Privacy Policy

1. Data Controller

Clipandcraf operates this online shop for sewing tools and accessories. The data controller responsible for processing personal data is:

Company: Stoffe Brünink & Hemmers GmbH
Company Registration Number: HRB 130185-DE117044420
Address: Thüringer Str. 1, 48529 Nordhorn, Germany
Email: secops@clipandcraft.com
Telephone: +49 592130838812

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection legislation.

2. Personal Data We Collect

Depending on how you use our website, we may collect:

• Contact details, including your name, email address, telephone number and delivery address.
• Order information, including items purchased, order references and transaction status.
• Payment-related information necessary to process and confirm transactions.
• Customer service messages and related correspondence.
• Technical information generated when you access the website, such as IP address, browser information, access timestamps and session data.
• Cookie preferences and consent records.

We collect and process only information relevant to the purposes described in this policy.

3. How We Use Personal Data

We process personal data where necessary to:

• Process orders and arrange the fulfilment of purchases.
• Receive and confirm payments.
• Respond to customer enquiries and manage order-related requests.
• Maintain business, accounting and transaction records.
• Operate and maintain website functions.
• Identify irregular transactions and address potential misuse.
• Meet applicable legal and regulatory obligations.

Depending on the purpose, the legal basis may be the performance of a contract, compliance with a legal obligation, our legitimate interests under the GDPR, or your consent where required.

4. Payment Processing by Stripe

Payments on our website are processed by Stripe, an independent payment service provider. Stripe processes payment information as necessary to handle transactions and provide its payment services.

Depending on the payment method and checkout process, relevant information may include transaction amounts, payment status, billing details, payment method information and associated identifiers. Card information may be entered directly into Stripe’s payment components.

We receive the information needed to confirm and manage orders, such as transaction references and payment status. Payment data is handled according to the applicable payment processing arrangements and legal requirements.

Stripe may process personal data for its own payment-related purposes, including transaction monitoring, fraud prevention and compliance with legal obligations. Depending on the specific processing activity, Stripe may act as an independent controller or in another applicable capacity.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies to support essential website functions and, where applicable, remember preferences or measure website usage.

Strictly necessary cookies may be used where permitted by law. Non-essential cookies are used only after you click the “Accept” button on our cookie banner and provide consent.

You may withdraw your consent or change your preferences through the cookie settings available on our website. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Cookie-related processing is governed by applicable requirements under the GDPR and the German Telecommunications Digital Services Data Protection Act (TDDDG).

6. Sharing of Personal Data

We may share relevant personal data with service providers where necessary to operate our online shop, process payments, fulfil orders, provide customer support or meet legal obligations.

These recipients may include Stripe, hosting and website service providers, delivery companies and accounting or professional service providers, where applicable.

We do not disclose personal data to unrelated parties unless there is an applicable legal basis to do so. Where required, appropriate contractual and organisational arrangements are used for processing carried out on our behalf.

7. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, subject to applicable statutory retention periods.

• Order and accounting records: Relevant commercial and accounting records are retained for the applicable statutory periods under German law. Depending on the type of record, this may be six or eight years under the German Fiscal Code (Abgabenordnung) and Commercial Code (Handelsgesetzbuch).
• Payment records: Transaction information is retained for the period necessary to administer payments, meet accounting obligations and address relevant legal claims, subject to applicable retention requirements.
• Customer service correspondence: Retained for as long as necessary to resolve the enquiry and maintain relevant records, unless a longer period is legally required.
• Technical logs: Retained for a limited period appropriate to website operation, troubleshooting and the purposes for which they were collected.
• Cookie consent records: Retained for the period necessary to document and manage consent, with preferences reviewed or renewed as appropriate.
• Marketing preferences, where applicable: Retained until consent is withdrawn or the relevant processing purpose ends, subject to applicable legal requirements.

When personal data is no longer required and no legal retention obligation applies, it will be deleted or anonymised as appropriate.

8. Data Transfers

Where a service provider processes personal data outside the European Economic Area, any applicable transfer must comply with the GDPR. Depending on the circumstances, this may require an adequacy decision, appropriate safeguards or another lawful transfer mechanism.

Relevant arrangements depend on the service provider, the processing activity and the applicable legal requirements.

9. Your Data Protection Rights

Subject to the conditions and exceptions under applicable law, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete information.
• Request erasure of personal data.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Request data portability where applicable.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the competent data protection supervisory authority.

To exercise your rights, contact us using the details in Section 11. We may need to verify your identity before responding to a request.

10. Data Protection and Website Measures

We apply appropriate organisational and technical measures to protect personal data against unauthorised access, loss, alteration or disclosure, taking account of the nature of the information and the risks associated with its processing.

Access to personal data is limited to circumstances where it is required for relevant business or legal purposes. Payment information is handled through the applicable payment processing arrangements.

11. Contact Information

For questions about this Privacy Policy or requests relating to your personal data, please contact:

Brand: Clipandcraf
Company: Stoffe Brünink & Hemmers GmbH
Company Registration Number: HRB 130185-DE117044420
Address: Thüringer Str. 1, 48529 Nordhorn, Germany
Email: secops@clipandcraft.com
Telephone: +49 592130838812
Website: www.clipandcraft.com

We will review privacy requests and respond within the period required by applicable data protection law.