Privacy Policy

1. Controller

The controller for data processing on this website is:

2. Hosting

This website is hosted via Cloudflare Pages. When you visit our site, Cloudflare processes your IP address, access time, requested URL, and HTTP status code. This is necessary for secure and reliable service delivery (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework.

3. Order Data

When you place an order, we collect your name, delivery and billing address, email address, ordered items, and payment data (processed by our payment provider). This is necessary for contract fulfilment (Art. 6(1)(b) GDPR). Order records are retained for the statutory retention period (up to 10 years for tax purposes).

4. Payment Processing

Payments are processed by Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland). Your payment data is transmitted directly to Stripe. We do not store complete payment details. See stripe.com/privacy.

5. Shipping

Your name and delivery address are shared with DHL Paket GmbH for parcel delivery purposes only (Art. 6(1)(b) GDPR).

6. Contact

When you contact us by email, we process your email address and message contents to handle your enquiry (Art. 6(1)(f) GDPR). Data is deleted once your enquiry is fully resolved.

7. Cookies & Local Storage

We do not use tracking cookies or third-party advertising cookies. We store an anonymous cart ID in your browser's localStorage to maintain your shopping cart during your visit. This contains no personal data and is not shared with third parties.

8. Your Rights

Under the GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing of your personal data. To exercise these rights, contact: hello@mossandform.de

You also have the right to lodge a complaint with the supervisory authority for Baden-Württemberg: Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW), Stuttgart.

9. Security

This website uses SSL/TLS encryption. You can identify a secure connection by the "https://" prefix in your browser's address bar.