Privacy policy

1. Controller Nebula Store (Demo) GmbH, Musterstraße 1, 20095 Musterstadt, Germany, demo@example.com 2. What we process When you buy: email address, order details, payment reference, IP address and browser identification at the time of the order. When you browse: server log data (IP address, time, page requested, user agent). 3. Purposes and legal bases - Performing the contract and delivering: Art. 6(1)(b) GDPR - Fraud prevention and IT security: Art. 6(1)(f) GDPR (legitimate interest in preventing abusive orders) - Tax and commercial record-keeping: Art. 6(1)(c) GDPR 4. Recipients Payment providers, to process payment: Stripe Payments Europe Ltd., PayPal (Europe) S.à r.l. et Cie, S.C.A. Email delivery: Postmark (Wildbit LLC) Hosting: Hetzner Online GmbH, Germany 5. Transfers outside the EU 6. Retention Order data is kept for the statutory retention periods (generally ten years under § 147 AO). Log data is deleted after 14 days. 7. Your rights Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20) and objection (Art. 21). You also have the right to lodge a complaint with a supervisory authority. Write to the address in section 1 — no particular form is required. 8. Cookies This shop sets technically necessary cookies for sign-in and the basket. Last updated: 1 August 2026