Privacy policy

1. Controller

The controller responsible for processing your personal data on this website is Felix Taylor, trading as Platten Haus, Ohlauer Straße 18, 10999 Berlin, Germany, info@platten.haus.

2. Data we process, purposes and legal bases

Website use. When you visit the website, the hosting platform records technical data such as your IP address, the pages requested, the date and time of the request, the browser type and the referring page. This data is needed to deliver the website and to keep it secure. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a secure website).

Orders. When you place an order, we process your name, delivery and billing address, email address, telephone number where given, the ordered products, the price and the payment details shown to us. We use this data to conclude and perform the contract, including payment, delivery, withdrawal, defect claims and communication about your order. Legal basis: Art. 6(1)(b) GDPR. We retain order and invoice data for as long as commercial and tax law require. Legal basis: Art. 6(1)(c) GDPR.

Enquiries. When you contact us by email, we process the data you provide in order to answer your enquiry. Legal basis: Art. 6(1)(b) GDPR where the enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

Cookies. See section 6.

Providing personal data for an order is necessary to conclude the contract; without it we cannot process the order. Providing other data is voluntary.

3. Recipients

We share personal data only with the service providers needed to operate the shop and perform the contract:

  • Shopify International Ltd, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, which provides the shop platform, hosting and checkout and processes data on our behalf as a processor under Art. 28 GDPR.
  • Shopify Payments, the payment service of Shopify International Ltd, where you pay by card or another method offered through Shopify Payments. Payment data is processed by the payment service and its banking and card-network partners.
  • PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, where you pay by PayPal. PayPal processes your payment data under its own responsibility.
  • The carrier that delivers your order receives your name, delivery address and, where needed for delivery, your email address or telephone number. Legal basis: Art. 6(1)(b) GDPR.

We do not sell personal data and do not use it for advertising.

4. Transfers outside the European Economic Area

Shopify processes data within the Shopify group, including in Canada and the United States. PayPal may transfer data to PayPal group companies outside the EEA. Where personal data is transferred outside the EEA, the transfer is based on an adequacy decision of the European Commission or on the standard contractual clauses under Art. 46(2)(c) GDPR, as published by each provider.

5. Retention

We keep personal data only for as long as it is needed for the purpose for which it was collected. Order and invoice data is kept for the retention periods required by German commercial and tax law. Enquiry data is deleted when the enquiry has been dealt with, unless a contract or a legal obligation requires longer retention.

6. Cookies and consent

The website uses cookies and similar technologies set by the Shopify platform. Cookies that are strictly necessary for the shop to function, such as the basket and checkout, are set without consent (§ 25 Abs. 2 TDDDG; Art. 6(1)(f) GDPR). All other cookies, including any for analytics or marketing, are set only with your consent (§ 25 Abs. 1 TDDDG; Art. 6(1)(a) GDPR). You give or refuse consent in the cookie banner shown on your first visit and can change your choice at any time through the "Cookie preferences" link in the footer. Withdrawing consent does not affect processing carried out before the withdrawal.

7. Your rights

You have the right to access your personal data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise these rights, contact us at info@platten.haus.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany. You may also complain to the authority in the EU Member State of your habitual residence or place of work.

8. Changes

We update this privacy policy when our processing changes. The current version is published on this page.

Last updated: 4 September 2026