Privacy policy
Template. Have this text reviewed by a lawyer before going live.
Controller
LOVACO BV, Oude Weg 192, 9870 Zulte, Belgium, email: info@crema-co.de
Data we process
- Order data (name, delivery address, email, phone, items) to fulfil the contract, Art. 6(1)(b) GDPR
- Payment data is processed only by Mollie B.V. (Amsterdam); we never receive card details
- The delivery address is passed to the carrier (via our shipping service Sendcloud); for business orders the VAT ID is checked in the EU VIES system
- Server logs for operational security, Art. 6(1)(f) GDPR
Cookies and local storage
We store your cart, language and cookie choice locally in your browser. This is necessary to run the shop.
Cookieless visitor statistics
We count page views, referring sites (e.g. google.com) and checkout steps to improve the shop (Art. 6(1)(f) GDPR). Nothing is stored in your browser and no IP address is stored: a one-way hash of IP address and browser with a daily changing key only tells whether you were already counted today and is deleted after two days. We keep daily totals only and share no data with third parties. If “Do Not Track” or “Global Privacy Control” is enabled in your browser, you are not counted.
Fonts
All fonts are served from our own server. No connection is made to Google or other third parties.
Retention
Order data is kept for the statutory commercial and tax retention periods (up to 10 years).
Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a supervisory authority.