Privacy policy
Last updated: 21 September 2026
1. Controller
Kim Seidler
c/o Autorenglück #64667
Albert-Einstein-Straße 47
02977 Hoyerswerda
Germany
Email: kim@kimseidler.com
A data protection officer is not required by law and has not been appointed. For any privacy question, please write to the email address above.
2. What this policy covers
This policy explains which personal data is processed when you visit kimseidler.com, shop in the store, send an enquiry or sign up for the newsletter – for what purpose, on what legal basis and for how long. The legal framework is the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
3. Hosting and visiting the website
The website and the store run on the Shopify platform (Shopify International Limited, Ireland, with group companies in Canada and the USA, among others). Each time a page is loaded, Shopify processes technically necessary data: IP address, date and time, the page requested, browser and device information. Without this data the page cannot be delivered or protected against attacks. Fonts are also loaded from Shopify servers, not from Google.
The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). We have a data processing agreement with Shopify. For transfers outside the EU, Shopify relies on the European Commission's Standard Contractual Clauses or on adequacy decisions (Canada; the USA under the EU-US Data Privacy Framework where the company is certified).
Shopify is itself responsible for certain advanced features. Details are in Shopify's Consumer Privacy Policy at https://privacy.shopify.com/en.
4. Orders, customer account and payment
When you place an order, we process the data needed for the purchase contract: name, billing and shipping address, email address, phone number if provided, items ordered, payment method and payment status. If you create a customer account, we also store your login details and your past orders.
- Payment: Payments are handled by the payment service you choose – Shopify Payments (including credit card, Apple Pay, Google Pay, Klarna and local payment methods), Shop Pay or PayPal. Your card or account details go directly to that service; we never see them. Payment services may check data to prevent fraud and are partly responsible for this themselves.
- Production and shipping: The products in the store are printed and shipped on demand. For this, our print provider (currently Printify) receives your name, shipping address and the items ordered. The carrier receives the shipping address.
- Order emails and invoices: We send order confirmations, shipping notifications and invoices by email via Shopify. Invoices are created with a Shopify app (Order Printer Pro).
- Accounting: Order and invoice data is transferred to our accounting software (sevdesk, sevDesk GmbH, Germany).
The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR). Commercial and tax law require us to keep invoices and accounting records, generally for up to ten years (Art. 6(1)(c) GDPR). You can have your customer account deleted at any time.
5. Cookies and consent
This website uses cookies and similar technologies. Strictly necessary cookies (e.g. for the cart, checkout, language and currency selection, security) are permitted without consent (Section 25(2) TDDDG, Art. 6(1)(b) and (f) GDPR).
All other cookies and measurements, such as analytics, are only used if you agree in the cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change your choice at any time via the "Cookie settings" link or the banner and withdraw your consent with effect for the future.
6. Contact form and email
If you write to us via the contact form or by email, we process the information you provide (name, email address, message) to answer your enquiry (Art. 6(1)(b) GDPR for contract-related enquiries, otherwise Art. 6(1)(f)). We delete the data once the enquiry has been dealt with and no retention obligation applies.
The contact form is protected against spam by hCaptcha (Intuition Machines, Inc., USA). hCaptcha checks your IP address and browser data, among other things, to tell humans from bots. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR). Data may be transferred to the USA in the process.
7. Product reviews (Judge.me)
We use Judge.me for product reviews. Reviews are displayed using scripts from Judge.me servers, which means your IP address is transmitted to Judge.me (Art. 6(1)(f) GDPR). If you leave a review yourself, Judge.me processes your name, email address and review. Your name or initials will then appear publicly with the review.
Judge.me's usage measurement only runs if you have agreed to analytics in the cookie banner (Art. 6(1)(a) GDPR). We only ask you for a review by email if you have agreed to this.
8. Newsletter and digital offers (Tentary)
The newsletter form on this website is provided by Tentary. As soon as a page containing the form is loaded, a script is loaded from Tentary servers and your IP address is transmitted to Tentary (Art. 6(1)(f) GDPR). If you sign up, Tentary processes your email address and, if provided, your name in order to send you the newsletter. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time using the link in every email.
Free guides, the programme and other digital offers are also provided via Tentary (kimseidler.mytentary.com). The privacy policy shown on the respective Tentary page applies there in addition.
9. YouTube channel image
On the home page, the profile image of our YouTube channel is loaded directly from a Google server (Google Ireland Limited, Ireland; Google LLC, USA). Google receives your IP address and browser data in the process (Art. 6(1)(f) GDPR). A transfer to the USA is possible; Google is certified under the EU-US Data Privacy Framework. No videos are embedded on this website.
10. Links to other platforms
We link to YouTube, Instagram and LinkedIn. These are simple links. Only when you click a link are you taken to the provider's site, where its own privacy policy applies.
11. Recipients and transfers outside the EU
Your data is only shared with the services named in this policy, to the extent necessary for the respective purpose, and with authorities where we are legally required to do so. We do not sell personal data. Where data is transferred to countries outside the EU/EEA, this is based on an adequacy decision of the European Commission or on Standard Contractual Clauses.
12. Retention
We keep personal data only for as long as the respective purpose requires or statutory retention obligations demand. After that it is deleted.
13. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent with effect for the future (Art. 7(3)).
Right to object: Where we process data on the basis of legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). You may object to marketing emails at any time without giving reasons.
An informal message to kim@kimseidler.com is all it takes.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or the place of the alleged infringement (Art. 77 GDPR).
14. Obligation to provide data
To place an order, we need the details marked as required in checkout. Without them we cannot conclude the contract. All other information is voluntary. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
15. Changes
We update this privacy policy when the website, the services used or the legal situation change. The version published here applies.