Privacy policy

Responsible party

Max Kucher
Küsten Jungle
27639 Wurster Nordseeküste
Germany

Phone: 0176 22628463
E-mail: info@kuesten-jungle.de
Website: https://www.kuesten-jungle.de

2. Types of Data Processed

  • File data (e.g., name, address)
  • Contact information (e.g., email address, phone number)
  • Content data (e.g., text inputs in forms)
  • Contract data (e.g., contract subject, order history)
  • Payment details (e.g., selected payment method, payment confirmation)
  • Usage data (e.g., pages visited, access times)
  • Metadata and communication data (e.g., IP addresses, device information)

3. Purposes of Processing

  • Provision and operation of the online shop
  • Order and contract processing
  • Responding to contact requests
  • Shipping and Delivery (DHL)
  • Technical operation and security of the website
  • Fulfillment of legal obligations

4. Legal Basis

The processing of personal data takes place on the following legal bases in accordance with Art. 6 GDPR:

  • Article 6(1)(a) GDPR – Consent of the data subject
  • Article 6(1)(b) GDPR – Fulfillment of contract and pre-contractual measures
  • Art. 6(1)(c) GDPR Fulfillment of a legal obligation
  • Article 6(1)(f) GDPR – Safeguarding the legitimate interests of the controller

5. Hosting

Our website is operated on servers of a hosting provider (Plesk-based hosting). The hosting provider processes inventory data, contact data, content data, usage data, and meta and communication data of visitors and customers on our behalf, based on our legitimate interests in secure and efficient operation (Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 GDPR).

6. Access Data and Server Log Files

When you visit our website, access data is automatically collected and stored in server log files. This includes:

  • Name of retrieved page or file
  • Date and time of retrieval
  • transferred data volume
  • Success message (HTTP status code)
  • Browser type and version
  • User's operating system
  • Referrer URL (previously visited page)
  • IP Address and requesting provider

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in security and error analysis). The log files are deleted after a maximum of 7 days, unless they need to be retained longer for the investigation of specific incidents.

7. Order Processing and Customer Account

We process customer data for order fulfillment within our WooCommerce online shop. This includes inventory data, communication data, contract data, and payment data. The legal basis is Article 6(1)(b) GDPR (contract fulfillment) and (c) GDPR (statutory archiving obligations).

Customers can voluntarily create a customer account to view orders. Account data will be deleted upon termination, provided that this does not conflict with statutory retention obligations (commercial law: 6 years, tax law: 10 years).

We use Session Cookies for storing the shopping cart contents as well as persistent cookies for the login status (legal basis: Art. 6(1)(b) GDPR).

8. Shipping with DHL

For processing deliveries, we transmit the data necessary for shipping (name, delivery address, if applicable, email for tracking) to Deutsche Post AG / DHL Paket GmbH, Charles-de-Gaulle-Str. 20, 53113 Bonn. The transmission is carried out on the basis of Art. 6(1)(b) GDPR for the performance of a contract.

DHL's data protection information can be accessed at: https://www.dhl.de/de/privatkunden/kampagnenseiten/datenschutz.html

9. External Payment Service Providers

We use external payment service providers through whose platforms payment transactions are processed. The providers we use and their privacy notices:

We do not receive complete payment data (e.g., credit card numbers) from payment service providers, but only a confirmation or rejection of the payment. The legal basis is Art. 6 (1) lit. b GDPR.

10. AI-powered Shop Assistant (Chat Widget)

A chatbot powered by AI is integrated into our website. When you use the chat, your input messages are processed to provide answers. Session data is temporarily stored in your browser.

The chat assistant uses the Anthropic API (Anthropic, PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA). Your messages will be transferred to Anthropic for processing. Anthropic processes this data according to its own privacy policy: https://www.anthropic.com/privacy

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing helpful customer service) and Art. 49(1)(b) GDPR for data transfer to the USA (performance of a contract). We recommend not entering sensitive personal data in the chat.

11. Getting in Touch and Contact Form

When you contact us (by email, phone, or contact form), your details will be processed to handle your request in accordance with Art. 6 para. 1 lit. b GDPR. Inquiries will be deleted once they are no longer necessary; necessity will be reviewed every two years. Statutory retention obligations remain unaffected.

12. Automated Follow-Up Emails After Delivery

After successful delivery of your order (according to DHL tracking status), we will automatically send you a follow-up email. This processing is based on Art. 6(1)(f) GDPR (legitimate interest in customer satisfaction and quality assurance). You can object to this use of your email address at any time (see Section 18).

13. Cookies

We use cookies. Cookies are small text files that are stored in the user's browser.

Technically necessary cookies (Legal basis: Art. 6(1)(b) and (f) GDPR):

  • Shopping cart session cookie (temporary, deleted when the browser is closed)
  • Login Cookie (persistent, for logged-in customers)
  • Security Cookie (WordPress Nonce)

Optional Cookies are only set with your consent (Art. 6 para. 1 lit. a GDPR).

You can disable or delete cookies in your browser at any time. Certain features of the online shop (e.g., shopping cart) cannot be used without cookies.

14. WP Rocket (Caching)

To improve loading times, we use the WordPress plugin WP Rocket (WP Media S.A.R.L., 21 rue du Simplon, 75018 Paris, France). WP Rocket stores page content as cache files on our server. No personal data is transmitted to third parties. The legal basis is Art. 6 para. 1 lit. f GDPR.

15. Web Analytics with Clicky

We use the web analytics service on our website Clicky for the statistical analysis of visitor traffic. The provider is Roxr Software Ltd, 10883 SE Main St #201, Milwaukie, OR 97222, USA.

Processed data: When you visit our website, the following data is transmitted to Clicky: requested page URL and page title, referrer (previously visited page), browser type and operating system, anonymized IP address, language, screen resolution, and click positions.

In the one we are using Standard configuration Clicky does not set tracking cookies and anonymizes IP addresses. This makes it impossible to attribute data to individual persons.

Purpose Anonymized creation of statistics, analysis of usage behavior, and optimization of our online services.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in analyzing and improving our online offer). Since no personal data is processed in the standard configuration, no consent is required. If you have enabled full IP logging or tracking cookies in your Clicky settings, Art. 6 para. 1 lit. a GDPR (consent) is the legal basis instead.

Data transmission to the USA: Roxr Software is an active participant in the EU-US Data Privacy Framework, which governs the correct and secure transfer of personal data from EU citizens to the United States. Additionally, Roxr Software uses Standard Contractual Clauses in accordance with Art. 46 paras. 2 and 3 GDPR.

Clicky's privacy policy is available at: https://clicky.com/terms/privacy
Opt-Out: You can disable tracking by Clicky at: https://clicky.com/optout

16. Instagram (Social Media)

We operate an Instagram presence (@kuestenjungle) of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. When you visit our Instagram page or interact with us there, the Instagram/Meta privacy policy applies.

If Instagram content (e.g., posts) is embedded on our website, a connection to Instagram servers will be established when loading, transmitting your IP address. The legal basis is Article 6(1)(f) of the GDPR.

Instagram/Meta Privacy Policy: https://privacycenter.instagram.com/policy

17. Deletion of Data

Personal data will be deleted or its processing restricted as soon as the purpose of storage ceases to apply and no legal retention obligations prevent this. Legal retention periods in Germany:

  • 10 yearsTax-relevant documents (§ 147 AO)
  • 6 yearsCommercial letters (§ 257 German Commercial Code)

18. Rights of Data Subjects

You have the following rights with respect to us:

  • Information about your stored data (Art. 15 GDPR)
  • Correction incorrect data (Article 16 GDPR)
  • Deletion your data (Art. 17 GDPR)
  • Restriction processing (Art. 18 GDPR)
  • Data Portability (Art. 20 GDPR)
  • Objection against processing (Art. 21 GDPR)
  • Revocation an consent granted with effect for the future (Art. 7(3) GDPR)

To assert your rights, please contact: info@kuesten-jungle.de

You also have the right to lodge a complaint with the competent data protection supervisory authority (Art. 77 GDPR). The authority responsible for Lower Saxony is:

State Commissioner for Data Protection Lower Saxony
Prinzenstraße 5, 30159 Hannover
https://www.lfd.niedersachsen.de

19. Right to object for legitimate interests

To the extent that we process personal data on the basis of Art. 6 (1) (f) GDPR (legitimate interests), you can object to this processing at any time. This applies in particular to processing for direct marketing purposes. After an objection, we will no longer process your data for this purpose, unless we can demonstrate compelling legitimate grounds.

20. Safety Measures

We implement technical and organizational security measures in accordance with Art. 32 GDPR to protect your data against unauthorized access, loss, and manipulation. This includes, in particular, encrypted transmission via SSL/TLS.

21. Dispute Resolution

The European Commission provides an Online Dispute Resolution (ODR) platform:
https://ec.europa.eu/consumers/odr

Our email address: info@kuesten-jungle.de

We are not prepared or obligated to participate in dispute resolution proceedings before a consumer arbitration board.

Status: May 2026