# Privacy Policy ## 1. Controller The party responsible for the processing of personal data on this website is: Ernst Malcherzyk (US-Waren Malcherzyk) Norderneyer Straße 8 80809 Munich E-mail: info@uswarenshop.de Phone: [089/3513380](tel:+49893513380) ## 2. Executive Summary This website is designed to be intentionally lightweight: It does not set **any cookies** by default, does not embed **any third-party content** upon loading, and does not create **any user profiles**. We only process personal data insofar as it is technically necessary for the operation of the website or you provide us with data voluntarily—for example, by subscribing to our newsletter. ## 3. Technical Provision of the Website (Hosting) This website is operated and hosted by TinyCloud GmbH, Connollystr. 8, 80809 Munich, as a data processor within the meaning of Art. 28 GDPR. Hosting, server operation, delivery via a content delivery network, protection against automated access, sending of newsletter emails, and cookie-free reach measurement are carried out by sub-processors engaged by TinyCloud for this purpose. When you access the website, these services process your IP address and technical connection data as is technically necessary. Data is processed on servers within the European Union; some service providers are companies based in the USA that are certified under the EU-U.S. Data Privacy Framework and with whom standard contractual clauses of the European Commission are additionally in place. The current list of service providers used—including their name, purpose, processing location, and privacy policy—can be found at [www.tobysite.com/legal/data-processors](https://www.tobysite.com/legal/data-processors). The legal basis for this is our legitimate interest in providing the website in a secure and reliable manner (Art. 6 (1) (f) GDPR). Connection data generated during delivery is retained by the service providers only briefly for security and operational purposes. The map integrated into the website is also delivered entirely via this infrastructure; no connection to third-party mapping services takes place in the process. ## 4. Reach Statistics Without Personal Identification To understand how often specific pages are accessed, a simple access statistic is maintained. **No cookies are set, no statistics scripts are embedded in the page, and no IP addresses are stored.** Only the following data is recorded: page accessed, time, country of origin (approximated, derived from the network connection), referring website (if available), and technical browser information. Identifying individual users is neither intended nor possible; tracking across multiple websites does not take place. Insofar as personal data is processed in this context, the legal basis is our legitimate interest in the statistical evaluation of the usage of our website (Art. 6 (1) (f) GDPR). ## 5. Cookies This website does not set any cookies itself. Only if you activate embedded third-party content by clicking on it (see section "Embedded Content"), may the respective provider set its own cookies. You grant your consent for this directly by clicking—a separate cookie banner is therefore not required. ## 6. Newsletter To receive our newsletter, you must register with your email address. Registration is carried out using the double opt-in procedure: You will first receive a confirmation email and will only be added to the distribution list after clicking the confirmation link. The time of registration and confirmation, as well as the IP address used during confirmation, are logged to be able to verify the registration. The legal basis is your consent (Art. 6 (1) (a) GDPR). You may unsubscribe from the newsletter at any time via the unsubscribe link in any issue or by sending us a message; the legality of processing carried out until the withdrawal remains unaffected. For dispatch, an email service provider is used which TinyCloud has engaged as a sub-processor; processing takes place within the European Union. The specific service provider used is listed in the list linked above under "Technical Provision of the Website". ## 7. Embedded Content (Only After Your Click) This website may offer embedded content from third-party providers in individual places, e.g., videos from external providers. Such content is **not automatically loaded**. You will first see a placeholder; only when you click on "Show content" is a connection to the servers of the respective provider established. In the process, the provider receives your IP address and may potentially set its own cookies. Depending on the provider, data may be transferred to the USA; the providers mentioned are certified under the EU-U.S. Data Privacy Framework. The legal basis is your consent, which you grant by clicking (Art. 6 (1) (a) GDPR). No data is transmitted to the providers without clicking. Further details are governed by the privacy notices of the respective provider. ## 8. Your Rights You have the following rights towards us regarding the personal data concerning you: Right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR). You may withdraw any consent given at any time with effect for the future (Art. 7 (3) GDPR). **Right to object (Art. 21 GDPR):** To the extent that we process data based on legitimate interests, you may object to this processing at any time for reasons arising from your particular situation. To exercise your rights, an informal message to the contact details provided above under "Controller" is sufficient. Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example, the authority responsible for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach. ## 9. Retention Period Unless stated otherwise in this policy, we store personal data only for as long as is necessary for the respective purpose. Thereafter, it is deleted, unless statutory retention obligations (e.g., from commercial or tax law) require longer storage; in such cases, processing is restricted accordingly. ## 10. Changes to this Policy We update this privacy policy when the website or the legal situation changes. The version published here at any given time applies.