Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is Shervin Emanuel Sabai Kashani, Jahnstraße 2, 53773 Hennef, Germany, reachable by phone at 0151 72013714 and by email at info@blackout-box-shop.de.

2. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The servers are located in IONOS data centres in Germany. When you access this website, IONOS as our hosting provider processes technically necessary connection data, in particular IP address, date and time, the file accessed, referrer, and browser and system information. The legal basis is our legitimate interest in the secure and stable operation of the website under Art. 6(1)(f) GDPR. The retention period for these server log files follows the terms of our data processing agreement (DPA) with IONOS. A data processing agreement under Art. 28 GDPR is in place with IONOS.

3. Enquiry form

When you request a configuration through the enquiry form, your details are processed and stored server-side in order to handle your enquiry and prepare an individual quote. The legal basis is Art. 6(1)(b) GDPR or our legitimate interest in handling your enquiry under Art. 6(1)(f) GDPR. The data is deleted once it is no longer required for processing and no statutory retention obligations apply.

4. Contact form

When you write to us through the contact form, we process your name, your email address, your message and, if you provide it, your phone number in order to handle your request and reply to you. The details are stored in encrypted form, and we are notified of new messages by email. The legal basis is Art. 6(1)(b) GDPR where your message concerns a contract or pre-contractual measures and otherwise our legitimate interest in answering enquiries under Art. 6(1)(f) GDPR. Data is only passed on to the technical service providers for hosting and email delivery, insofar as this is necessary to provide the service. Your message is deleted no later than 12 months after receipt unless statutory retention obligations apply.

5. Cookies and tracking

This website does not use any tracking or marketing cookies beyond what is technically necessary. If analytics, marketing, maps, video, chat, review, or other third-party services are integrated in future, consent management, this privacy policy, and any required information on data transfers to third countries will be updated accordingly before activation.

6. Newsletter

You can sign up in the website footer for our newsletter with information on new configurations and availability. We store your email address, the website language and the time of sign-up. Processing is based on your consent (Art. 6(1)(a) GDPR), which you give by submitting the sign-up form. We do not send a confirmation email, so please enter only your own email address.

You can withdraw your consent at any time with effect for the future by using the unsubscribe link in our newsletters or by writing to info@blackout-box-shop.de. Your email address will then be deleted.

7. Payment service providers

This website does not currently offer online payment. Any payment information shown is purely informational. Once online payments are offered, the payment service providers used and their data processing will be added here.

8. Retention period

Personal data is stored only for as long as necessary for the respective purpose or as required by statutory retention periods. Contact form messages are deleted after 12 months. Newsletter data is stored until you withdraw your consent.

9. Your rights

Subject to the statutory requirements, data subjects have rights to access, rectification, erasure, restriction of processing, data portability, and objection. Any consent given can be withdrawn at any time with effect for the future.

10. Right to complain

You have the right to lodge a complaint with a competent data protection supervisory authority. The competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

11. Data security

This website operates exclusively over encrypted HTTPS. Access rights and hosting and email accounts are protected with appropriate technical and organisational measures.

12. Currency of this notice

This privacy policy will be updated whenever hosting, forms, the services used, analytics, or payment methods change.