Privacy Policy

1. Overview

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. I process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

2. Controller

Tim Geuder
Albert-Schweitzer Straße 35
68535 Edingen-Neckarhausen, Germany
Email: tim@pokeice.com

3. Data I collect

When you register and place an order on my website, the following data is collected and stored in my database:

• First and last name
• Email address
• Delivery and billing address (street, postal code, city, country)
• Phone number (optional)
• Order history

Passwords are only ever stored as a bcrypt hash — never in plain text. When you simply browse the site, my server automatically stores log files (IP address, date and time, page requested, browser type) which are required for the secure and stable operation of the website.

4. Purposes & legal bases

• Processing orders, shipping and customer communication — to perform the contract with you (Art. 6 (1) (b) GDPR).
• Managing your customer account — to perform the contract (Art. 6 (1) (b) GDPR).
• Invoicing and statutory retention — to comply with legal obligations (Art. 6 (1) (c) GDPR).
• Secure operation of the website (server logs) — my legitimate interest in a safe, functioning service (Art. 6 (1) (f) GDPR).
• Optional analytics / marketing — only on the basis of your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time.

5. Recipients & processors

I do not sell your data. I only share it where necessary to fulfil your order:

• Payment processing: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands. Privacy policy: mollie.com/privacy.
• Shipping: the chosen carrier (e.g. DHL) receives the delivery address to deliver your parcel.
• Email delivery: my email/hosting provider transmits order and notification emails on my behalf.

6. Retention

I keep your account and order data for as long as your account exists or as needed to process your orders. Invoices and order documents are retained for the statutory period of up to 10 years (§ 147 AO, § 257 HGB). Server log files are deleted or anonymised after a short period. After the retention periods expire, your data is deleted.

7. Cookies & local storage

This website uses technically necessary cookies / local storage for the session (WordPress), the shopping cart, currency selection and login status — these are required for the site to work. Any analytics or marketing cookies are only ever set after your explicit consent via my cookie banner. You can review or change your choice at any time using the “Cookie Settings” link in the footer. No analytics or advertising trackers are active without your consent.

8. Your rights

You have the right at any time to:

• access your stored data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure of your data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)
• withdraw any consent you have given, with effect for the future (Art. 7 (3) GDPR)

To exercise your rights, please contact: tim@pokeice.com

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding my processing of your personal data.