HomePrivacy Policy

Privacy Policy

1. Data Controller Identity & Overview

This Privacy Policy explains how siftling collects, processes, uses, and retains personal data when you visit or make a purchase from www.siftling.com.

For the purposes of the General Data Protection Regulation (GDPR) and applicable European and German data protection legislation (including the DSGVO), the Data Controller responsible for your personal data is:

  • Brand Name: siftling
  • Address: Höhscheider Weg 29, 42699 Solingen, Germany
  • Telephone: +49 2126582800
  • Email: kitchen@siftling.com

We respect your privacy rights and process personal data exclusively in compliance with European statutory standards.

2. Personal Data Collected & Purpose of Processing

We collect personal data strictly necessary to fulfill order agreements, provide customer support, and maintain legal compliance. The data processed includes:

  • Identity & Contact Data: Full name, billing address, European delivery address, email address, and telephone number. (Processed under Article 6(1)(b) GDPR for contract performance).
  • Order & Transaction Data: Details regarding kitchen and baking tool items purchased, transaction history, order notes, and communication records. (Processed under Article 6(1)(b) GDPR).
  • Technical & Usage Data: IP address, browser type, device information, and time stamps automatically collected during website interaction to ensure technical operational stability. (Processed under Article 6(1)(f) GDPR for legitimate interest).

3. Payment Processing & Payment Service Providers

To complete purchases on www.siftling.com, payment processing services are provided by our external payment gateway partner, Stripe.

  • Role of Stripe: When you initiate a transaction, your payment credential data (such as credit card details or payment authentication data) is transmitted directly to and processed securely by Stripe Payments Europe, Ltd. (or its affiliated entities).
  • Data Handling: siftling does not directly capture, process, or retain full sensitive payment credentials on our own servers.

4. Data Retention Periods

In compliance with European data protection regulations and German statutory obligations (under the German Commercial Code / HGB and Tax Code / AO), we retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Order & Financial Records: Transaction details, invoices, and relevant correspondence associated with purchases are retained for ten (10) years to satisfy legal, tax, and accounting documentation requirements under German commercial law.
  • Customer Support Records: General customer service correspondence, product inquiries, and email exchanges not leading to statutory retention requirements are retained for up to three (3) years following the end of the calendar year in which the inquiry was resolved (matching the statutory limitation period under German civil law).
  • Website Technical Logs: Server access log files and IP data collected for security and operational purposes are stored for a temporary period of up to thirty (30) days before being automatically erased or anonymised.

Once the applicable statutory retention period expires, your personal data is securely deleted or rendered fully anonymised.

5. Third-Party Data Sharing & Transfers

Your personal data is never sold, leased, or rented to third parties. Data sharing is strictly restricted to functional service providers directly assisting in operations:

  • Order Fulfillment & Delivery: Name and address data are provided to regional logistics and postal courier partners operating within Europe solely to dispatch your purchased goods.
  • Technical Infrastructure: Website hosting and technical maintenance partners acting as data processors under contractual data processing agreements (Article 28 GDPR).
  • Legal Authorities: Information disclosed if strictly mandated by statutory duty, judicial court order, or official regulatory enforcement within the European Union.

6. Data Subject Rights

Under European data protection laws, you possess statutory rights regarding your personal data held by siftling:

  • Right of Access (Art. 15 GDPR): The right to obtain confirmation and details regarding the personal data stored about you.
  • Right to Rectification (Art. 16 GDPR): The right to request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Art. 17 GDPR): The right to request deletion of personal data where statutory retention obligations do not apply.
  • Right to Restriction of Processing (Art. 18 GDPR): The right to request restricted handling of personal data under specific conditions.
  • Right to Data Portability (Art. 20 GDPR): The right to receive personal data provided to us in a structured, standard format.
  • Right to Object (Art. 21 GDPR): The right to object to processing based on legitimate interests.

To exercise any of these rights, please contact us directly at kitchen@siftling.com. You also have the right to lodge a complaint with a competent European Data Protection Supervisory Authority (in Germany: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen).

7. Contact Details

If you have any questions regarding this Privacy Policy or how your personal data is processed by siftling, please reach out via our contact details:

  • Brand Name: siftling
  • Address: Höhscheider Weg 29, 42699 Solingen, Germany
  • Telephone: +49 2126582800
  • Email: kitchen@siftling.com

Account