Privacy policy

Privacy Policy

Last updated: February 19, 2026

This website is operated by:

Torsten Jaehnig
acting under the business name “GrandOuvert”
Königsiepen 17
45259 Essen
Germany
E-mail: torsten.jaehnig@directbox.com

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Torsten Jaehnig
Königsiepen 17
45259 Essen
Germany
E-mail: torsten.jaehnig@directbox.com

2. Hosting via Shopify

This online store is hosted by Shopify Inc.,
151 O’Connor Street, Ground Floor, Ottawa, Ontario K2P 2L8, Canada.

Shopify provides the e-commerce platform that enables us to offer and sell our products. Your data may be stored through Shopify’s data storage, databases, and the general Shopify application. They store your data on secure servers protected by a firewall.

Further information can be found in Shopify’s Privacy Policy:
https://www.shopify.com/legal/privacy

3. Processing of Personal Data

We process personal data exclusively within the scope of:

  • contract processing

  • payment processing

  • shipping processing

  • customer communication

  • compliance with statutory retention obligations

In particular, the following data may be collected:

  • name

  • billing and shipping address

  • e-mail address

  • telephone number (if provided)

  • payment information

The legal basis for processing is Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(c) GDPR (legal obligation).

4. Payment Service Providers

For payment processing, payment data is transmitted to the selected payment provider (e.g., PayPal, credit card providers, Shopify Payments).

The legal basis for this processing is Article 6(1)(b) GDPR.

5. Online Advertising and Marketing

We may conduct online advertising via platforms such as Meta (Instagram/Facebook) or Google.

Through these platforms, personal data (e.g., IP address, usage behavior) may be processed.

Processing takes place:

  • on the basis of Article 6(1)(f) GDPR (legitimate interest in the economic operation of the online store), or

  • on the basis of Article 6(1)(a) GDPR (consent), where tracking technologies are used.

When using advertising and analytics tools, data may be transferred to the USA.

Further information can be found in the privacy policies of the respective providers:

Meta: https://www.facebook.com/privacy/policy
Google: https://policies.google.com/privacy

6. Data Retention

Personal data is stored only for as long as necessary for contract processing or due to statutory retention obligations.

Commercial and tax law retention periods are generally between 6 and 10 years.

7. Rights of Data Subjects

Under the GDPR, you have the right to:

  • access (Art. 15 GDPR)

  • rectification (Art. 16 GDPR)

  • erasure (Art. 17 GDPR)

  • restriction of processing (Art. 18 GDPR)

  • data portability (Art. 20 GDPR)

  • objection (Art. 21 GDPR)

To exercise these rights, it is sufficient to send an e-mail to:
torsten.jaehnig@directbox.com

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority.

The competent authority for North Rhine-Westphalia is:

State Commissioner for Data Protection and Freedom of Information NRW
https://www.ldi.nrw.de

9. Data Security

This website uses SSL encryption.
Data transmission is encrypted in accordance with the current state of technology.