Privacy Policy
This privacy policy explains how Zwischenform processes personal data when you visit zwischenform.shop, contact us or place an order.
1. Controller
Zwischenform
Owner: Wang Wei Jen
Potsdamer Straße 70
10785 Berlin, Germany
Email: zwischenform@gmail.com
2. Hosting and technical access data
Our website is hosted by Hostinger. When the website is accessed, technical data such as IP address, date and time, requested file, referring page, browser and operating system may be processed in server log files. Processing is necessary to provide and secure the website and is based on Art. 6(1)(f) GDPR. Log data is deleted or anonymised when it is no longer required for security and operational purposes, unless legal obligations require longer storage.
3. Online shop, orders and customer accounts
Our shop uses WordPress and WooCommerce. To process an order we collect data including name, billing and delivery address, email address, telephone number where provided, ordered items, price, payment status, delivery status, IP address and order-related communications. Processing is based on Art. 6(1)(b) GDPR and, for statutory accounting and tax obligations, Art. 6(1)(c) GDPR.
If you create a customer account, we process the account and order information required to provide it. You may request deletion of your account; data that must be retained by law remains restricted until the relevant retention period expires.
4. Payment providers
Depending on the payment method selected, payment and transaction data is transmitted to the provider required to complete the payment. We currently use WooPayments (provided through Automattic/WooCommerce) and Stripe. These providers process payment identifiers, transaction information and fraud-prevention data under their respective privacy terms. The legal basis is Art. 6(1)(b) GDPR and, where applicable, Art. 6(1)(f) GDPR for fraud prevention.
5. DHL delivery
For delivery, we provide DHL with the data necessary to fulfil the shipment, in particular the recipient’s name, delivery address and shipment information. Email address or telephone number is shared only where required for delivery notifications or coordination. Processing is based on Art. 6(1)(b) GDPR.
6. Contact
When you contact us by email or through a contact form, we process the information you provide in order to answer your request. The legal basis is Art. 6(1)(b) GDPR where the request relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR. Contact data is deleted when the matter is concluded unless retention is legally required.
7. Cookies and consent
We use technically necessary cookies and similar technologies to operate the shop, remember the basket, maintain sessions, prevent abuse and complete checkout. These are used on the basis of § 25(2) TDDDG and Art. 6(1)(b) or (f) GDPR. Analytics, advertising and marketing technologies are activated only after consent, on the basis of § 25(1) TDDDG and Art. 6(1)(a) GDPR. You may change or withdraw your consent at any time through the cookie settings link on the website.
8. Analytics and marketing services
Subject to your consent, the site may use Jetpack/WordPress.com statistics, Mailchimp for WooCommerce and integrations relating to Google, Pinterest or TikTok. Depending on the enabled service, usage data, device information, IP address, page interactions and order attribution data may be processed. Providers may process data outside the European Economic Area. Where required, transfers are protected by an adequacy decision, the EU–US Data Privacy Framework or EU Standard Contractual Clauses. Consent may be withdrawn at any time with effect for the future.
9. Recipients and international transfers
Data is shared only where required with hosting and IT providers, payment providers, DHL and other fulfilment partners, tax or accounting advisers, and public authorities where legally required. Some providers may be located outside the EEA. In those cases we use the safeguards required by Chapter V GDPR and provide further information on request.
10. Retention
We retain personal data only as long as necessary for the stated purpose. Order, invoice and business correspondence data may be retained for statutory periods, generally six to ten years. Consent records are retained for as long as needed to demonstrate compliance. Data is then deleted or anonymised unless a legal claim requires longer retention.
11. Your rights
Subject to the statutory requirements, you have the right to access, rectification, erasure, restriction, data portability and objection. Where processing is based on consent, you may withdraw consent at any time without affecting processing carried out before withdrawal. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. You also have the right to lodge a complaint with a data protection supervisory authority.
Competent supervisory authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany, datenschutz-berlin.de.
12. Automated decisions
We do not make decisions producing legal or similarly significant effects solely by automated means. Payment providers may carry out automated fraud checks under their own responsibility.
13. Changes
We update this policy when our services, providers or legal requirements change. The current version is published on this page.