Datenschutzerklärung

1. Verantwortlicher / Data Controller

[Ihr Name / Firmenname]
[Adresse]
E-Mail: hello@kintsugi.bo

2. Welche Daten wir erheben

We collect the following personal data:

• Order data: Name, email, shipping address, phone number — for order fulfillment (Art. 6(1)(b) GDPR)
• Payment data: Processed securely by Stripe. We do not store credit card details.
• Contact form: Name, email, subject, message — to respond to your inquiry (Art. 6(1)(b) GDPR)
• Newsletter: Email address, IP address, consent timestamp — with your explicit consent (Art. 6(1)(a) GDPR)
• Chat: Conversation content — to provide customer support (Art. 6(1)(f) GDPR, legitimate interest)
• Cookies: Consent preferences, session data — see Cookie section below
• Server logs: IP address, browser type, timestamp — for security (Art. 6(1)(f) GDPR)

3. Auftragsverarbeiter / Third-Party Processors

• Stripe, Inc. (USA) — Payment processing. Privacy Shield / SCCs in place.
• Supabase, Inc. (USA, EU hosting) — Database hosting. Data stored in EU (eu-west-3).
• Resend — Transactional email delivery.
• Anthropic (USA) — AI chatbot responses. No personal data is stored by Anthropic beyond the API call.
• Vercel — Website hosting and CDN.

4. Aufbewahrungsfristen / Data Retention

• Order data: 10 years (German HGB §257, AO §147 tax retention requirements)
• Contact submissions: 6 months after resolution
• Newsletter: Until unsubscribed
• Chat conversations: 90 days
• Cookie consent records: 3 years

5. Cookies

We use the following types of cookies:

• Essential: Session management, cart functionality, cookie consent preferences. Always active.
• Analytics: Website usage statistics to improve our services. Only with your consent.
• Marketing: Personalized content and advertising. Only with your consent.

You can manage your cookie preferences at any time via the “Manage Cookies” link in the footer.

6. Ihre Rechte / Your Rights

Under the GDPR, you have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data / “right to be forgotten” (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent at any time (Art. 7(3))

To exercise any of these rights, contact us at hello@kintsugi.bo.

7. Beschwerderecht / Right to Complain

You have the right to lodge a complaint with a supervisory authority. The competent authority for Germany is the data protection authority of your state (Landesdatenschutzbeauftragter).

8. Newsletter

Our newsletter uses a double opt-in process. We send a confirmation email to verify your email address. We record the IP address and timestamp of your subscription as proof of consent. You can unsubscribe at any time via the link in every newsletter email.