Privacy Policy

Stand: 1. August 2026

1. Privacy at a Glance

General Information

The following information provides an overview of what happens to your personal data when you visit this website or use our online store. Personal data refers to any information that can be used to identify you personally.

You can find detailed information in the following sections of this Privacy Policy.

Data Collection on This Website

Who is responsible for data processing?

Data processing on this website is carried out by the website operator. You can find their contact information in the “Data Controller” section.

How do we collect your data?

You provide us with some information yourself, for example, when you fill out a contact form, place an order, create a customer account, submit files for a personalized product, or sign up for the newsletter.

Other data is collected by our IT systems automatically or with your consent when you visit the website. This includes, in particular, technical data such as your IP address, browser, operating system, device type, and the time you accessed the page.

What do we use your data for?

We process data, in particular, to:

• to technically host and secure the website,
• To process orders and payments,
• to manufacture personalized products,
• Goods to be shipped,
• To respond to inquiries,
• to send a newsletter,
• to analyze website usage for statistical purposes, subject to your consent,
• to comply with statutory retention and documentation requirements.

What are your rights?

Subject to the statutory requirements, you have the right, in particular, to access, rectification, erasure, restriction of processing, data portability, and objection. You may revoke any consent you have given at any time with future effect. You also have the right to file a complaint with a data protection supervisory authority.

2. General Information and Mandatory Disclosures

Data Controller

The entity responsible for data processing on this website is:

3DSeasons
Owner: Monika Martius
Meisenweg 6 A
26936 Stadland
Germany

Telefon: +49 155 66401477
E-Mail: 3DSeasons@nextgenbuild.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

Legal Basis

Wir verarbeiten personenbezogene Daten insbesondere auf folgenden Rechtsgrundlagen:

• Article 6(1)(a) of the GDPR, if you have given your consent,
• Article 6(1)(b) of the GDPR, if the processing is necessary for the performance of a contract or for taking steps prior to entering into a contract,
• Article 6(1)(c) of the GDPR, if there is a legal obligation to do so,
• Article 6(1)(f) of the GDPR, if the processing is necessary to protect our legitimate interests and there are no overriding interests of the data subject that would prevent it.

To the extent that information is stored on or retrieved from your device, this is done either based on your consent pursuant to Section 25(1) of the TDDDG or, in the case of technologies that are strictly necessary, pursuant to Section 25(2) of the TDDDG.

Retention period

We store personal data only for as long as is necessary for the respective purpose. Data is deleted as soon as the purpose of processing no longer applies and there is no other legal basis for its storage.

Statutory retention requirements under commercial and tax law may require the longer-term storage of order, contract, invoice, and payment data, in particular. During this period, the data is generally processed only for the purposes required by law.

Data may also be stored for a longer period if this is necessary to assert, exercise, or defend legal claims.

Recipients of Personal Data

Personal data may be disclosed, to the extent necessary for the respective purpose, in particular to the following recipients or categories of recipients:

• Hosting and IT service providers,
• Payment service providers,
• Shipping and logistics companies,
• Newsletter service provider,
• Providers of consent management and analytics services,
• Banking, Accounting, and Tax Consulting,
• Government agencies and public authorities when required by law to do so,
• Legal counsel and court proceedings to enforce or defend claims.

Data will only be disclosed if there is a legal basis for doing so. Where necessary, we enter into contracts with data processors in accordance with Article 28 of the GDPR.

Transfers to Third Countries

For certain service providers, processing outside the European Union or the European Economic Area cannot be completely ruled out.

Data will only be transferred if the requirements of Articles 44 et seq. of the GDPR are met. The legal basis may include, in particular, adequacy decisions, certification under the EU-U.S. Data Privacy Framework, the European Commission’s Standard Contractual Clauses, or a statutory exception.

For more information, please refer to the respective services.

Safety Measures

We take appropriate technical and organizational measures to protect personal data from loss, tampering, unauthorized access, and other misuse.

This website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the web address begins with “https://.”

3. Hosting and Server Log Files

This website is hosted by the following provider:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
D-02742 Friedersdorf
Germany

When you visit this website, server log files may be processed automatically. These may include, in particular:

• IP address,
• Date and time of access,
• page or file accessed,
• amount of data transferred,
• Referrer URL,
• Browser type and browser version,
• Operating system,
• Message confirming successful retrieval,
• the requesting Internet service provider.

The processing is used to ensure the technical operation, stability, security, and error analysis of the website, as well as to protect it from unauthorized access.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring the secure and proper functioning of the website.

Retention period for server log files:
The server log files are automatically collected by our hosting provider and stored only for the short period of time necessary to achieve the purposes mentioned above, after which they are automatically deleted or anonymized.

Where necessary, a contract for data processing has been entered into with the hosting provider in accordance with Article 28 of the GDPR.

4. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Cookies are small data files that can be stored on or read from your device.

Technologically Necessary Technologies

Technically necessary cookies and similar technologies are used to provide functions that are required for the website and online store to operate as explicitly requested. These may include, in particular:

• Shopping Cart and Ordering Process,
• Shopping Cart and Ordering Process,
• Registration and Customer Account,
• Language settings,
• Payment processing,
• Saving cookie settings.

To the extent that these technologies are strictly necessary, storage or access is based on Section 25(2) of the TDDDG. The subsequent processing of personal data is based, depending on the purpose, on Article 6(1)(b) or (f) of the GDPR.

Technologies Requiring Consent

Technologies for analysis, statistics, marketing, or other purposes that are not strictly necessary will only be used after you have given your explicit consent.

This applies in particular to Jetpack Stats and externally embedded Google Fonts.

The legal basis is Section 25(1) of the TDDDG and Article 6(1)(a) of the GDPR.

You can withdraw or change your consent at any time, effective for the future, through the website's cookie settings.

Consent Management

To obtain, manage, document, and revoke your consents, we use:

Real Cookie Banner
devowl.io GmbH
Trostbrücke 1
20457 Hamburg
Germany

As part of consent management, the following data, in particular, may be processed:

• Decision on consent,
• Date of the decision,
• Scope of consent,
• pseudonymous identifier,
• Browser and device information,
• The date of a subsequent revocation.

The purpose of this processing is to implement your settings and to provide evidence that consent was properly obtained.

The legal basis is Article 6(1)(c) and (f) of the GDPR and, to the extent that access is absolutely necessary, Section 25(2) of the TDDDG.

Retention period for records of consent:
[tatsächliche Speicherdauer des Consent-Tools eintragen]

5. Online Store and WooCommerce

We use WooCommerce as our e-commerce platform. WooCommerce runs on our website as a WordPress plugin.

When using the online store, the following data, in particular, may be processed:

• First and last name,
• Billing and shipping address,
• Email address,
• Phone number, if provided,
• ordered products and product variants,
• Personalization information,
• Order number and order date,
• Invoice amount,
• Shipping and Payment Methods,
• Payment and Order Status,
• Customer account and login information, if a customer account is created,
• Messages and notes regarding the order,
• IP address and time of order.

Data is processed in particular for the following purposes:

• Processing and fulfilling orders,
• Provision of the shopping cart and the checkout process,
• Generation of order, invoice, and shipping information,
• Payment processing,
• Communication with customers,
• Processing of cancellations, complaints, and warranty claims,
• Compliance with commercial and tax law obligations,
• Prevention of Abuse and Fraud.

The legal basis is Article 6(1)(b) and (c) of the GDPR. Insofar as security and anti-abuse measures are concerned, processing is carried out on the basis of Article 6(1)(f) of the GDPR.

Required fields are marked accordingly during the ordering process. Without this information, an order may not be processed.

Customer Account

If you create a customer account, we will store the necessary data so that you can manage your orders and place future orders more easily.

The legal basis is Article 6(1)(b) of the GDPR.

You may request that your customer account be deleted. However, order, invoice, and payment data that must be retained by law will not be deleted before the statutory retention periods expire.

Guest Order

To the extent that an order can be placed without a customer account, we process the data provided to fulfill and process the respective order, as well as to comply with legal obligations.

Automattic Services (Jetpack, WooPayments, MailPoet)

We use WooCommerce PayPal Payments and WooPayments for payment processing, Jetpack for analytics, and MailPoet for sending newsletters. These plugins are provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA, and its respective affiliated companies (including WooCommerce.com, WooPayments powered by Stripe, Jetpack, and MailPoet). Details about the respective services can be found in the corresponding sections of this Privacy Policy as well as at automattic.com/privacy.

6. Personalized Products and Customer Databases

If you submit images, photographs, drawings, text, names, 3D files, or other content for the production of a personalized product, we will process this data for the purposes of reviewing, designing, manufacturing, and fulfilling the order.

Depending on their content, the files may contain personal data about the individuals depicted or mentioned.

Please submit only content that you are authorized to use and share. If the content includes images of other people, you must ensure that you have obtained the necessary consents or other authorizations.

The legal basis is Article 6(1)(b) of the GDPR.

The files will be deleted as soon as they are no longer needed to fulfill the order and there are no legal or contractual grounds for further storage.

Scheduled retention period for submitted customer files:
180 days after the order has been fully processed.

Data will only be stored for a longer period if you expressly request a subsequent reorder or archiving and there is a corresponding legal basis for doing so.

7. Payment Processing with PayPal

We accept payments via PayPal.

The provider for customers in the European Economic Area is generally:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxemburg

If you select PayPal as your payment method, the data required to process the payment will be transmitted to PayPal or collected directly by PayPal.

In particular, the following data may be processed:

• Name,
• Address,
• Email address,
• Phone number,
• Invoice amount and currency,
• Order number,
• Shopping Cart and Product Information,
• Payment and Transaction Status,
• Device and connection data,
• Data related to identity verification, security checks, fraud detection, and risk assessment.

As a general rule, we do not receive your full PayPal account login information or your full credit card or bank account information. Specifically, we receive information indicating whether a payment was processed, declined, canceled, or refunded.

Data is transferred for the purpose of fulfilling the contract and processing the selected payment method, based on Article 6(1)(b) of the GDPR.

PayPal processes certain data under its own data protection responsibility, in particular for payment processing, compliance with legal obligations, and fraud and risk assessment.

For more information: paypal.com/de/legalhub/paypal/privacy-full

7a. Payment Processing with WooPayments (Credit Card)

For credit card payments, we use WooPayments, a payment solution based on Stripe's infrastructure.

The provider is:

Stripe Payments Europe, Ltd.
1 Grand Canal Street Lower
Grand Canal Dock
Dublin, D02 H210
Irland

If you pay by credit card, the data required for payment processing (including, but not limited to, your name, billing address, credit card information, invoice amount, order number, device and connection data, and data for fraud and risk assessment) is transmitted to Stripe or collected directly by Stripe. We do not receive any complete credit card information ourselves.

Data is transferred for the purpose of fulfilling the contract and processing the selected payment method, based on Article 6(1)(b) of the GDPR. The possibility of data being processed in the United States cannot be completely ruled out; in such cases, the conditions set forth in the section “Transfers to Third Countries” apply.

For more information: stripe.com/de/privacy

7b. Purchase on Account with Ratepay

For purchases on account, we partner with the payment service provider Ratepay, which processes this payment method for us via PayPal.

The provider is:

Ratepay GmbH
Ritterstr. 12-14
10969 Berlin
Germany

If you select “Purchase on Account” during the ordering process, we will transmit the data required for payment processing (including your name, address, date of birth, and order details) to Ratepay. To mitigate the risk of non-payment, Ratepay conducts an identity and credit check and may transmit data to or obtain data from credit bureaus for this purpose.

The legal basis for this processing is Article 6(1)(b) of the GDPR (performance of the sales contract); to the extent that creditworthiness data is processed, the legal basis is additionally Article 6(1)(f) of the GDPR (our and Ratepay’s legitimate interest in protecting against payment default).

For more information about data protection at Ratepay, please see the Datenschutzhinweisen von Ratepay.

8. Shipping Service Providers

To deliver ordered goods, we provide the shipping information required for shipment to the designated shipping provider.

Dazu können insbesondere gehören:

• Name,
• Shipping address,
• Order or tracking number,
• email address, if applicable,
• phone number, if applicable.

The transmission of your name and shipping address is carried out for the purpose of fulfilling the contract, based on Article 6(1)(b) of the GDPR.

An email address or phone number will only be disclosed for the purpose of shipment notification to the extent that this is necessary for processing the order or if consent or another legal basis exists for doing so.

Shipping providers used:

• DHL Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Deutschland
• UPS Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Deutschland
• Packlink Shipping S.L., Calle Marie Curie 8-14, 08042 Barcelona, Spanien (Versandlabel-Verwaltung über mehrere Paketdienstleister)

9. Making Contact

If you contact us by email, phone, contact form, or any other means, we will process the information you provide in order to handle your inquiry.

In particular, the following data may be processed:

• Name,
• Email address,
• Phone number,
• Message content,
• mitgesendete Dateien,
• Date and time of contact,
• Additional information provided voluntarily.

If the inquiry relates to a contract or a potential order, the processing is based on Article 6(1)(b) of the GDPR.

For other inquiries, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the proper handling and documentation of the inquiry.

Data will only be disclosed to the extent that it is necessary for processing, required by law, or permitted under another legal basis.

The data will be deleted once the request has been fully processed and there are no legal retention requirements or other reasons for continued storage.

10. Newsletter

If you subscribe to our newsletter, we will process your email address and, if applicable, your name, in order to send you information about new products, offers, promotions, and news from 3DSeasons.

The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR.

Double-Opt-in

We always use a double opt-in process for sign-ups. After signing up, you will receive a message asking you to confirm your subscription to the newsletter.

For documentation purposes, the following data, in particular, may be stored:

• Email address,
• Date of registration,
• Zeitpunkt der Bestätigung,
• IP address,
• The date of revocation or cancellation.

This documentation is maintained to fulfill legal record-keeping obligations and to safeguard our legitimate interest in being able to demonstrate valid consent and prevent misuse. The legal bases are Article 6(1)(c) and (f) of the GDPR.

Newsletter Service Provider

We use MailPoet, a plugin from the following provider, to send emails:

Automattic Inc.
60 29th Street #343
San Francisco, CA 94110
USA

Provider's Privacy Policy: automattic.com/privacy

The service provider processes the data on our behalf, unless it is itself responsible for certain processing operations. Where necessary, a data processing agreement has been entered into in accordance with Article 28 of the GDPR.

[Prüfen: Versendet MailPoet über den eigenen MailPoet Sending Service (Auftragsverarbeitung in der EU/den USA) oder über einen eigenen SMTP-Server? Ergebnis hier ergänzen.]

Open and Click Tracking

[Diesen Abschnitt nur verwenden, wenn MailPoet Öffnungen oder Linkklicks misst – bitte in den MailPoet-Einstellungen prüfen.]

Newsletters may contain technologies that can be used to determine whether a message has been opened and which links have been clicked. In particular, the time of access, IP address, browser and device information, and interactions with the newsletter may be processed.

Personal data will only be processed with your consent, in accordance with Article 6(1)(a) of the GDPR.

Unsubscribe

You may revoke your consent at any time, effective for the future. You will find an unsubscribe link at the bottom of each newsletter. Alternatively, you can unsubscribe by sending an email to 3DSeasons@nextgenbuild.de erklären.

Once you unsubscribe, your email address will be removed from the active newsletter mailing list.

We may add the email address to a block list to the extent necessary to ensure that no further newsletters are sent after a subscription is canceled. The block list is used exclusively for this purpose.

11. Jetpack Stats

We use Jetpack Stats to analyze usage of our website.

The provider is:

Automattic Inc.
60 29th Street #343
San Francisco, CA 94110
USA

Jetpack Stats allows us, in particular, to analyze:

• how many people visit our website,
• which pages and products are accessed,
• how visitors find their way to our website,
• which devices and browsers are used,
• where technical or content-related improvements are needed.

In particular, pseudonymous identifiers, device and browser information, approximate location information, referrer URLs, pages accessed, and the date and time of access may be processed.

Jetpack Stats wird erst aktiviert, nachdem Sie über das Cookie-Banner ausdrücklich eingewilligt haben.

Rechtsgrundlagen sind § 25 Abs. 1 TDDDG und Art. 6 Abs. 1 lit. a DSGVO. Sie können Ihre Einwilligung jederzeit über die Cookie-Einstellungen dieser Website mit Wirkung für die Zukunft widerrufen.

Processing by Automattic Inc. in the United States cannot be completely ruled out. The conditions set forth in the section titled “Transfers to Third Countries” apply in this regard.

For more information: automattic.com/privacy

12. Google Fonts

This website uses Google Fonts, a service for displaying fonts.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Irland

When loading fonts, the browser may connect to Google's servers. In particular, the IP address, the URL accessed, browser and device information, and technical connection data may be processed.

External content is only loaded after you have given your consent via the cookie banner.

The legal basis is Section 25(1) of the TDDDG and Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect via the cookie settings.

Processing in third countries cannot be completely ruled out. To the extent that data is transferred to a third country, the conditions set forth in the section “Transfers to Third Countries” apply.

For more information: developers.google.com/fonts/faq/privacy, policies.google.com/privacy

13. Rights of Data Subjects

You have the following rights in accordance with the applicable legal requirements:

Information

You may request information regarding whether we process personal data about you and, if so, what data we process.

Correction

You have the right to request the correction of inaccurate personal data and the completion of incomplete personal data.

Deletion

You may request the deletion of your personal data, provided that there are no legal retention requirements or other legal grounds that prevent this.

Restriction of Processing

You may request that the processing of your data be restricted, subject to the legal requirements.

Data Portability

Provided that the legal requirements are met, you may receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or request that it be transferred to another data controller.

Withdrawal of Consent

You may revoke your consent at any time, effective for the future. The lawfulness of the processing carried out prior to the revocation remains unaffected.

Right to Object under Article 21 of the GDPR

If processing is based on Article 6(1)(e) or (f) of the GDPR, you may object to the processing at any time on grounds relating to your particular situation.

If personal data is processed for direct marketing purposes, you may object to such processing at any time without providing a reason. This also applies to profiling, to the extent that it is related to direct marketing.

Right to File a Complaint

You have the right to file a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection laws.

In particular, you may contact the supervisory authority in your usual place of residence, your place of work, or the location of the alleged violation.

14. Obligation to Provide Data

When placing an order, you must provide the personal data necessary to fulfill the contract, arrange delivery, process payment, or comply with legal obligations.

Without this information, we may not be able to accept or process the order.

For voluntary services, such as the newsletter, there is no legal or contractual obligation to provide the data.

15. Automated Decisions

As a general rule, we do not make any decisions based solely on automated processing that have legal effects on you or that significantly affect you in a comparable manner.

Payment service providers may, within the scope of their own responsibilities, conduct automated checks for fraud prevention, risk assessment, or payment authorization. For more information, please refer to the privacy policy of the respective payment service provider.

16. Updates to This Privacy Policy

We will update this Privacy Policy if there are changes to the services we use, our data processing practices, or legal requirements.

The version published on our website at any given time shall apply.