1. Responsible Party for Data Processing
Dolaborate GmbH
Schlettstatterstraße 77
14169 Berlin, Germany
📧 Email: [email protected]
We are responsible for processing personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Collection and Processing of Personal Data
a) When Visiting the Website
When you visit our BigCartel shop, the hosting provider automatically collects and processes the following data- IP address
- Date and time of access
- Name and URL of the accessed file
- Referrer URL (previously visited page)
- Browser type and operating system
b) Processing of Data for Orders
When placing an order, we collect and process the following data:- Name
- Billing and shipping address
- Email address
- Payment details
This data is necessary to process your order and fulfill our contractual obligations (legal basis: Art. 6(1)(b) GDPR – contract performance).
c) Use of Third-Party Providers (BigCartel, Payment Services, Shipping Providers)
BigCartel (E-Commerce Platform)
Our shop is hosted on BigCartel (Big Cartel, LLC, 208 S 200 W, Salt Lake City, Utah 84101, USA). This means that personal data may be processed by BigCartel.
BigCartel acts as a data processor on our behalf in accordance with Art. 28 GDPR. The processing and protection of your data are governed by BigCartel’s Data Processing Addendum (DPA), which can be found here:
📌 Data Storage & Transfer:
BigCartel stores and processes your data on servers located in the United States. Data transfers outside the European Economic Area (EEA) are based on Standard Contractual Clauses (SCCs) in accordance with Art. 46 GDPR. However, due to U.S. surveillance laws, authorities may access your data without notice. BigCartel applies additional technical safeguards (e.g., encryption) to protect your data.
For more information, please review BigCartel’s Privacy Policy:
Payment Providers
To process payments, we use third-party payment providers. When you choose a payment method, your payment details will be transmitted directly to:
•PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg)
•Stripe (Stripe Payments Europe Ltd., Ireland)
📌 Important:
PayPal and Stripe are independent data controllers when processing your payment. We do not store your payment details. Please refer to their privacy policies for more information.
📌 Alternative Ordering Option:
If you do not wish to use BigCartel or the listed payment providers, you may place an order by contacting us directly via email at [email protected].
3. Your Rights as a Data Subject
Under the General Data Protection Regulation (GDPR), you have the following rights:
•Right to access (Art. 15 GDPR): Obtain information about your stored data.
•Right to rectification (Art. 16 GDPR): Request correction of incorrect or incomplete data.
•Right to erasure (Art. 17 GDPR): Request deletion of your data, unless legal obligations require retention.
•Right to restriction of processing (Art. 18 GDPR): Request limitation of data processing under certain conditions.
•Right to data portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.
•Right to object (Art. 21 GDPR): Object to data processing based on legitimate interest.
•Right to withdraw consent (Art. 7(3) GDPR): Withdraw consent at any time, with effect for the future.
📌 If you believe that your data is being processed unlawfully, you have the right to file a complaint with the competent data protection authority:
🔗 German Data Protection Authorities
4. Data Retention Policy
We retain personal data only as long as necessary for the respective purpose or as required by law:- Order & payment data – 10 years (German tax law, §147 AO)
- Customer inquiries – 12 months (unless legally required)
5. Cookies & Tracking Technologies
We use cookies to improve your user experience. Cookies may be stored by BigCartel or third-party providers.
For details, please refer to:
If you wish to opt out of tracking, adjust your browser settings accordingly.
6. Contact Information
For privacy-related inquiries, you can contact us at:
📧 Email: [email protected]
📌 Data Protection Officer (DPO):
We are not legally required to appoint a Data Protection Officer (DPO). If you have any privacy concerns, please reach out using the contact details above.