Privacy Policy

This policy explains which personal data we process when you visit this website, subscribe to our newsletter or contact us, and which rights you have under the General Data Protection Regulation (GDPR).

1. Controller

2. Hosting and server log files

This website is hosted by an external provider. When you open a page, the web server automatically stores technical data in log files: the IP address of your device, date and time of the request, the page requested, the referring page, the browser type and version, and the operating system. This data is needed to deliver the website, to keep it secure and stable and to detect misuse. It is not merged with other data sources. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is the secure and error-free operation of the website. Log files are deleted after 14 days at the latest unless they are needed to investigate a security incident. The hosting provider processes this data on our behalf under a data processing agreement according to Art. 28 GDPR.

3. Cookies and tracking

This website does not use tracking cookies, analytics services or advertising pixels. We only use cookies or similar storage that are strictly necessary to run the website, for example to remember a setting you have chosen. These do not require consent (§ 25 (2) TDDDG). Should we add a shop system in the future, it will need technically necessary cookies for the shopping cart and checkout. We will update this policy before that happens.

4. Newsletter

If you subscribe to our newsletter, we process your email address to send you information about the shop opening, new pieces and offers, including the welcome discount for subscribers. We only need your email address. Any other data you provide is voluntary.

We use the double opt-in procedure. After you enter your address you receive an email with a confirmation link. Your subscription only becomes active after you click that link. We log the time of your registration and confirmation and the IP address used so that we can prove your consent.

The legal basis is your consent, Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future, for example by clicking the unsubscribe link in every newsletter or by sending an email to the address above. Withdrawal does not affect the lawfulness of processing carried out before it. After you unsubscribe, we delete your address from the distribution list. We may keep the address in a blocklist to make sure we do not email you again. This is based on Art. 6 (1) (f) GDPR.

We send the newsletter through an email service provider who processes your data on our behalf under a data processing agreement according to Art. 28 GDPR. The provider stores the data on servers within the European Union. We will name the provider here as soon as the newsletter goes live.

5. Contact by email or phone

If you contact us by email or phone, we store your request and your contact details to answer it and for follow-up questions. The legal basis is Art. 6 (1) (b) GDPR if your request relates to a contract or a possible purchase, otherwise Art. 6 (1) (f) GDPR. Our legitimate interest is answering your enquiry. We delete the data once your request has been handled and no legal retention periods apply.

6. Orders and customer accounts

Once the shop is open we will process the data you enter when placing an order: name, delivery and billing address, email address, phone number where given, and payment information handled by the payment provider. We need this data to conclude and fulfil the purchase contract, Art. 6 (1) (b) GDPR. We pass your name and delivery address to the shipping carrier so that the parcel can be delivered. We pass payment data to the selected payment provider. We keep order data for the retention periods of German commercial and tax law, which are six or ten years (§ 257 HGB, § 147 AO).

7. Social media links

This website links to our profiles on Instagram and TikTok. These are plain links. No data is sent to those platforms when you view our website. When you click a link you leave our website, and the privacy policy of the respective platform applies.

8. Recipients of data

We only pass on personal data to third parties where this is necessary to fulfil a contract, where you have consented, where we are legally obliged to do so, or where a processor acts on our behalf under a data processing agreement. Processors are the hosting provider, the email service provider for the newsletter, and, once the shop is open, the payment provider and the shipping carrier.

9. Storage period

We store personal data only as long as necessary for the purpose it was collected for, or as long as legal retention periods require. After that the data is deleted.

10. Your rights

You have the following rights regarding your personal data:

• Access to the data we hold about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
• Withdrawal of consent at any time with effect for the future (Art. 7 (3) GDPR)

To exercise these rights, email us at hello@maxim-buz.dev.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

11. Data security

This website uses TLS encryption. Please note that data transmission over the internet can have security gaps. Complete protection against access by third parties is not possible.

12. Changes to this policy

We will update this policy when our website, our services or the legal situation change. The current version is always available on this page.

Last updated: September 2026