Privacy Policy
We take the protection of your personal data seriously. This privacy policy explains which data we process when you use the femtreva online shop and website, for what purposes and on what legal basis, and which rights you have.
1. Controller
Albrecht IT Services GmbH
Bismarckstraße 2, 25421 Pinneberg, Germany
Email: info@femtreva.de · Phone: +49 162 3001047
2. Accessing the website / server log files
When you access our website, technical data (in particular IP address, date and time, requested page, referrer, browser/operating system) is processed for the purpose of delivering the site, ensuring stability and security. Legal basis: our legitimate interest in a secure and functional website (Art. 6(1)(f) GDPR).
3. Cookies
We use technically necessary cookies required for the operation of the shop (e.g. session, cart, login). Legal basis: § 25 (2) TDDDG and Art. 6(1)(f) GDPR. Any non-essential cookies are only used with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
4. User account
If you create an account, we process the data you provide (e.g. name, email, address, date of birth for age verification) to operate the account. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
5. Order processing in the shop
To process your order we use the data you provide, in particular name, delivery and billing address, email address, telephone number, order and payment details. These data are used to conclude and fulfil the purchase contract, to arrange shipping and for accounting. Legal basis: Art. 6(1)(b) GDPR (performance of the contract) and, for retention, Art. 6(1)(c) GDPR (legal obligations).
6. Payment processing (Mollie)
For online payments (PayPal, credit card, SEPA direct debit, instant bank transfer) we use the payment service provider Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands. When you choose an online payment method, the data required for payment (e.g. amount, order reference and the payment data you enter) are transmitted to and processed by Mollie. Depending on the chosen method, further providers (e.g. PayPal, your bank) may be involved. Legal basis: Art. 6(1)(b) GDPR. Details can be found in Mollie’s privacy policy.
7. Shipping and drop-shipping
For delivery, we pass the necessary data (in particular name and delivery address) to the shipping service provider used. Some items are shipped directly on our behalf by a wholesale partner within the EU (drop-shipping); in these cases the delivery data required for shipping are transmitted to that partner. Legal basis: Art. 6(1)(b) GDPR.
8. Contact and support
If you contact us (e.g. via the contact form or by email), we process your details to handle your request. Our email/support communication is operated via Microsoft 365 (Microsoft Ireland Operations Ltd.). Legal basis: Art. 6(1)(b) and (f) GDPR.
9. Recipients / processors
We use carefully selected service providers who process data on our behalf, in particular for hosting/operation of the platform, dispatch of goods, payment processing and email/support. Where required, data processing agreements pursuant to Art. 28 GDPR are in place. A transfer to third countries only takes place on the basis of appropriate safeguards (e.g. EU standard contractual clauses).
10. Retention periods
We store personal data only as long as necessary for the respective purpose or as long as we are required to retain it by law (in particular commercial and tax retention periods of 6 or 10 years for invoices and order documents). After that, the data is deleted or anonymised.
11. Your rights
You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) (Art. 21 GDPR). Where processing is based on consent, you may withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority, e.g. the Independent Centre for Data Protection Schleswig-Holstein (ULD), Kiel.
12. Obligation to provide data
For the conclusion and performance of a purchase contract, providing the data required for the order is necessary; without it we cannot process the order.
13. Changes
We may adapt this privacy policy to reflect changes in our services or the legal situation. The current version applies.