Privacy policy
Last updated: 21 October 2026
This policy explains what personal data we collect when you visit or buy from rassen.shop, how we use it and the rights you have.
1. Who we are
Rassen is operated by Alexander Peter SACK, a sole trader, at Friedrichstr. 15, 95444 Bayreuth, Germany. We are the controller of your personal data. You can contact us about privacy at info@rassen.shop.
2. What we collect
- When you place an order: your name, delivery and billing address, email address, phone number and the details of your order.
- Payment: card payments are processed by Stripe. We never see or store your full card number; we receive only limited details such as card type, the last four digits and whether the payment succeeded.
- When you contact us: your name, email address and the content of your message.
- When you browse: technical information such as your IP address, browser, device and the pages you visit, collected through cookies.
- If you subscribe to our emails: your email address.
3. Why we use it
- To process, deliver and support your order, including returns. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- To answer your questions. Legal basis: performance of a contract or our legitimate interest in helping you (Art. 6(1)(b) and (f) GDPR).
- To prevent fraud and keep our shop secure. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).
- To keep accounting and tax records. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
- To measure how our website is used and show relevant ads. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
- To send marketing emails if you’ve signed up. Legal basis: your consent. Every email has an unsubscribe link.
4. Who we share it with
We share personal data only with the service providers we need to run our shop:
- Shopify, which hosts our online store and processes orders.
- Stripe, which processes card payments.
- DHL, UPS, which delivers your parcel and may contact you with delivery updates.
- Google, for website analytics and advertising, only where you have given consent.
- Our tax advisers and public authorities, where the law requires it.
We never sell your personal data.
5. International transfers
Some of our providers, such as Shopify and Stripe, may process data outside the UK and the European Economic Area, for example in Canada or the United States. Where this happens, your data is protected by an adequacy decision or by standard contractual clauses.
6. Cookies
We use essential cookies to make the shop work, for example to keep items in your basket and complete checkout. Analytics and advertising cookies are used only if you accept them in our cookie banner. You can change your choice at any time through the banner or your browser settings.
7. How long we keep it
We keep order and invoice records for as long as German tax and commercial law requires, currently up to 10 years. We keep messages for as long as needed to deal with your request, and marketing data until you unsubscribe.
8. Your rights
Under the UK GDPR and the EU GDPR, you have the right to access your data, have it corrected or deleted, restrict or object to its use, receive it in a portable format and withdraw consent at any time. To use any of these rights, email info@rassen.shop. We’ll reply within one month.
9. Complaints
If you’re unhappy with how we handle your data, please contact us first. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or to the Bavarian data protection authority, Bayerisches Landesamt für Datenschutzaufsicht (lda.bayern.de).
10. Children
Our shop is not intended for children under 16, and we don’t knowingly collect their data.
11. Security
Our website and checkout use encrypted connections (SSL), and access to your data is limited to what is needed to run the shop.
12. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.