data protection

Privacy Policy

bravo-archiv-shop.com | As of: April 2026

Controller

Memory-Archiv UG (haftungsbeschränkt)

• Owner: Christian Müller
• Tiefenbrunn 4, 37124 Rosdorf, Germany
• Commercial Register: Amtsgericht Göttingen, HRB 205482
• Phone: 0551 / 63 44 5005
• Email: info@bravo-archiv-shop.com

1. General Information

This Privacy Policy informs you, in accordance with Art. 13 and 14 GDPR, about which personal data we collect, process, and store in connection with the operation of bravo-archiv-shop.com. Our shop sells both digital products (PDF downloads, ZIP downloads) and physical products (DVD-Rs, books).

Categories of data processed:

• Inventory data (name, address)
• Contact data (email address, telephone number)
• Contract data (ordered products, order history)
• Payment data (selected payment method, transaction status)
• Delivery data (delivery address, shipping status – only for physical products)
• Usage data (pages accessed, access times)
• Meta and communication data (IP address, device information)

Special categories of data (Art. 9 GDPR) are not processed.

2. Legal Bases for Processing

• Art. 6 para. 1 lit. a GDPR – Consent (e.g., analytics cookies, newsletter)
• Art. 6 para. 1 lit. b GDPR – Performance of contract (order processing, shipping)
• Art. 6 para. 1 lit. c GDPR – Legal obligation (tax retention)
• Art. 6 para. 1 lit. f GDPR – Legitimate interest (IT security, server log files)

3. Cookies and Tracking

Our shop uses cookies. We use Consentmo as a cookie consent management tool, which ensures that non-essential cookies are only set after your explicit consent. You can adjust your cookie settings at any time at /pages/cookie-einstellungen.

3.1 Technically necessary cookies (Art. 6 para. 1 lit. f GDPR)

3.2 Analytics and Marketing Cookies (Art. 6 para. 1 lit. a GDPR – Consent Required)

4. Hosting and Technical Infrastructure

4.1 Shopify (Processor)

Our online shop is operated on the platform of Shopify International Ltd., Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify, as a processor in accordance with Art. 28 GDPR, processes all data arising from the operation of the shop. Data transfers to the USA are made based on the EU-US Data Privacy Framework and EU Standard Contractual Clauses.
Privacy Policy: shopify.com/legal/privacy

4.2 Cloudflare (CDN)

To deliver the website, we use the CDN of Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare processes IP addresses to forward requests and for DDoS protection. Legal basis: Art. 6 para. 1 lit. f GDPR. Data transfer to the USA based on the EU-US Data Privacy Framework.
Privacy Policy: cloudflare.com/privacypolicy/

5. Shopify Analytics and Web Pixels

With your consent, we use Shopify Analytics (including Web Pixels Manager and Trekkie). These record visited pages, purchasing behavior, conversion data, and technical device information. Legal basis: Art. 6 para. 1 lit. a GDPR. Consent can be withdrawn at any time via our Cookie Settings.

6. Order Processing

We process your data to fulfill orders (Art. 6 para. 1 lit. b GDPR):

• Name and billing address: for invoicing and – for physical products – delivery
• Delivery address: for physical products (DVD-Rs, books) for shipping
• Email address: for order confirmation, download links, and communication
• Payment data: forwarded directly to the respective payment service provider
• IP address and time of order: for fraud prevention (Art. 6 para. 1 lit. f GDPR)

Order data will be deleted after the statutory retention periods have expired: commercial books 6 years (§ 257 HGB), tax documents 10 years (§ 147 AO).

Customer account: Optional creation possible. Data remains until the account is deleted, which can be requested at any time.

7. Shipping Service Providers

For the delivery of physical products (DVD-Rs, books), we pass on your delivery address and the scope of the shipment to the following shipping service providers (Art. 6 para. 1 lit. b GDPR):

• Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
• DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

The shipping service providers receive only the data necessary for delivery and do not process it for their own purposes.

8. Payment Service Providers

Depending on the selected payment method, we forward the data necessary for processing (Art. 6 para. 1 lit. b GDPR):

• PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg – Privacy
• Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden – Privacy
• Stripe Payments Europe Ltd. (Shopify Payments), 1 Grand Canal Street Lower, Dublin 2, Ireland – Privacy
• Prepayment / Bank Transfer: For payment by bank transfer, no data is transmitted to third parties. The seller's bank details are communicated to the customer by email.

9. Server Log Files

When you visit our website, server log files are automatically recorded (accessed URL, IP address, date/time, browser type, operating system, referrer URL, HTTP status code). Legal basis: Art. 6 para. 1 lit. f GDPR. Storage period: maximum 7 days.

10. Contacting Us

If you contact us by email or form, we process your information to handle your request (Art. 6 para. 1 lit. b GDPR). Inquiries are deleted after full processing, unless there are statutory retention obligations.

11. Newsletter

If you subscribe to our newsletter, we process your email address based on your consent (Art. 6 para. 1 lit. a GDPR in conjunction with § 7 para. 2 no. 3 UWG) using the double opt-in procedure. Consent can be revoked at any time via the unsubscribe link or email.

12. Data Transfer to Third Countries

Shopify, Cloudflare, and Stripe may transfer data to the USA. All third-country transfers are made based on the EU-US Data Privacy Framework (adequacy decision of the EU Commission dated July 10, 2023) and, additionally, on the basis of EU Standard Contractual Clauses (SCC) in accordance with Implementing Decision (EU) 2021/914.

13. Your Rights as a Data Subject

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR), particularly against direct marketing
• Right to withdraw consent with effect for the future (Art. 7 para. 3 GDPR)

To exercise your rights: info@bravo-archiv-shop.com

Right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR):

The State Commissioner for Data Protection of Lower Saxony

Prinzenstraße 5, 30159 Hanover, Germany

lfd.niedersachsen.de

14. Technical Security Measures

All data transfers are SSL/TLS encrypted (HTTPS). Shopify operates its servers according to ISO 27001 standard. Cloudflare protects the website from DDoS attacks. Access to personal data is limited to the necessary minimum.

15. Changes to this Privacy Policy

We reserve the right to adapt this Privacy Policy in the event of changed legal requirements or data processing processes. The current version is always available at bravo-archiv-shop.com/policies/privacy-policy.