PRIVACY POLICY
- Data Controller
The entity responsible for the collection, processing, and use of your personal data under this policy is:
Dr. Asum Rundtische Beteiligungs und Verwaltungs GmbH
Brand Name: feasttonecloth
Address: Königlicher Wald 5, 33142, Büren
Phone: +49 2951 939890
Email: tablecloth@feasttonecloth.com
HRB: Amtsgericht Paderborn HRB 7408 - Scope of Data Processing
We collect and process personal information only to the extent necessary to provide a functional website and to fulfil our contractual obligations regarding the sale and delivery of our tablecloth products. This includes:
Contact Information: Name, postal address, and email address.
Transaction Data: Details regarding the items purchased and order history.
Technical Data: IP addresses and browser metadata collected for the operational stability of the website. - Payment Processing via Stripe
To facilitate secure commercial transactions, feasttonecloth utilises the services of Stripe, a third-party payment infrastructure provider. When you proceed to checkout, your payment details (such as credit card numbers or banking information) are provided directly to Stripe.
Dr. Asum Rundtische Beteiligungs und Verwaltungs GmbH does not store or have access to your full payment credentials. Stripe processes this data in accordance with its own privacy standards and international financial regulations. The legal basis for this transfer is the necessity of fulfilling the purchase agreement between the consumer and the company. - Data Retention Periods
We retain personal data only for as long as is necessary to satisfy the purposes for which it was collected, or to comply with statutory legal requirements.
Commercial and Tax Records: In accordance with the German Commercial Code (HGB) and the Fiscal Code (AO), certain transaction data and invoices are retained for a period of ten (10) years.
Contractual Correspondence: General enquiries and order-related communication are typically retained for six (6) years following the end of the year in which the contract was fulfilled, as required by legal limitation periods.
Operational Logs: Technical data used for website stability is deleted automatically after a short duration, usually within thirty (30) days, unless a security incident requires further investigation. - Data Subject Rights
Under the GDPR and relevant international laws, you possess the following rights regarding your information:
The right to access and receive a copy of your stored data.
The right to request the rectification of inaccurate information.
The right to request the erasure of data, provided no statutory retention obligations apply.
The right to object to or restrict processing under certain conditions.
To exercise these rights, please contact our administrative team via the email address provided in Section 1. - Data Security
We implement rigorous organisational and administrative measures intended to protect your personal information from unauthorised access or loss. While we maintain high standards of digital oversight, it is recognised within the industry that no method of electronic transmission or storage is entirely exempt from risk. We remain committed to reviewing our protocols regularly to maintain the integrity of our systems. - International Transfers
As we serve clients in the United States and the European Union, data may be processed in jurisdictions outside of your country of residence. We ensure that any such transfers comply with approved legal frameworks, such as Standard Contractual Clauses, to maintain a consistent level of data protection.