Privacy Policy
Last Updated: [Current Date]
1. Data Controller
Growsolid Retail GmbH
Am Hardtwald 6-8, 76275 Ettlingen, Germany
Email: info@vapstore.at | Phone: +49 7257 938 90-20
2. Data Collection & Use
2.1 Website Access
- We automatically log IP addresses, browser type, and access times (server logs) for security and analytics. Data is deleted after 7 days.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
2.2 Orders & Customer Accounts
- Required data: Name, address, payment details.
- Purpose: Contract fulfillment (Art. 6(1)(b) GDPR).
- Account data is retained per tax/commercial law (usually 10 years) unless deleted earlier.
3. Data Sharing
3.1 Payment Processors
- PayPal, SOFORT, Credit Cards: Data is shared only for payment processing.
- Purchase on Account: Credit checks via SCHUFA/Creditreform Boniversum (Art. 22(2)(a) GDPR).
3.2 Shipping & Logistics
- DHL/Hello Concepts: Contact details shared for delivery (with consent for notifications).
- Debt Collection: Only if payments are overdue (Art. 6(1)(b)/(f) GDPR).
3.3 Service Providers
- Newsletters: Sendinblue (Berlin) for email campaigns.
- Order Processing: JTL-Software (Germany).
4. Cookies & Tracking
- Necessary Cookies: Enable core site functionality.
- Analytics: Google Analytics (IP anonymized) – opt-out via browser plugin.
- Marketing:
- reCAPTCHA: Spam protection (Google Ireland).
- Trengo: Live chat support (Netherlands).
5. Social Media
- We maintain profiles on Facebook, Instagram, etc. Data processing is governed by each platform’s policies.
- WhatsApp: Used only for customer support (not for marketing). Messages are not securely encrypted.
6. Your Rights
- Access, Correction, Deletion (Art. 15–17 GDPR).
- Restrict Processing (Art. 18 GDPR) or Data Portability (Art. 20 GDPR).
- Withdraw Consent (e.g., newsletters) or Object to direct marketing (Art. 21 GDPR).
- Complaints: Lodge with a supervisory authority.
7. Contact
For privacy requests, email info@vapstore.at or write to our postal address above.