Privacy policy
PRIVACY POLICY
Last updated: June 21, 2026
1. Data controller
The controller responsible for processing your personal data is:
thee76s
Owner: Noel Brehm
Mehliskopfstraße 6
76189 Karlsruhe
Germany
Email: thee76sbusiness@gmail.com
Phone: +49 170 630 2806
2. Scope of this Privacy Policy
This Privacy Policy explains how we collect, use, store and share personal data when you visit thee76s.com, create an account, contact us, subscribe to our newsletter, make a purchase or otherwise interact with thee76s.
3. Personal data we collect
Depending on how you use our website, we may collect the following categories of personal data.
Contact data
This may include your name, email address, phone number, billing address and shipping address.
Order data
This may include purchased items, order number, order value, delivery method, payment status, return information and communication relating to your order.
Payment data
Payments are processed through the payment provider selected during checkout.
We do not receive or store complete card details.
Account data
If you create a customer account, we may process your name, email address, login details, order history and account preferences.
Communication data
If you contact us by email, contact form, social media or another communication channel, we may process the information you provide.
Technical usage data
When you visit our website, we may process technical information such as your IP address, browser type, device information, operating system, language settings, pages visited, referring website, date and time of access and interactions with the website.
Newsletter data
If you subscribe to our newsletter, we process your email address and, where applicable, your consent status and interaction with newsletter emails.
Advertising data
Where you have given consent, we may process information relating to your interaction with advertising campaigns, cookies, pixels and similar technologies.
4. Why we process your data
We process personal data for the following purposes.
To provide the website and process orders
We process contact data, order data, payment status and delivery information to process purchases, provide customer support, arrange shipping, handle returns and communicate about your order.
The legal basis is Article 6 paragraph 1 point b GDPR because the processing is necessary for the performance of a contract or to take steps before entering into a contract.
To comply with legal obligations
We process and retain certain order, invoice and transaction information to comply with tax, accounting and other legal obligations.
The legal basis is Article 6 paragraph 1 point c GDPR.
To protect our business and prevent fraud
We may process data to protect our website, prevent fraud, investigate suspicious activity, enforce our rights and protect customers and third parties.
The legal basis is Article 6 paragraph 1 point f GDPR. Our legitimate interest is protecting our business, customers, website and transactions from fraud or misuse.
For newsletters and direct marketing
We send marketing emails only where you have subscribed or where another legal basis permits this.
You can unsubscribe at any time by using the unsubscribe link in any marketing email or by contacting us.
The legal basis is Article 6 paragraph 1 point a GDPR where consent is required.
For cookies, analytics and advertising
Optional analytics and marketing technologies are used only where you have given consent through our cookie banner.
The legal basis is Article 6 paragraph 1 point a GDPR and Section 25 paragraph 1 TDDDG.
5. Service providers and recipients
We may share personal data with service providers where necessary to operate our business and fulfil orders.
These may include the following categories of recipients.
Shopify
Our online store is hosted on Shopify. Shopify provides the ecommerce platform, checkout, customer account functions, hosting and technical infrastructure used by thee76s.
Payment providers
Payment providers selected during checkout may process payment data, billing information and transaction data to complete your payment.
This may include PayPal, Shopify Payments or another payment provider made available during checkout.
Shipping carriers
We share necessary shipping details with carriers used to fulfil your order, including DHL, DHL Express or another carrier selected for the shipment.
Email and communication providers
We use email and communication providers to receive and respond to customer enquiries, send order updates and manage customer communications.
Marketing and advertising providers
Where you consent, we may use Meta Business Tools, including Meta Pixel or similar technologies, to measure advertising performance, understand how visitors interact with our website and create relevant advertising audiences.
Public authorities and professional advisers
We may disclose data where required by law or where necessary to establish, exercise or defend legal claims.
6. Cookies and similar technologies
We use cookies and similar technologies to operate the website.
Necessary cookies are required for essential website functions, including security, shopping cart functions, checkout, language settings and customer account functions.
Optional analytics and marketing cookies are only activated after you provide consent through our cookie banner.
You can change or withdraw your consent at any time through the Cookie Preferences link in the footer of our website.
If you refuse optional cookies, the website will continue to function, although certain non essential features may be unavailable.
7. Newsletter
When you subscribe to our newsletter, we process your email address to send updates, product releases, offers and other marketing content.
You may withdraw your consent at any time through the unsubscribe link in any newsletter email or by contacting thee76sbusiness@gmail.com.
We retain your newsletter data until you unsubscribe or until we no longer use the newsletter service.
8. Meta advertising
Where you consent through the cookie banner, we may use Meta Business Tools for advertising measurement and marketing purposes.
This may allow Meta to receive information about your visit, actions on our website and purchase related events.
Meta may process this information in accordance with its own privacy practices.
For the collection and transmission of certain event data through Meta Business Tools, thee76s and Meta may act as joint controllers where required by applicable law.
You can withdraw your consent at any time through Cookie Preferences.
9. International data transfers
Some service providers may process personal data outside the European Economic Area, including in Canada or the United States.
Where personal data is transferred outside the European Economic Area, we rely on an adequacy decision, standard contractual clauses or another legally recognised safeguard where required.
10. Data retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.
Order, invoice and transaction data may be retained for the period required by applicable tax, accounting and commercial law.
We retain customer support correspondence for as long as necessary to handle the request and protect our legal interests.
Technical logs and security information are retained only for an appropriate period required for security, troubleshooting and fraud prevention.
11. Your rights
Depending on applicable law, you may have the following rights.
You may request access to your personal data.
You may request correction of inaccurate or incomplete personal data.
You may request deletion of your personal data where legal requirements are met.
You may request restriction of processing.
You may request data portability.
You may object to processing based on legitimate interests.
You may withdraw consent at any time where processing is based on consent.
You may object at any time to the processing of your data for direct marketing purposes.
To exercise your rights, contact us at thee76sbusiness@gmail.com.
12. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority.
In Baden Württemberg, the relevant authority is the State Commissioner for Data Protection and Freedom of Information Baden Württemberg.
You may also contact the supervisory authority in your country of habitual residence, place of work or place of the alleged infringement.
13. Security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
No online system can be completely secure. Please do not send sensitive payment information by email.
14. Changes to this Privacy Policy
We may update this Privacy Policy where necessary for legal, technical or operational reasons.
The latest version will always be published on this page with an updated date.
15. Contact
For questions about this Privacy Policy or the processing of your personal data, contact:
thee76sbusiness@gmail.com