Privacy policy

Controller

Christhunt Productions, 7901 4th St. N - STE 300, 33702 St. Petersburg - Florida, United States, E-mail: legal [at] christhunt-productions [dot] com

Purposes and legal bases

We process your order data (name, address, e-mail, phone, order and payment details) to perform the contract (Art. 6(1)(b) GDPR) and to meet statutory retention obligations (Art. 6(1)(c) GDPR). When you visit the site, our hosting provider processes technical access data (e.g. IP address, time) to keep the site secure (Art. 6(1)(f) GDPR, legitimate interest in secure operation).

This website is delivered via Cloudflare (network and security service, Cloudflare Inc., USA). In doing so, Cloudflare processes technically necessary data such as the IP address. For spam protection at checkout and in the contact form we use Cloudflare Turnstile. The legal basis is our legitimate interest in secure operation and protection against abuse (Art. 6(1)(f) GDPR).

Recipients

Our hosting provider (operation of the site and sending e-mails), the payment service privcart (for crypto payments), the card payment provider (for card payments), our bank (for bank transfers) and the carrier that transports your parcel, each only as far as needed for the order.

Storage period

We keep invoices and order data relevant for accounting for 10 years (section 147 German Fiscal Code, section 257 German Commercial Code). Other commercial letters are kept for 6 years (section 257 German Commercial Code). Other contract data, for example details of a withdrawal, is deleted after the regular limitation period of 3 years (section 195 German Civil Code), unless a longer legal obligation applies. Messages from the contact form are deleted once the enquiry has been dealt with and no retention obligation applies.

Our own log files (error, mail and payment logs) are deleted after 90 days.

Obligation to provide data

We need the order data for the contract, without it we cannot deliver. No automated decision-making takes place.

Contact form

If you write to us via the contact form, we process your name, e-mail address and message in order to reply to you (Art. 6(1)(b) GDPR, for general enquiries Art. 6(1)(f) GDPR). The message is forwarded to us by e-mail and stored for processing.

Online withdrawal

If you withdraw from your contract via the online form, we process the order number, e-mail address, name and your details of the withdrawal in order to process it (Art. 6(1)(c) GDPR).

Cloudflare and Turnstile

To protect against abuse we use Cloudflare Turnstile. Technical data such as your IP address is transmitted to Cloudflare, which may also process it in the USA. The transfer is based on standard contractual clauses (Art. 46 GDPR) and, where Cloudflare is certified for it, on the EU-US Data Privacy Framework (Art. 45 GDPR). Turnstile is only included if the shop has switched it on.

Cookies

We only use one technically necessary session cookie for the cart and security (section 25(2) no. 2 TDDDG). It is deleted when you close your browser.

Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15 to 20 GDPR). You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

Right to object

You can object at any time to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR).