Privacy Policy

Who is responsible

The controller responsible for processing personal data on this website is:

Blackwyse GmbH
Stresemannstraße 86
22769 Hamburg
Germany
Email: info@blackwysegmbh.com · Phone: +49 157 7213 8448
Managing director: [to be completed]

This policy explains what personal data we process when you visit this website, contact us or place an order, why we do so and what rights you have under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Hosting and server log files

Our website is hosted by a professional hosting provider that acts on our behalf. Whenever you visit, the server automatically records technical data such as your IP address, date and time of the request, the page requested, the referring page, browser type and operating system. This is necessary to deliver the site securely and to detect and prevent misuse.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, stable website). Log files are kept only as long as needed for these purposes and are then deleted or anonymised.

Cookies and your consent

We use cookies and similar technologies. Strictly necessary cookies are set without consent because they are required to run the shop and the site. Optional cookies (for example for embedded content or statistics) are only used if you agree in our cookie banner. You can change or withdraw your choice at any time with the “Cookie settings” link in the footer.

Details are listed in our Cookie Policy. Legal basis: § 25(2) TDDDG for necessary cookies, § 25(1) TDDDG and Art. 6(1)(a) GDPR for optional cookies.

Contact forms and enquiries

If you contact us by form, email or phone, or send a product enquiry or quote request, we process the data you provide (such as name, company, email address, phone number and your message) to answer your request. Form submissions are also stored in the WordPress dashboard so that we can handle them.

Legal basis: Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual steps, otherwise Art. 6(1)(f) GDPR. We delete the data once your request is dealt with, unless statutory retention duties apply (see “Storage periods”).

Orders and customer accounts

If you place an order or create a customer account in our shop, we process your contact and billing details, delivery address, order history and, where relevant, payment information, in order to perform the contract, deliver the goods, handle payment and meet accounting obligations.

Legal basis: Art. 6(1)(b) and (c) GDPR. We pass data to shipping companies, payment service providers and tax advisers only to the extent necessary for these purposes.

Statistics and analytics

We may use web analytics to understand how the site is used. We do this only with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). At the time of writing no analytics tracking is active on this site. If we enable it, we will update this policy and ask for your consent first.

Google Maps

Our contact page can show a map from Google Maps. The map is not loaded automatically. Only when you click “Load map” (or have allowed embedded content in the cookie settings) is a connection to Google established, and Google receives your IP address and may set cookies. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; data may also be processed by Google LLC in the USA under the EU-US Data Privacy Framework.

Legal basis: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG.

Recipients and international transfers

We share personal data only with service providers that support us (for example hosting, IT support, logistics, payment and accounting) and only to the extent required. These providers are bound by data processing agreements where required. If data is transferred outside the EU/EEA, we ensure an adequate level of protection, for example through an adequacy decision or standard contractual clauses.

Storage periods

We keep personal data only as long as necessary for the purpose. Commercial and tax law requires us to retain business correspondence for six years and accounting records for up to ten years (§§ 147 AO, 257 HGB). After these periods the data is deleted.

Your rights

You have the right to:

• access to your personal data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16)
• erasure (Art. 17) and restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interests (Art. 21)
• withdraw consent at any time with effect for the future (Art. 7(3))

To exercise your rights, contact us at info@blackwysegmbh.com.

Right to complain

You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit), datenschutz-hamburg.de.

Security

This website uses TLS encryption (HTTPS). We apply technical and organisational measures to protect personal data against loss, misuse and unauthorised access.

Changes to this policy

We update this policy when our services or legal requirements change. The current version is always available on this page.

Last updated: 15 October 2026