Controller
The controller under the GDPR is Jacob | Strathmann GbR, Prinzessinnenstr. 16, 10969 Berlin, Germany, email: info@since-berlin.com.
Hosting, website visits and server logs (Cloudflare)
This website is delivered via Cloudflare as a hosting/CDN service. When pages are accessed, server log data is processed as part of technical operations (e.g. IP address, timestamp, requested URL, user agent, volume transferred). Processing serves the provision, security and availability of the site (e.g. abuse protection, load balancing).
Legal basis: Article 6(1)(f) GDPR (legitimate interest in operating a secure and available website). Where a contract exists or is being concluded, Article 6(1)(b) GDPR may also apply.
See Cloudflare’s privacy documentation for further details on how Cloudflare processes data.
No cookies and no tracking by us
This website is static. We do not use cookies for advertising, analytics or tracking, and we do not operate Google’s analytics products, Meta/social advertising pixels, or an email marketing list on this site. Technical logging by the hosting provider may still occur independently (see “Hosting”).
Contact form and electronic withdrawal (Cloudflare Worker, Resend, Turnstile)
If you use our contact form or submit the electronic withdrawal flow on the “Declare withdrawal” page, the data you enter (e.g. name, email, message text, order details where applicable) is received by a Cloudflare Worker and forwarded to us by email for processing. Resend may be used to send those emails. To reduce automated abuse, Cloudflare Turnstile may be used; Cloudflare/the Turnstile service may process technical characteristics of the request (see Cloudflare/Turnstile documentation).
Legal basis: Article 6(1)(b) GDPR (pre-contractual steps/performance of a contract, including processing your withdrawal declaration) and, where applicable, Article 6(1)(f) GDPR (legitimate interest in abuse prevention).
Retention: Data is processed as long as necessary to handle your request or withdrawal and is then deleted unless statutory retention obligations require longer storage.
Order processing and payment (Stripe)
If you order and pay via our linked Stripe Payment Link checkout, Stripe processes the payment data required for the transaction. Available payment methods may include card and PayPal, depending on what is enabled in our Stripe account. We receive the information needed to fulfil the order (e.g. payment status, transaction reference, order details).
Legal basis: Article 6(1)(b) GDPR (performance of the purchase contract).
Shipping and disclosure to carriers (Packlink Pro)
We may use Packlink Pro to create shipping labels and organise delivery. The data required for delivery (name, address, and where applicable email/phone for tracking, depending on the carrier) is transmitted to the commissioned carrier.
Legal basis: Article 6(1)(b) GDPR (performance of the contract).
Recipients and processors
We disclose data to the service providers listed above only where necessary to operate the website, process your order or communicate with you (in particular Cloudflare, Stripe, Resend, Packlink and the carriers engaged via Packlink). Service providers are bound by contract under the GDPR where they act as processors.
Your rights
Where the legal requirements are met, you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to certain processing (Art. 21).
You also have the right to lodge a complaint with a supervisory authority. For our Berlin-based business, the Berlin Commissioner for Data Protection and Freedom of Information is particularly relevant.
No solely automated individual decision-making
We do not carry out solely automated decision-making, including profiling within the meaning of Article 22 GDPR, which produces legal effects concerning you or similarly significantly affects you.