Privacy Policy

Data Controller

Toren Gebauer

Heinrich-Gadertz-Weg 5

23562 Lübeck, Germany

Data We Collect

When you place an order, we collect your name, email address, shipping address, and payment information. When you browse our site, we collect technical data such as your IP address and browser type through essential cookies. We do not use tracking cookies or third-party analytics tools.

Legal Basis for Processing

We process your personal data on the following legal bases: (a) Performance of a contract (Art. 6(1)(b) GDPR) — to fulfill your orders, process payments, and handle shipping. (b) Legal obligation (Art. 6(1)(c) GDPR) — to comply with tax and commercial record-keeping requirements. (c) Legitimate interest (Art. 6(1)(f) GDPR) — to operate our website securely and prevent fraud.

Cookies

We use only essential cookies required for the website to function: a locale preference cookie (_medusa_locale), a cache identifier (_medusa_cache_id), and a session/cart cookie. These cookies do not track you across websites and are not used for advertising. No consent banner is required for strictly necessary cookies under EU law.

Third-Party Services

We share personal data with the following third parties, only to the extent necessary to operate our store: Stripe (payment processing — your payment details are handled directly by Stripe and never stored on our servers), our shipping carrier (name and address for delivery), and our hosting provider (technical infrastructure). All processors are GDPR-compliant and operate under data processing agreements.

Data Retention

Order data (name, address, transaction details) is retained for 10 years as required by German commercial and tax law (HGB, AO). Account data is retained as long as your account is active and deleted upon request. Technical logs are retained for a maximum of 30 days.

Your Rights

Under the GDPR, you have the right to: access your personal data (Art. 15), rectify inaccurate data (Art. 16), request erasure (Art. 17), restrict processing (Art. 18), data portability (Art. 20), and object to processing (Art. 21).

To exercise any of these rights, email us at crew@propshopfpv.com. We will respond within 30 days.

Supervisory Authority

You have the right to lodge a complaint with the competent data protection authority. The supervisory authority for Schleswig-Holstein is: Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany.

Changes to This Policy

We may update this privacy policy from time to time. The current version is always available on this page. Last updated: March 2026.