Privacy Policy

1. Introduction

PicheleMarkt is committed to protecting the privacy of its users. This Privacy Policy explains how we collect, use and protect your personal data in accordance with the General Data Protection Regulation (GDPR). The controller within the meaning of the GDPR is PicheleMarkt, owner Georges Alderson Pichele Tsoffo, Hauptstraße 83, 76534 Baden-Baden, Germany, email contact@pichelemarkt.com.

2. Data Collected

We collect the following data:

• Account data: email, name, password (hashed)
• Order data: delivery address, purchase history
• Technical data: IP address, browser type (server logs)
• Essential cookies: session token, cart identifier

3. Purposes of Processing

Your data is used to:

• create and manage your customer account
• process and deliver your orders
• communicate with you (order confirmation, customer service)
• improve our services (evaluation of page views with a shortened IP address, without advertising or tracking cookies)

4. Legal Basis

The processing of your data is based on:

• performance of the contract (Art. 6(1)(b) GDPR)
• your consent (Art. 6(1)(a) GDPR)
• our legitimate interest (Art. 6(1)(f) GDPR)

5. Recipients

Your data is accessible only to PicheleMarkt. It may be shared with:

• our payment providers (Stripe, PayPal)
• our logistics partners for shipping orders
• our hosting provider (servers within the European Union)

We NEVER sell your data to third parties. Where necessary to process an order, your delivery data may be transferred to logistics partners outside the EU (in particular in Asia). In that case the transfer is based on the standard data protection clauses under Art. 46 GDPR or on a derogation under Art. 49 GDPR.

6. Retention Period

Your data is retained for the duration of your account plus 3 years after your last order (legal retention obligation). Server logs are kept for 12 months. Session cookies expire when the browser is closed.

7. Your Rights

Under the GDPR, you have the following rights:

• Right of access: view your data
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to object
• Right to data portability
• Right to lodge a complaint: you may complain to a data protection supervisory authority if you consider that the processing of your data infringes the GDPR

To exercise these rights: contact@pichelemarkt.com

8. Security

We implement appropriate technical and organizational measures: HTTPS encryption, hashed passwords (bcrypt), restricted server access, regular backups.

9. Cookies

Our website uses exclusively technically necessary cookies:

• Session cookie (authentication)
• Language preference cookie

No advertising or tracking cookies are set.

10. Newsletter

If you subscribe to our newsletter, we use your email address to send you offers and product news. The legal basis is your consent (Art. 6(1)(a) GDPR). We use the double opt-in procedure: after signing up you receive an email with a confirmation link and are only added to the list once you click it. Every newsletter email contains an unsubscribe link; you can also unsubscribe at any time by emailing contact@pichelemarkt.com. You may withdraw your consent at any time with effect for the future.

11. YouTube API Services

PicheleMarkt uses YouTube API Services to publish product videos on our own YouTube channel. This use is server-side only and limited to our own product content; no personal data of our customers is transmitted to YouTube. By using our service, you agree to be bound by the YouTube Terms of Service.

• Provider of the YouTube API Services: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• YouTube Terms of Service: https://www.youtube.com/t/terms
• Google Privacy Policy: https://policies.google.com/privacy
• Manage permissions for Google services: https://myaccount.google.com/permissions

12. Data Protection Contact

For data protection questions or to exercise your rights: contact@pichelemarkt.com