Privacy Policy
Controller responsible for data processing
Christiane Freese
Mönchfeldstr. 136
70437 Stuttgart
Germany
Email: kontakt@the-soul-temple.de
Protecting your personal data is very important to us at “The Soul Temple.” Below, we inform you about which data we collect, how we process it, and which rights you have as a user.
1. Access data and hosting
When you visit our website, so-called server log files are automatically created. These include, among other things:
- the IP address of your device
- date and time of your visit
- names of accessed files
- amount of data transferred
- browser type and provider
This data is used exclusively to ensure the smooth operation of our website, to optimize our services, and to maintain system security.
The legal basis is Art. 6(1) sentence 1 lit. f GDPR (legitimate interest).
Access data is stored only as long as necessary for the stated purposes.
1.1 Hosting
Our website is hosted by external service providers. All data collected during the use of our website or via forms is processed on their servers.
These servers may be located outside the EU, in particular in the United States. Data transfer takes place on the basis of EU Standard Contractual Clauses or existing certifications.
1.2 Content Delivery Network (CDN)
We use a CDN to ensure faster loading times. In this context, access data may also be processed.
The legal basis is Art. 6(1) sentence 1 lit. f GDPR.
2. Data processing for contact and orders
2.1 Contract processing
Personal data such as name, address, email address, or payment information is collected only if you voluntarily provide it when placing an order or making an inquiry. Required fields are clearly marked.
Your data is used exclusively to fulfill contracts, process inquiries, or comply with legal obligations.
Legal basis: Art. 6(1) sentence 1 lit. b and c GDPR.
2.2 Contact requests
If you contact us via contact form, email, or chat, your details will be used to process your request. After completion, the data will be deleted unless further use is permitted based on your consent or statutory retention obligations.
2.3 Personalized consultations
For individual consultations, we may collect additional personal data that you voluntarily provide.
Processing is based on your consent (Art. 6(1) sentence 1 lit. a GDPR).
3. Shipping processing
To deliver your order, we pass on your address data to the commissioned shipping service providers.
Your email address is passed on for shipping notifications only with your explicit consent, which you may revoke at any time.
Shipping service providers:
- GLS Germany GmbH & Co. OHG, Neuenstein
- UPS Deutschland S.à r.l. & Co. OHG, Neuss
- Hermes Germany GmbH, Hamburg
- DHL Paket GmbH, Bonn
- DPD Deutschland GmbH, Aschaffenburg
4. Payment processing
We work with payment service providers and financial institutions to process transactions. Depending on the selected payment method, the necessary data is transmitted to these providers.
Legal basis: Art. 6(1) sentence 1 lit. b GDPR.
For fraud prevention and optimization of payment processes, additional data may be processed (Art. 6(1) sentence 1 lit. f GDPR).
5. Newsletter and advertising
If you subscribe to our newsletter, we process your email address based on your consent (Art. 6(1) sentence 1 lit. a GDPR). You may unsubscribe at any time.
For newsletter tracking, we may use one-pixel technologies (web beacons) to measure open and click rates. This processing can also be revoked at any time.
6. Cookies, tracking, and social media
6.1 Cookies and similar technologies
We use cookies to make our website more user-friendly, enable functions, and analyze usage:
- Strictly necessary cookies: required for shopping cart, login, or consent documentation
- Functional cookies: improve usability, e.g., by saving settings
- Marketing and analytics cookies: used for web analysis, personalization, and advertising
You may revoke your consent at any time. Details can be found under: Cookie settings.
The legal basis for non-essential cookies is Art. 6(1) sentence 1 lit. a GDPR.
Strictly necessary cookies are used based on legitimate interests (Art. 6(1) sentence 1 lit. f GDPR).
6.2 Jimdo Consent Manager
We use the Jimdo Consent Manager to obtain, manage, and document your consent regarding cookies and technologies.
Data such as IP address, date, time, browser information, and your selection are stored.
Legal basis: Art. 6(1) sentence 1 lit. c GDPR.
Data is deleted after 365 days unless further use is required.
6.3 Jimdo Tracking
We use Jimdo Tracking for statistical analysis. Data such as IP address, device, and browser information is collected automatically and stored in a pseudonymized manner to create usage profiles and optimize the website. Identification of individuals is excluded.
7. Social media
Our online presences on Instagram, Facebook, YouTube, and TikTok are used to publish content, conduct marketing activities, and communicate with our community.
If you have given your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR, data is automatically collected and stored when visiting our social media pages. Usage profiles may be created under pseudonyms, which may be used for personalized advertising on and off the platforms.
7.1 Instagram (Meta)
Instagram is operated by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland.
Data is generally transferred to servers of Meta Platforms, Inc., Menlo Park, USA.
Legal basis: your consent (Art. 6(1) sentence 1 lit. a GDPR) and possibly Meta’s legitimate interests (Art. 6(1) sentence 1 lit. f GDPR).
7.2 Facebook (Meta)
Facebook is also operated by Meta Platforms Ireland Ltd., Dublin, Ireland.
Data is transferred to servers of Meta Platforms, Inc., USA.
Legal basis: your consent and possibly Meta’s legitimate interests.
7.3 YouTube
YouTube is operated by Google Ireland Ltd., Dublin, Ireland.
Data is transferred to servers of Google LLC, USA.
Legal basis: your consent and possibly Google’s legitimate interests.
7.4 TikTok
TikTok is operated by TikTok Inc., Culver City, USA.
Data is processed on servers in the USA, Canada, Japan, Singapore, India, and Australia.
Legal basis: your consent (Art. 6(1) sentence 1 lit. a GDPR).
Data transfers are based on EU Standard Contractual Clauses.
Notice regarding third-country transfers:
For platforms with servers outside the EU/EEA, either an adequacy decision applies or data transfer is based on EU Standard Contractual Clauses.
Further information can be found in the providers’ privacy policies:
- TikTok
- Instagram / Facebook (Meta)
- YouTube
8. Your rights
As a data subject, you have the right to:
- access stored data (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure or restriction of processing (Art. 17, 18 GDPR)
- object to processing (Art. 21 GDPR)
- data portability (Art. 20 GDPR)
- lodge a complaint with a supervisory authority (Art. 77 GDPR)
Right to object:
You may object at any time to the processing of personal data based on legitimate interests, except in the case of direct marketing.
8.1 Contact
For information or to exercise your rights, please contact us at:
Email: kontakt@the-soul-temple.de