At www.pouchpaw.com, we take the protection of your personal data very seriously. This Privacy Policy explains how we collect, process, and protect your personal information when you visit our website or purchase our products, in accordance with the General Data Protection Regulation (GDPR / EU Regulation 2016/679) and the German Federal Data Protection Act (BDSG).
Information About the Data Controller The entity responsible for the processing of personal data (the “Data Controller”) as defined by Article 4, Paragraph 7 of the GDPR is:
Data Controller: www.pouchpaw.com
Official Email: portable@pouchpaw.com
Collection and Processing of Personal Data We collect and process personal data only when necessary to fulfill a contract with you, comply with legal obligations, or pursue legitimate business interests.
A. Information Provided When Placing an Order When you purchase products on our website, we collect the personal data required to fulfill the contract (Article 6, Paragraph 1(b) of the GDPR), including:
Full name
Billing and shipping addresses
Email address
Contact phone number
Order details and purchase history
B. Technical and Access Data When you visit www.pouchpaw.com, we automatically collect technical data—such as your IP address, browser type, operating system, timestamp, and referring URL—to ensure technical functionality, system stability, and website security (Article 6, Paragraph 1(f) of the GDPR).
Payment Processing via Stripe To process electronic payments securely and efficiently, we utilize payment infrastructure services provided by Stripe Payments Europe, Ltd. (located at 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; hereinafter referred to as “Stripe”).
Scope of Data Transfer: During the checkout process, relevant transaction details—including the payment amount, transaction ID, billing information, and order reference—are transmitted to Stripe to execute and complete the transaction (Article 6, Paragraph 1(b) of the GDPR).
Payment Security: Sensitive payment details (such as credit card numbers or bank account information) are processed directly by Stripe on their encrypted servers. We do not store or process sensitive payment card information on our own servers. Compliance: Data transmitted to Stripe is processed in accordance with GDPR standards and relevant European data transfer frameworks. For further details regarding Stripe’s data processing practices, please refer to Stripe’s official privacy policy.
Third-Party Service Providers In addition to using Stripe for payment processing, we engage carefully selected third-party service providers to assist us in operating our website and fulfilling customer orders, including:
Website hosting and server infrastructure providers located within the European Union.
Shipping and logistics partners for order fulfillment within Europe.
All service providers act as data processors, fulfilling contractual obligations in accordance with Article 28 of the GDPR, ensuring that your data is processed strictly according to our instructions and legal standards.
Data Retention Periods We process and store personal data only for as long as is necessary to achieve the purposes for which it was collected, or as required by German and European statutory retention rules.
Order and Contract Data: Personal data related to order processing and commercial contracts is retained for the duration of the contractual relationship.
Statutory Commercial and Tax Retention: Under the German Commercial Code (Handelsgesetzbuch – HGB § 257) and the Fiscal Code (Abgabenordnung – AO § 147), accounting records, order details, invoices, and commercial correspondence must be retained for up to 10 years (general business correspondence for 6 years).
General Inquiries: Personal data submitted via email or contact forms will be deleted once the relevant inquiry has been fully resolved, unless otherwise required by law.
Once the statutory retention period has expired, the corresponding data will be securely deleted or anonymized in accordance with standard practice.
Your Legal Rights Under the GDPR As a data subject residing within the European Union, you have the following statutory rights regarding your personal data under Articles 15–21 of the GDPR:
Right of Access (Article 15 GDPR): The right to request confirmation as to whether your data is being processed and to obtain a copy of such data.
Right to Rectification (Article 16 GDPR): The right to request the correction of inaccurate or incomplete personal data. Right to Erasure (Article 17 GDPR): You have the right to request the deletion of your personal data, subject to statutory retention obligations.
Right to Restriction of Processing (Article 18 GDPR): You have the right to request a restriction on the processing of your personal data under specific legal conditions.
Right to Data Portability (Article 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object (Article 21 GDPR): You have the right to object at any time to the processing of your personal data based on legitimate interests (Article 6(1)(f) GDPR).
To exercise any of the above rights, please contact us via email at portable@pouchpaw.com.
Furthermore, you have the legal right to lodge a complaint with the competent data protection supervisory authority in Germany or in the EU Member State where you reside.
Data Security Measures In accordance with Article 32 of the General Data Protection Regulation (GDPR), we implement appropriate technical and organizational measures (TOM) to protect personal data against unauthorized access, loss, alteration, or disclosure. Please note, however, that data transmission over the internet may have inherent vulnerabilities, and standard transmission channels cannot entirely eliminate all potential technical security risks.
Updates to This Privacy Policy We reserve the right to update this Privacy Policy periodically to reflect changes in legal requirements or operational practices. The latest version will always be published directly at www.pouchpaw.com.
