Privacy policy

The controller within the meaning of Art. 4(7) GDPR is:

Abdelaziz Rebai

c/o IP-Management #10125

Ludwig-Erhard-Straße 18

20459 Hamburg

Deutschland

Email: kontakt@themithaq.com · Phone: +49 151 67 60 50 83

No data protection officer has been appointed; the conditions of Art. 37 GDPR do not currently apply.

When you place an order: name, email address, telephone number, delivery address, city, postal code, country and any notes you add voluntarily.

For payment: the amount, the method chosen and a transaction reference. Card or bank details never reach this site; they are processed solely by Mollie.

When you visit the site: technical access data such as IP address, time of access, page requested, browser type and status code.

Handling and delivering your order and answering related enquiries: Art. 6(1)(b) GDPR (performance of a contract).

Retention of invoicing and accounting data: Art. 6(1)(c) GDPR together with German tax and commercial law (§ 147 AO, § 257 HGB).

Secure operation of the site and prevention of misuse: Art. 6(1)(f) GDPR (legitimate interests).

Mollie B.V., Amsterdam, Netherlands — payment processing. Established in the EU.

Resend — sending order confirmation emails.

Vercel Inc., USA — hosting the site and storing cover images.

Neon — the database holding orders and the catalogue.

Data processing agreements under Art. 28 GDPR are in place with the providers used. Data is disclosed to authorities only where there is a legal obligation.

Using providers established in the United States may involve transfers of personal data there.

Such transfers rely on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework where the recipient is certified, and otherwise on standard contractual clauses under Art. 46(2)(c) GDPR.

Despite these safeguards, access by US authorities to transferred data cannot be entirely ruled out. We point this out expressly.

No analytics, statistics or advertising cookies are used. Your browsing behaviour is not analysed, and no consent banner is therefore required.

The contents of your order are stored only in your own browser (local storage) until you submit it. This is strictly necessary for the service you requested and therefore requires no consent.

Sermons are embedded using YouTube’s enhanced privacy mode (youtube-nocookie.com). The player only loads when you press play.

Until then no connection is made to YouTube that could identify you. Once you press play, the terms and privacy policy of Google Ireland Limited apply.

Order data is kept for the duration of the business relationship. Invoicing and accounting data is then retained for ten years under German law and deleted afterwards.

Technical access data is stored briefly and deleted regularly, unless needed to investigate faults or misuse.

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR).

To exercise them, simply write to kontakt@themithaq.com. We will respond within the statutory period of one month.

Without prejudice to any other remedy, you may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your residence, place of work or the place of the alleged infringement.

Supervisory authority competent for us:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW)

Königstraße 10a, 70173 Stuttgart, Germany

Phone: +49 711 615541-0 · Email: poststelle@lfdi.bwl.de

www.baden-wuerttemberg.datenschutz.de

Providing order and delivery data is necessary to conclude the contract. Without it we cannot process your order. There is no further obligation to provide data.