Privacy Policy

 

1) Introduction and Controller Information
We are pleased that you are visiting our website and thank you for your interest. This Privacy Policy explains how we handle your personal data when you use our website.

The controller responsible within the meaning of the General Data Protection Regulation (GDPR) is:

Steffi Antony Dason (trading as “Buzzmomdesigns”)
Kirchweg 119
28201 Bremen
Germany
Email: buzzmomdesigns@gmail.com

2) Data Collection When Visiting Our Website
When using our website for informational purposes, we collect only the data transmitted by your browser (server log files).

Processing is based on Art. 6(1)(f) GDPR.

3) Hosting (Shopify)
Our website is hosted by Shopify International Limited, Ireland.

Data may also be transferred to Shopify Inc., Canada and the USA.
Canada ensures an adequate level of data protection (EU adequacy decision).
For transfers to the USA, appropriate safeguards such as the EU-US Data Privacy Framework are used.

4) Cookies and Consent Tool
We use cookies in accordance with §25 TTDSG and Art. 6 GDPR.

Cookies are categorized as:

  • Necessary cookies

  • Functional cookies

  • Marketing/analytics cookies (only with your consent)

You can manage or withdraw your consent at any time via the consent tool.

5) Contacting Us
Processing is based on Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR.

Data will be deleted after final processing unless legal retention obligations apply.

6) Customer Account
Processing is based on Art. 6(1)(b) GDPR.

7) Newsletter
Double opt-in is used.
Processing is based on Art. 6(1)(a) GDPR.

8) Order Processing
Processing is based on Art. 6(1)(b) GDPR.

9) Shipping (DHL)
Data is shared with DHL Paket GmbH for delivery purposes.

Legal basis:
Art. 6(1)(b) GDPR
Art. 6(1)(a) GDPR (if consent given)

10) Payment Services
PayPal, Klarna, and Shopify Payments process payment data.

Legal basis: Art. 6(1)(b) GDPR.

11) Reviews (Judge.me)
Processing is based on Art. 6(1)(a) GDPR.

12) Instagram Feed
After your consent, data may be transmitted to Meta Platforms Ireland Ltd. and to servers in the USA.

Processing is based on Art. 6(1)(a) GDPR.
Transfers to the USA are based on appropriate safeguards.

13) Marketing & Tracking
Tracking technologies are used only with your consent (Art. 6(1)(a) GDPR).

14) Data Security
We use SSL/TLS encryption.

15) Data Retention
Order data: up to 10 years
Other data: deleted when no longer necessary

16) Your Rights
You have rights to access, rectification, deletion, restriction, portability, and withdrawal of consent.

You also have the right to lodge a complaint with a supervisory authority.

17) Right to Object
You may object to processing based on legitimate interest at any time.

Last updated: 18.03.2026