1. Controller
The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:
Tatzenwohl GmbH
Registered Office: Landsbergerstraße 155 Haus 1, 80687 Munich, Germany
Email: info@tatzenwohl.com
Website: www.tatzenwohl.com

2. Purposes of Data Processing
We process personal data for the following purposes:
to provide our online shop,
to process and fulfill your orders,
to communicate with customers,
to process payments,
to comply with legal obligations,
to ensure security measures,
to send you newsletters or product-related information upon request (with consent).
Please note: Providing certain personal data (e.g., name, shipping address, payment details) is necessary for order processing and delivery. Without this data, we cannot fulfill your order.

3. Legal Basis for Processing
We process data on the basis of the following legal grounds:
Art. 6(1)(b) GDPR (performance of a contract),
Art. 6(1)(a) GDPR (consent),
Art. 6(1)(c) GDPR (legal obligation),
Art. 6(1)(f) GDPR (legitimate interests, e.g., IT security, marketing).

4. Categories of Personal Data
We may process the following categories of personal data:
Basic data (e.g., name, address, email address),
Contractual data (e.g., orders, payment information),
Communication data (e.g., emails, customer service messages),
Usage data (e.g., pages visited, click behavior),
Meta/communication data (e.g., IP address, browser type).

5. Recipients of the Data
Your data may be shared with the following categories of recipients:
Payment service providers (e.g., PayPal, credit card companies),
IT and hosting providers,
Shipping and logistics providers,
Tax advisors or legal consultants,
Customer communication and newsletter platforms (e.g., Mailchimp).

6. Payment via PayPal and Credit Card
When choosing to pay via PayPal or credit card, you will be redirected to the relevant provider. Their respective privacy policies apply. We only receive transaction-related data (e.g., payment status, transaction ID).

7. Duration of Storage
Personal data will be stored:
for as long as necessary to fulfill our contractual obligations,
as required by legal retention periods (e.g., tax or commercial law),
or until you revoke your consent, unless another legal basis applies.

8. Cookies & Tracking Technologies
We use cookies to ensure the website functions correctly and to analyze user behavior. Third-party technologies (e.g., Google Analytics) may also be used. You may accept or decline cookies via our cookie banner.

9. Your Rights
You have the right to:
Access (Art. 15 GDPR),
Rectification (Art. 16 GDPR),
Erasure (Art. 17 GDPR),
Restriction of processing (Art. 18 GDPR),
Data portability (Art. 20 GDPR),
Object to processing (Art. 21 GDPR),
Withdraw consent (Art. 7(3) GDPR),
Lodge a complaint with a supervisory authority (Art. 77 GDPR).

10. Data Security
We implement appropriate technical and organizational measures to protect your data from loss, misuse, or unauthorized access.

11. Changes to This Privacy Policy
This privacy policy may be updated from time to time. The current version is always available on our website.