect and process personal data when you visit our website, make a purchase, or contact us in any other way. The collected data includes:

  • Contact Information: Name, email address, address, phone number.
  • Order Data: Information about purchased items, billing and shipping address.
  • Payment Data: Payment method, transaction details (payment data is processed directly by the payment service providers and is not stored by us).
  • Usage Data: IP address, browser type and version, operating system, access times and dates.
  • Communication Data: Information provided during contact (e.g., via email).

 

  1. Purposes of Processing

Your personal data will be processed for the following purposes:

  • Contract Fulfillment: To process and execute your orders and to communicate with you regarding your orders.
  • Customer Service: To respond to your inquiries and to improve our customer service.
  • Payment Processing: To handle your payments and prevent fraud.
  • Invoicing: To create and manage invoices.
  • Marketing: To inform you about offers and news if you have consented to receive newsletters. This also includes the use of your data for personalized advertising.
  • Complaints and Returns: To process complaints and returns.

 

  1. Legal Basis for Processing

The processing of your personal data is based on the following legal grounds:

  • Contract Fulfillment (Art. 6 para. 1 lit. b GDPR): The processing is necessary for the fulfillment of a contract you have entered into with us (e.g., for orders and invoices).
  • Consent (Art. 6 para. 1 lit. a GDPR): If you have given us your consent to process your data (e.g., for receiving newsletters).
  • Legal Obligation (Art. 6 para. 1 lit. c GDPR): If the processing is required to fulfill a legal obligation.
  • Legitimate Interests (Art. 6 para. 1 lit. f GDPR): If the processing is necessary to protect our legitimate interests, provided that your interests or fundamental rights and freedoms do not outweigh those interests.

 

  1. Data Disclosure and Transfer

We will only disclose your personal data in the following cases:

  • Payment Service Providers: To process payment transactions, e.g., to payment providers like PayPal.
  • Shipping Service Providers: To deliver orders, e.g., to shipping companies.
  • Legal Requirements: To fulfill legal requirements or upon governmental or judicial orders.
  • Processors: To assist in providing our services, e.g., IT service providers who are contractually obligated to comply with data protection regulations.

No transfer of data to third countries (outside the EU) takes place.

 

  1. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve user experience and analyze website traffic. Cookies are small text files stored on your device. You can manage the use of cookies in your browser settings or give consent through a corresponding cookie banner.

Types of cookies:

  • Necessary Cookies: For the basic functionality of the website.
  • Performance Cookies: To analyze the use of our website and improve user experience.
  • Functional Cookies: To store your settings and preferences.

 

  1. Data Retention Period

Your personal data will only be stored as long as necessary to fulfill the stated purposes or as required by legal retention periods. In general, order data is retained for a period of 10 years to comply with tax requirements. Data will be deleted or anonymized as soon as the purpose of storage no longer applies, unless legal retention periods require longer storage.

 

  1. Rights of Affected Persons

You have the right:

  • To Information: About the personal data we hold about you.
  • To Rectification: In case of inaccuracies or incompleteness of your data.
  • To Deletion: Of your personal data, provided there are no legal storage obligations to the contrary.
  • To Restriction of Processing: In certain cases, e.g., if the accuracy of the data is contested.
  • To Object: To the processing of your data if it is based on a legitimate interest. The objection can be made at any time by contacting us via the provided contact information.
  • To Data Portability: To receive your data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
  • To Lodge a Complaint: You also have the right to lodge a complaint with a supervisory authority if you believe your rights have been violated. The responsible supervisory authority for data protection is the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

Website: www.bfdi.bund.de
Address: Husarenstraße 30, 53117 Bonn

To exercise your rights, you can contact us using the contact information provided above.

 

  1. Data Security

We take appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or destruction. This includes measures such as SSL encryption for the transmission of sensitive data, regular security checks, access controls, and regular training of our employees on data protection issues.

 

  1. Changes to the Privacy Policy

We reserve the right to occasionally adapt this privacy policy to consider changes to our website or legal requirements. The updated version will be published on our website. Users will be informed of significant changes, e.g., by a notice on our website or through notifications. The privacy policy is regularly reviewed and updated to ensure that it complies with current legal requirements.

 

  1. Contact for Data Protection Concerns

If you have any questions or concerns regarding the processing of your personal data, please contact us at:
Email: info@constansattic.com
Address: Sonnenhalde 9, 73453 Abtsgmünd, Germany