Privacy Policy
1. Controller
Stefanie Braun – Designbraun, Poststraße 1, 76307 Karlsbad, Germany, telephone +49 721 98614971, email info@designbraun.de. We have not appointed a data protection officer as we are not required to do so.
2. Legal bases
We process personal data on the basis of Art. 6(1) GDPR: point (a) consent, point (b) contract and pre-contractual measures, point (c) legal obligations and point (f) legitimate interests. We access information on your device (e.g. cookies) only where this is strictly necessary for the service you have requested or where you have consented (section 25 of the German Telecommunications Digital Services Data Protection Act, TDDDG).
3. Hosting and server log files
The shop is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, with whom we have concluded a data processing agreement. Each time a page is accessed, the server stores the IP address, date and time, page accessed, referrer URL, browser and operating system. This serves the security and stability of the shop (Art. 6(1)(f) GDPR). Log files are deleted after 7 days.
4. Cookies, local storage and privacy settings
We set technically necessary cookies (e.g. for the basket, login and session) without consent (Art. 6(1)(b) and (f) GDPR; section 25(2) no. 2 TDDDG). We load all other services only after you have consented via our consent manager (Art. 6(1)(a) GDPR). Your choice is stored in your browser’s local storage. You can change or withdraw it at any time via the fingerprint icon at the bottom left.
5. Customer account
If you create a customer account, we store your name, address, email address, password (encrypted) and your orders (Art. 6(1)(b) GDPR). You can have the account deleted at any time; statutory retention periods remain unaffected.
6. Orders
For ordering, shipping, payment and customer service we process your name, billing and delivery address, email address, telephone number (if provided), order and payment data (Art. 6(1)(b) GDPR). We keep invoice and accounting data for up to ten years under commercial and tax law (Art. 6(1)(c) GDPR).
7. Shipping
For delivery we pass your name and delivery address to DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany). We only pass on your email address or telephone number if you have consented during checkout so that DHL can notify you about the delivery (Art. 6(1)(a) GDPR); you can withdraw this consent at any time. Returns are handled on our behalf by Packservice GmbH, Riederweg 11, 76473 Iffezheim, Germany. For deliveries to Switzerland, we pass the data required for customs clearance to DHL; where we make the customs declaration ourselves, we pass it to the customs authorities (Art. 6(1)(b) and (c) GDPR).
8. Payment
- PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
- Credit card: Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe sets a cookie (__stripe_mid) to prevent fraud.
- Bank transfer in advance: via our bank, Wise Europe SA, Belgium.
The legal basis is Art. 6(1)(b) GDPR, and Art. 6(1)(f) GDPR for fraud prevention. PayPal and Stripe may also transfer data to the USA on the basis of the EU-US Data Privacy Framework adequacy decision or standard contractual clauses.
9. Contact
If you contact us by email, telephone or form, we process your details to handle your request (Art. 6(1)(b) GDPR where it relates to a contract, otherwise point (f)).
10. Online withdrawal
If you withdraw using the “Withdraw from contract here” button, we process your name, email address, order number and message in order to process the withdrawal and confirm its receipt (Art. 6(1)(c) GDPR).
11. Newsletter
We do not send newsletters.
12. idealo and price comparison
Our website shows a partner badge of idealo internet GmbH, Zimmerstraße 50, 10888 Berlin, Germany. When the graphics load, your IP address is transmitted to idealo. We only send product data, not customer data, to price comparison sites. If we use conversion tracking by price comparison sites or Google, we will do so only with your consent and will update this policy.
13. Videos from YouTube and Vimeo
We only load embedded videos after you have consented in the consent manager (Art. 6(1)(a) GDPR). The providers are Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (YouTube) and Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA. Both may transfer data to the USA on the basis of the EU-US Data Privacy Framework.
14. Analytics
We currently do not use analytics services such as Google Analytics.
15. Storage period
We delete data as soon as the purpose no longer applies and no statutory retention obligations remain.
16. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time; this does not affect the lawfulness of processing carried out before the withdrawal (Art. 7(3)).
Right to object: Where we process data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). You may object to direct marketing at any time without giving reasons.
You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example in your country of residence or with the authority responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
17. Obligation to provide data, automated decisions
We cannot accept an order without the details marked as mandatory. There is no automated decision-making, including profiling.
Last updated: 11 November 2026
1. Controller
Stefanie Braun – Designbraun, Poststraße 1, 76307 Karlsbad, Germany, telephone +49 721 98614971, email info@designbraun.de. We have not appointed a data protection officer as we are not required to do so.
2. Legal bases
We process personal data on the basis of Art. 6(1) GDPR: point (a) consent, point (b) contract and pre-contractual measures, point (c) legal obligations and point (f) legitimate interests. We access information on your device (e.g. cookies) only where this is strictly necessary for the service you have requested or where you have consented (section 25 of the German Telecommunications Digital Services Data Protection Act, TDDDG).
3. Hosting and server log files
The shop is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, with whom we have concluded a data processing agreement. Each time a page is accessed, the server stores the IP address, date and time, page accessed, referrer URL, browser and operating system. This serves the security and stability of the shop (Art. 6(1)(f) GDPR). Log files are deleted after 7 days.
4. Cookies, local storage and privacy settings
We set technically necessary cookies (e.g. for the basket, login and session) without consent (Art. 6(1)(b) and (f) GDPR; section 25(2) no. 2 TDDDG). We load all other services only after you have consented via our consent manager (Art. 6(1)(a) GDPR). Your choice is stored in your browser’s local storage. You can change or withdraw it at any time via the fingerprint icon at the bottom left.
5. Customer account
If you create a customer account, we store your name, address, email address, password (encrypted) and your orders (Art. 6(1)(b) GDPR). You can have the account deleted at any time; statutory retention periods remain unaffected.
6. Orders
For ordering, shipping, payment and customer service we process your name, billing and delivery address, email address, telephone number (if provided), order and payment data (Art. 6(1)(b) GDPR). We keep invoice and accounting data for up to ten years under commercial and tax law (Art. 6(1)(c) GDPR).
7. Shipping
For delivery we pass your name and delivery address to DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany). We only pass on your email address or telephone number if you have consented during checkout so that DHL can notify you about the delivery (Art. 6(1)(a) GDPR); you can withdraw this consent at any time. Returns are handled on our behalf by Packservice GmbH, Riederweg 11, 76473 Iffezheim, Germany. For deliveries to Switzerland, we pass the data required for customs clearance to DHL; where we make the customs declaration ourselves, we pass it to the customs authorities (Art. 6(1)(b) and (c) GDPR).
8. Payment
- PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
- Credit card: Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe sets a cookie (__stripe_mid) to prevent fraud.
- Bank transfer in advance: via our bank, Wise Europe SA, Belgium.
The legal basis is Art. 6(1)(b) GDPR, and Art. 6(1)(f) GDPR for fraud prevention. PayPal and Stripe may also transfer data to the USA on the basis of the EU-US Data Privacy Framework adequacy decision or standard contractual clauses.
9. Contact
If you contact us by email, telephone or form, we process your details to handle your request (Art. 6(1)(b) GDPR where it relates to a contract, otherwise point (f)).
10. Online withdrawal
If you withdraw using the “Withdraw from contract here” button, we process your name, email address, order number and message in order to process the withdrawal and confirm its receipt (Art. 6(1)(c) GDPR).
11. Newsletter
We do not send newsletters.
12. idealo and price comparison
Our website shows a partner badge of idealo internet GmbH, Zimmerstraße 50, 10888 Berlin, Germany. When the graphics load, your IP address is transmitted to idealo. We only send product data, not customer data, to price comparison sites. If we use conversion tracking by price comparison sites or Google, we will do so only with your consent and will update this policy.
13. Videos from YouTube and Vimeo
We only load embedded videos after you have consented in the consent manager (Art. 6(1)(a) GDPR). The providers are Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (YouTube) and Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA. Both may transfer data to the USA on the basis of the EU-US Data Privacy Framework.
14. Analytics
We currently do not use analytics services such as Google Analytics.
15. Storage period
We delete data as soon as the purpose no longer applies and no statutory retention obligations remain.
16. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time; this does not affect the lawfulness of processing carried out before the withdrawal (Art. 7(3)).
Right to object: Where we process data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). You may object to direct marketing at any time without giving reasons.
You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example in your country of residence or with the authority responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
17. Obligation to provide data, automated decisions
We cannot accept an order without the details marked as mandatory. There is no automated decision-making, including profiling.
Last updated: 11 November 2026
