Privacy Policy
Controller
IPEK Warenhandelsgesellschaft mbH
Borsteler Chaussee 85-99a, Haus 21
22453 Hamburg
E-Mail: hello@rugtales.com
Legal Basis for Data Processing
The processing of personal data is based on the GDPR, particularly Art. 6(1) (consent, contract performance, legitimate interests).
Data Collected
Website Access (Automatic)
- Browser type and version
- IP address
- Date and time of access
- Pages accessed
Cookies
Technical and analytical cookies to improve user experience. Deactivation is possible via browser settings.
Contact Forms
Email addresses are processed solely for responding to inquiries and are deleted upon completion of the process.
Order Data
Name, delivery address, and payment details are processed for contract execution and deleted after statutory retention periods.
Third Parties
- Shopify Inc. — Shop system and transaction processing (Privacy Policy: shopify.com/legal/privacy)
- Google Tag Manager & Google Analytics — Reach measurement and analysis
- Pinterest — Marketing and tracking
- Meta (Facebook/Instagram) — Marketing and tracking
- reCAPTCHA v3 — Protection against automated access (Google LLC)
- PostHog Ltd. — Web analytics and user behaviour (session recordings, heatmaps, funnels). Data is processed exclusively in the EU (EU hosting). IP addresses are not stored. Form inputs in session recordings are automatically masked. Legal basis: consent (Art. 6(1)(a) GDPR). Privacy policy: posthog.com/privacy
Data Subject Rights (GDPR)
You have the right at any time to:
- Access your stored data (Art. 15 GDPR)
- Rectify inaccurate data (Art. 16 GDPR)
- Erasure ("right to be forgotten", Art. 17 GDPR)
- Restrict processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Lodge a complaint with the competent supervisory authority
Please direct inquiries to: hello@rugtales.com