Privacy Policy

1. Controller

The controller responsible for data processing on this website is: Paul Fromm, Reichenbachstraße 43, 80469 Munich, Germany, E-mail: mad.eel.clothing@gmail.com.

2. Hosting and server log files

This website is hosted on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Germany. When you access the website, technically necessary data is processed (IP address, date and time, page accessed, browser type, operating system, referrer). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable provision of the website). We have concluded a data processing agreement with Hetzner in accordance with Art. 28 GDPR. Server log files are deleted automatically after a short period. To protect against attacks and to deliver the site quickly, we also use the content delivery network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (European establishment: Cloudflare Portugal, Unipessoal Lda., Lisbon). In doing so, Cloudflare processes the IP address and technical connection data; Cloudflare is certified under the EU-US Data Privacy Framework, and standard contractual clauses also apply.

3. Orders and contract processing

When you place an order with us, we process the data you enter (name, delivery address, e-mail address, telephone number if provided, ordered items, order number, payment status) in order to perform the contract (Art. 6(1)(b) GDPR) and to comply with statutory retention obligations (Art. 6(1)(c) GDPR).

Payment: Payment is processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Stripe receives the data required for the payment (name, e-mail address, billing/delivery address, payment details, amount). Stripe processes your payment data partly on its own responsibility, in particular for fraud prevention; in doing so, data may be transferred to Stripe, Inc. in the USA (EU-US Data Privacy Framework). During the checkout process, Stripe sets technically necessary cookies for fraud prevention (e.g. "__stripe_mid", "__stripe_sid"); these are required for processing the payment (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG)). Further information: https://stripe.com/privacy

Manufacture and dispatch: For the manufacture and dispatch of your order we work with the fulfilment service provider Printify, Inc., 108 West 13th Street, Wilmington, DE 19801, USA (operating entity: Printify SIA, Riga, Latvia) and its production partners. For this purpose we transmit your name, delivery address, e-mail address, telephone number if provided and the order items. The legal basis is Art. 6(1)(b) GDPR. The transfer to Printify, Inc. is based on the EU standard contractual clauses. The commissioned shipping service provider receives the data necessary for delivery; for deliveries outside the EU, the data may also be transferred to customs authorities and carriers in the destination country.

We send order and shipping confirmations via the service Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) on the basis of a data processing agreement including standard contractual clauses.

We retain order data for the duration of the statutory retention periods under commercial and tax law (up to ten years).

4. Shopping cart, cookies and local storage

The contents of your shopping cart are stored exclusively locally in your browser (local storage) so that they are retained when you move between pages. This storage is strictly necessary for the function you have requested (Section 25(2) no. 2 TDDDG) and is not transmitted to us unless you submit an order.

We do not use any analytics, tracking or marketing cookies and do not embed external fonts or social media plugins. This website therefore does not require a cookie banner. The only exception is the technically necessary cookies set by Stripe during the checkout process, as described in section 3.

5. Contact

If you contact us by e-mail, we process the information you provide in order to handle your enquiry (Art. 6(1)(b) or (f) GDPR). The data is deleted as soon as it is no longer required for handling the enquiry and no retention obligations apply.

6. Withdrawal function

Via the withdrawal function ("Withdraw from contract") we collect your name, e-mail address, order number and, optionally, further details in order to process your withdrawal and confirm its receipt to you (Art. 6(1)(b) and (c) GDPR, Section 356a BGB).

7. Links to Instagram

Our website contains a link to our Instagram profile. Only when you click the link are you redirected to Instagram (Meta Platforms Ireland Ltd.); Meta's privacy policy then applies. No content from Instagram is embedded on our website.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21). To exercise these rights, please use the contact details given above.

You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the data protection authority responsible for your place of residence.

9. Data security

This website uses TLS encryption (https). Payment details are entered and processed exclusively at Stripe; we do not store complete payment details ourselves.

10. Changes

We will update this privacy policy if our data processing or the legal situation changes. Last updated: September 2026.