Privacy Policy

This privacy policy explains what personal data we collect when you use this website, how we process it, and what rights you have. We take the protection of your personal data seriously and comply with the EU General Data Protection Regulation (GDPR / DSGVO) and the German Telemediengesetz (TMG).

1. Controller

Roger Bischoff
Sackgasse 5
97337 Dettelbach, Germany
Email: info@roger-bischoff.com
Phone: +49 9324 90126

2. Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you visit this website, Hetzner’s servers automatically log the following data (server log files):

  • IP address of the requesting device
  • Date and time of the request
  • URL and HTTP method of the request
  • Browser type and operating system
  • Referrer URL
  • HTTP status code and data volume transferred

This data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of the website). Log files are stored for up to 14 days and then deleted. All data remains on servers located in Germany.

3. SSL/TLS Encryption

This site uses SSL/TLS encryption (recognisable by “https://” in the address bar). All data transmitted between your browser and our server is encrypted and cannot be read by third parties.

4. Cookies

This website uses only technically necessary cookies. No tracking, analytics, or advertising cookies are set.

CookiePurposeDuration
OCSESSIDSession management (shopping cart, login state)Browser session
currencyStores selected currency preferenceBrowser session
languageStores selected language preferenceBrowser session

These cookies are essential for the shop to function and are set on the basis of Art. 6(1)(f) GDPR. They do not contain personal data and are deleted when you close your browser. No consent is required for technically necessary cookies under § 25(2) TDDDG.

5. Customer Account and Orders

When you create an account or place an order, we collect the following data:

  • Name (first and last)
  • Email address
  • Postal address (billing and shipping)
  • Telephone number (optional)
  • Order history and selected products

Legal basis: Art. 6(1)(b) GDPR — processing is necessary for the performance of a contract (your purchase) or to take pre-contractual steps at your request.

Retention: Order data is retained for the legally required period of 10 years (under § 147 AO and § 257 HGB, German fiscal record-keeping obligations). Account data is deleted upon request, provided no legal retention obligations apply.

6. Payment Processing

a) Bank Transfer (SEPA Überweisung)

If you choose bank transfer, you will see our bank details (IBAN, BIC) on the order confirmation page. The transfer is initiated by you through your own bank. We do not collect or process your bank account data.

b) PayPal

If you choose PayPal, you will be redirected to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal processes your payment data (name, email, payment details) under its own privacy policy.

Legal basis: Art. 6(1)(b) GDPR (contract performance).
PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

7. No Analytics or Tracking

This website does not use any analytics services (such as Google Analytics), tracking pixels, remarketing tools, or social media plugins. No data is shared with advertising networks. Your browsing behaviour is not tracked or profiled.

8. No External Resources

All fonts, scripts, and stylesheets are hosted locally on our server. No external services are loaded when you visit this website, and no data is transmitted to third-party servers during normal browsing.

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR) — You may request information about what data we store about you.
  • Right to rectification (Art. 16 GDPR) — You may request correction of inaccurate data.
  • Right to erasure (Art. 17 GDPR) — You may request deletion of your data, subject to legal retention obligations.
  • Right to restriction of processing (Art. 18 GDPR) — You may request that processing be limited under certain conditions.
  • Right to data portability (Art. 20 GDPR) — You may request your data in a machine-readable format.
  • Right to object (Art. 21 GDPR) — You may object to processing based on legitimate interest at any time.

To exercise any of these rights, contact us at info@roger-bischoff.com.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority for Bavaria is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
https://www.lda.bayern.de

11. Changes to This Policy

We may update this privacy policy to reflect changes in our data processing or legal requirements. The current version is always available on this page.

Last updated: 10 February 2026