This policy explains how we use your personal data when you visit antiexperd.com or buy something from us.
1. Who is responsible for your data?
OTIDO UG (haftungsbeschränkt)
Parkstr. 5
61389 Schmitten
Germany
Email: info@otido.de
We are responsible for the personal data processed through our shop. You can contact us about your data at any time.
2. Visiting our website
Our website is hosted by ALL-INKL.COM.
When you visit, the hosting system processes technical information such as your IP address, the time of your visit, requested pages and browser information. This helps deliver the website, identify errors and protect it against attacks.
The legal basis is our legitimate interest in keeping the website available and secure: Article 6(1)(f) GDPR.
Technical logs should be retained only for the period needed for operation, troubleshooting and security. Information relevant to a security incident may need to be kept until the incident is resolved.
3. Contacting us
When you email us, we use your email address and the information in your message to answer you.
For questions about a purchase, the legal basis is Article 6(1)(b) GDPR. For other enquiries, it is our legitimate interest in handling your request under Article 6(1)(f) GDPR.
Please send only the personal information needed for your question.
4. Orders and customer accounts
Our shop runs on WordPress and WooCommerce.
When you order, we process your name, email address, billing and delivery addresses, ordered items, order amount and payment status. We also process a phone number or order note if you provide one.
We use this information to process your purchase, send order updates, arrange delivery and handle returns, refunds or complaints.
If you create an account, we also process your login information, saved details and order history to provide that account.
The legal basis is Article 6(1)(b) GDPR. Keeping records required by tax and accounting law is based on Article 6(1)(c) GDPR.
The information marked as required at checkout is needed to complete your purchase. Without it, we may be unable to accept or deliver your order.
5. Payments
We offer PayPal and WooPayments. WooPayments uses Stripe as a payment partner.
The provider handling your payment receives the details needed to process it. These may include your name, billing details, contact information, payment details, purchase amount and transaction identifiers.
We receive information about the payment, such as whether it succeeded and the transaction reference. WooPayments collects card details through hosted payment fields; full card numbers and security codes are not stored in our shop database through that service.
Our legal basis for arranging payment is Article 6(1)(b) GDPR.
Payment providers also process data for their own purposes, such as preventing fraud and meeting legal obligations. Their privacy policies explain this:
6. Making and delivering your order
We use Printful to produce and fulfil orders.
Printful receives the order information, recipient details and delivery address needed to make and send your items. Contact details may also be shared where needed for delivery. Shipping companies receive the information needed to transport and deliver your parcel.
The legal basis is Article 6(1)(b) GDPR.
Further details are available in Printful’s Privacy Policy.
7. Cookies
We use cookies and similar technologies to support website features, including the shopping cart and login. Complianz manages visitors’ cookie choices and records consent preferences.
Storage or access strictly necessary for a service you request does not require consent under Section 25(2) TDDDG. Optional storage or access requires consent under Section 25(1) TDDDG. Where personal-data processing relies on that consent, the legal basis is Article 6(1)(a) GDPR.
You can withdraw consent for future processing through the website’s consent controls.
Our Cookie Policy provides information about cookies, their purposes and consent settings.
8. Website security
We use hosting security measures and enabled Jetpack security functions to help protect the website and its accounts.
Depending on the function, this may involve technical connection information, IP addresses and login-related information. Jetpack services are provided by Automattic.
The legal basis is our legitimate interest in preventing unauthorised access and keeping the shop secure: Article 6(1)(f) GDPR.
See Automattic’s Privacy Policy for information about its processing.
9. Processing outside the European Economic Area
Our payment, fulfilment and technical service providers operate internationally. Their processing can involve countries outside the European Economic Area, including the United States.
The protection used depends on the provider and transfer. Providers’ published terms describe mechanisms such as European Commission adequacy decisions and Standard Contractual Clauses. These clauses require recipients to protect transferred personal data.
See the provider policies linked above and Printful’s Data Processing Terms. You can also contact info@otido.de to request information about safeguards relevant to your data.
10. How long data is kept
Retention depends on why the data is needed:
- Enquiries: until the matter is resolved, with further retention where needed for related obligations or legal claims.
- Customer accounts: while the account is provided. You can request account closure.
- Orders: for fulfilment, returns, warranty matters and related legal claims.
- Legally required records: for the applicable statutory period.
German commercial law generally requires accounting vouchers to be kept for eight years and business correspondence for six years. The period normally starts at the end of the relevant calendar year. Some records have different requirements, and tax proceedings or legal disputes can require longer retention.
Closing an account does not remove records that must still be kept by law. Retention obligations apply to the relevant records, rather than automatically justifying indefinite storage of all customer data.
11. Your rights
Subject to the conditions in data protection law, you can:
- Ask for access to your personal data.
- Ask us to correct incorrect information.
- Request deletion or restriction of processing.
- Receive a portable copy of data where that right applies.
- Withdraw consent without affecting processing already carried out lawfully.
You may object to processing based on legitimate interests for reasons relating to your particular situation. You may object to direct marketing at any time.
Contact info@otido.de to exercise your rights. We normally respond within one month. If an extension is legally permitted and necessary, we will explain it.
You may also complain to a data protection authority, including the authority where you live or work.
Our local authority is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Germany