Last updated: 26 August 2026

1. Controller

Diethard Sohn, Leierwiesen 11, 70180 Stuttgart, Germany
Email: contact@diethard-sohn.com

2. Hosting and server logs

This website is hosted by IONOS. When you access it, technically necessary log data may be processed, including IP address, date and time, requested address, amount of data transferred, referrer, browser and operating system. Processing serves the secure and stable provision of the website and is based on Article 6(1)(f) GDPR. A data processing agreement is in place with the hosting provider where required.

3. Technically necessary cookies

WordPress and WooCommerce use technically necessary cookies or comparable storage technologies for the cart, checkout, login and security functions. We do not use these data for cross-site advertising. When PayPal is selected or used, PayPal may use additional cookies and similar technologies under its own privacy policy.

4. Orders and customer accounts

For an order we process, in particular, your name, billing and delivery address, email address, products ordered, payment method, order status and communications required to perform the contract. The legal basis is Article 6(1)(b) GDPR; legally required retention is based on Article 6(1)(c) GDPR. Data relevant under commercial and tax law are retained for the applicable statutory periods, generally six to ten years.

5. Payments

For bank transfers, the banks involved process the payment data required for the transaction. If you choose PayPal, the payment data required are transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. PayPal acts as an independent controller and may process data outside the European Economic Area in accordance with its privacy policy. The legal basis is Article 6(1)(b) GDPR.

6. Email, contact and appointments

If you contact us by email or form, or request an appointment, we process your details to handle the enquiry. The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual matters and otherwise Article 6(1)(f) GDPR. Messages are deleted when no longer required unless statutory retention duties apply.

7. Newsletter

We send newsletters only with consent. The email address, time of registration and technical evidence of consent may be processed for registration and delivery. The legal basis is Article 6(1)(a) GDPR. Consent may be withdrawn at any time using the unsubscribe link or by email, without affecting the lawfulness of processing before withdrawal.

8. Audience measurement

We use a privacy-conscious, locally integrated statistics tool to understand how the website is used. Pages viewed, referrer, device and browser type and shortened or anonymised technical identifiers may be processed. We do not create cross-site profiles. The legal basis is our legitimate interest in improving the website under Article 6(1)(f) GDPR.

9. Security, backups and recipients

We process necessary technical data for security, troubleshooting and backups. Service providers receive data only where required for hosting, email delivery, payment processing, shipping or technical support and where a legal basis exists. Data processing agreements are used where providers act as processors.

10. External links and Instagram

External content is not loaded automatically unless expressly indicated. If you click an external link, such as a link to Instagram, you leave this website and the respective provider is responsible for subsequent processing.

11. Your rights

Subject to the statutory requirements, you have the right of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time and object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. You also have the right to lodge a complaint with a data protection supervisory authority, in particular the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

12. Updates

We update this Privacy Policy when functions, service providers or legal requirements change.