The controller responsible for data processing on this website is:

C&T Media GmbH
Müllerstr. 7, 80469 München
Deutschland

Email: support@c-t-media.de

We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with statutory data-protection regulations (GDPR, German BDSG-neu, TTDSG) as well as this privacy policy.

When you visit our website, various types of personal data are collected. Personal data is data that can be used to personally identify you.

Our website is hosted by Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). When you visit our site, Shopify processes your IP address, browser type and access time, among other things, in order to provide the platform.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the store).

Shopify's privacy policy: https://www.shopify.com/legal/privacy

Our website uses cookies. Technically necessary cookies (e.g. shopping cart, login, language settings) are set on the basis of § 25(2)(2) TTDSG. All other cookies (analytics, marketing) only with your explicit consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG).

You can withdraw your consent at any time via the cookie banner.

When you order from us, we collect the following data to process the contract:

• First and last name
• Delivery address, and billing address if applicable
• Email address
• Phone number (optional)
• Payment details

Legal basis: Art. 6(1)(b) GDPR (contract performance).

Retention period: 10 years (commercial and tax retention obligations pursuant to §§ 147 AO, 257 HGB).

To process your order, we disclose your data to:

• Shipping service providers: [SHIPPING PROVIDER] — transmission of name and delivery address for delivery.
• Suppliers / fulfilment partners: To fulfil the order, we transmit order data to our logistics / sourcing partners. These may also be located outside the EU (e.g. China, USA). The transfer takes place on the basis of Art. 49(1)(b) GDPR (contract performance) and, where applicable, EU Standard Contractual Clauses.
• Payment service providers: PayPal, Klarna, Stripe, Shopify Payments — depending on the chosen payment method. Details see section 7.
• AutoDS ([SHOP_URL] uses AutoDS Ltd., Israel/EU, for automated order processing): privacy policy https://www.autods.com/privacy-policy.

PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Privacy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Klarna Bank AB, Sveavägen 46, 11134 Stockholm, Sweden. Privacy: https://www.klarna.com/de/datenschutz/

Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. Privacy: https://stripe.com/de/privacy

If you sign up for the newsletter, we process your email address to send promotional emails. Legal basis: Art. 6(1)(a) GDPR (consent). You can unsubscribe at any time via the link in any newsletter or by email to [EMAIL].

We use the built-in Shopify Email tool to send the newsletter (if applicable add Klaviyo, Mailchimp etc. — adjust).

(Only include what you actually use — delete the rest!)

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Use only with consent. IP anonymisation enabled. Privacy: https://policies.google.com/privacy.

Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Use only with consent. Privacy: https://www.facebook.com/privacy/policy/.

Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. Privacy: https://www.tiktok.com/legal/page/eea/privacy-policy/de.

You have the right at any time to:

• Access to your processed data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent (Art. 7(3) GDPR)
• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

Competent supervisory authority: [STATE DATA PROTECTION COMMISSIONER — e.g. "The Hamburg Commissioner for Data Protection and Freedom of Information"]

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the address bar of the browser changing from "http://" to "https://".

We reserve the right to occasionally adjust this privacy policy so that it always complies with current legal requirements. The version applicable on your next visit will then apply.

As of 25.05.2026