Privacy Policy
This policy explains what personal data we collect when you visit deluxeproshop.com or buy from us, why we use it, who receives it and what rights you have under the EU General Data Protection Regulation (GDPR).
Last updated: 24 October 2026.
1. Controller
Deluxe Distribution Handels GmbH & Co. KG
Wilhelmine-Gemberg-Weg 6, 10179 Berlin, Germany
Represented by its general partner Deluxe Distribution Handels- und Geschäftsführungs GmbH, managing directors Ilya Morgan and Antonio Sanchez-Camara
Email: support@deluxeproshop.com · Phone: +49 30 44013906
For any privacy question or request, write to the email address above with the subject “Privacy”.
2. Data we collect and why
| Purpose | Data | Legal basis |
|---|---|---|
| Showing the website (server logs) | IP address, date and time, page requested, browser and operating system, referring page | Art. 6(1)(f) GDPR, our legitimate interest in a secure, working website |
| Shopping cart and checkout | Cart contents, session identifier (in technically necessary cookies) | Art. 6(1)(b) GDPR, performance of a contract; § 25(2) TDDDG for the cookies |
| Processing your order | Name, billing and delivery address, email address, phone number (optional), items ordered, order history | Art. 6(1)(b) GDPR |
| Payment | Payment details are entered directly with Stripe; we receive the payment status, card brand and last four digits | Art. 6(1)(b) GDPR |
| Delivery | Name and delivery address passed to Deutsche Post DHL. We do not pass your email address or phone number to DHL. | Art. 6(1)(b) GDPR |
| Customer account (optional) | Email address, password (stored encrypted), saved addresses, order history | Art. 6(1)(b) GDPR |
| Customer service | The content of your emails or calls and your contact details | Art. 6(1)(b) and (f) GDPR |
| Accounting and tax records | Invoices and order data | Art. 6(1)(c) GDPR, legal obligations under the German Commercial Code (HGB) and Fiscal Code (AO) |
| Fraud prevention for card payments | Device and payment information processed by Stripe | Art. 6(1)(f) GDPR, our and your interest in preventing payment fraud |
We do not use your data for advertising, we do not sell it, and we do not use automated decision-making or profiling.
3. Recipients
- Hosting: Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, hosts this website under a data processing agreement (Art. 28 GDPR).
- Payments: Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland, processes card payments as an independent controller. Stripe’s privacy policy: stripe.com/privacy. Stripe may transfer data to the United States on the basis of the EU-U.S. Data Privacy Framework and standard contractual clauses.
- Delivery: Deutsche Post AG / DHL Paket GmbH, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany, receives the data needed to deliver your parcel.
- Tax advisers and authorities: where required by law.
4. Cookies
We only use cookies that are technically necessary for the shop to work, such as the cart, checkout, login and payment fraud prevention. These do not require consent under § 25(2) TDDDG. We do not use analytics, advertising or social media tracking cookies. Details are in our Cookie Policy.
5. How long we keep data
- Server logs: up to 30 days.
- Order and invoice data: 10 years (accounting records) or 6 years (business letters), as required by § 147 AO and § 257 HGB.
- Customer account: until you delete the account, then subject to the retention periods above.
- Customer service emails: up to 3 years after the matter is closed, in line with the general limitation period.
6. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Where processing is based on consent, you can withdraw it at any time with effect for the future. Send requests to support@deluxeproshop.com.
You also have the right to lodge a complaint with a supervisory authority. Ours is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany.
7. Security
The entire website, including checkout, is served over an encrypted HTTPS connection. Card details are entered in Stripe’s secure payment fields and never reach our servers.
8. Is providing data required?
To place an order, we need your name, billing and delivery address and email address. Without them we cannot conclude or fulfil the contract. A phone number is optional.
9. Changes
We update this policy when our processing changes. The current version is always available on this page.