Briefheld

    Privacy Policy

    1) Information on the collection of personal data and contact details of the controller

    1.1 We are pleased that you are visiting our website and thank you for your interest. The following information explains how we handle your personal data when you use our website. Personal data is any data with which you could be personally identified.

    1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Sandra Temmel, Briefheld UG (haftungsbeschränkt), Katternbergerstraße 118, 42655 Solingen, Germany, email: projekt@briefheld.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

    1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string "https://" and the lock symbol in your browser bar.

    2) Data collection when visiting our website

    When using our website for information purposes only — i.e. if you do not register or otherwise transmit information to us — we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

    • Our visited website
    • Date and time at the moment of access
    • Amount of data sent in bytes
    • Source/reference from which you came to the page
    • Browser used
    • Operating system used
    • IP address used (in anonymised form where applicable)

    The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

    3) Cookies

    To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"); others remain on your device for longer and enable us to save page settings (so-called "persistent cookies"). In the latter case, you can find the storage period in the overview of your web browser's cookie settings.

    If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of the contract, in accordance with Art. 6(1)(a) GDPR in the case of consent given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

    You can configure your browser to inform you about the setting of cookies and to decide individually about their acceptance, or to exclude the acceptance of cookies for specific cases or in general. Please note that the functionality of our website may be limited if cookies are not accepted.

    4) Contacting us

    When contacting us (e.g. via contact form or email), personal data is processed solely for the purpose of handling and answering your request, and only to the extent required for this purpose. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter has been conclusively clarified and provided that no statutory retention obligations stand in the way.

    5) Data processing when opening a customer account

    In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent required if you provide it to us when opening a customer account. The data required for opening the account can be found in the input mask of the corresponding form on our website. You can delete your customer account at any time by sending a message to the controller's address above. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been completely processed, no statutory retention periods stand in the way, and we have no legitimate interest in continued storage.

    6) Use of customer data for direct marketing

    6.1 Subscription to our email newsletter

    If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of further data is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive the newsletter once you have expressly confirmed your consent to receive it by clicking a verification link sent to the email address you provided.

    By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. We store your IP address as registered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date.

    The data we collect when you sign up for the newsletter is used strictly for the intended purpose. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use it beyond this, which is permitted by law and about which we inform you in this declaration.

    6.2 Advertising by postal mail

    On the basis of our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, your postal address and — insofar as we have received this additional information from you in the context of the contractual relationship — your title, academic degree, your year of birth and your professional, industry or business designation in accordance with Art. 6(1)(f) GDPR and to use it for sending you interesting offers and information about our products by postal mail. You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the controller.

    7) Data processing for order processing

    7.1 Transmission of image files for order processing

    Upload function: On our website we offer customers the option of commissioning the personalisation of products by transmitting image files via an upload function. The submitted image motif is used as a template for the personalisation of the selected product. Via the upload form on the website, the customer can transmit one or more image files from the memory of the end device used directly to us via automated, encrypted data transmission.

    By email: Alternatively, we offer customers the option of commissioning the personalisation of products by transmitting image files by email. Via the email address provided on the website, the customer can transmit one or more image files from the memory of the end device used to us.

    We collect, store and use the transmitted files exclusively for the production of the personalised product within the meaning of the respective service description on our website. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all processing operations are carried out solely for the purpose of processing your online order in accordance with Art. 6(1)(b) GDPR. After final processing of the order, the transmitted image files will be automatically and completely deleted.

    7.2 Transfer for contract processing

    Insofar as this is necessary for contract processing for delivery and payment purposes, the personal data we collect will be transferred to the commissioned transport company and the commissioned credit institution in accordance with Art. 6(1)(b) GDPR. To process your order, we also work with the following service providers, who support us in whole or in part with the execution of contracts concluded.

    7.3 Transfer of personal data to shipping service providers

    Deutsche Post

    If delivery is carried out by Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany), we will pass on your email address in accordance with Art. 6(1)(a) GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent during the order process.

    DHL, FedEx, GLS, Hermes, TNT, UPS

    Corresponding rules apply to other shipping service providers. The transfer takes place only insofar as this is necessary for the delivery of the goods. Consent can be revoked at any time with effect for the future.

    7.4 Use of payment service providers

    Stripe: If you choose a payment method offered by the payment service provider Stripe, payment will be processed via Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. We pass on the information you provided as part of the ordering process together with the information about your order in accordance with Art. 6(1)(b) GDPR. Further information on Stripe's data protection can be found at: https://stripe.com/de/privacy#translation

    8) Online Marketing

    8.1 Facebook Pixel

    Within our online offer, the so-called "Facebook Pixel" of the social network Facebook, operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, is used. With the help of the Facebook Pixel, we can identify visitors to our online offer as a target group for the display of advertisements (so-called "Facebook Ads").

    The data processing associated with the use of the Facebook Pixel takes place exclusively on the basis of your express consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

    8.2 Google Marketing Platform & LinkedIn

    This website uses online marketing tools from Google (Google Ireland Limited) and LinkedIn (LinkedIn Ireland Unlimited Company). These tools use cookies to display advertisements relevant to users. All processing is carried out only on the basis of your express consent in accordance with Art. 6(1)(a) GDPR.

    9) Web analytics services

    Google (Universal) Analytics

    This website uses Google (Universal) Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Analytics uses so-called "cookies", which are text files stored on your end device and which enable an analysis of your use of the website.

    This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymisation of the IP address by truncation and excludes direct personal reference.

    All processing is only carried out if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future.

    10) Retargeting / Remarketing / Referral advertising

    Google Ads Remarketing

    This website uses the online advertising programme "Google Ads" and, within the framework of Google Ads, the conversion tracking of Google Ireland Limited. We use Google Ads to draw attention to our attractive offers with the help of advertising materials on external websites.

    The cookie for conversion tracking is set when a user clicks on an advertisement placed by Google Ads. All processing is only carried out if you have given us your express consent in accordance with Art. 6(1)(a) GDPR.

    11) Rights of the data subject

    11.1 Your rights

    Applicable data protection law grants you the following rights vis-à-vis the controller with regard to the processing of your personal data:

    • Right of access under Art. 15 GDPR
    • Right to rectification under Art. 16 GDPR
    • Right to erasure under Art. 17 GDPR
    • Right to restriction of processing under Art. 18 GDPR
    • Right to notification under Art. 19 GDPR
    • Right to data portability under Art. 20 GDPR
    • Right to withdraw consent given under Art. 7(3) GDPR
    • Right to lodge a complaint under Art. 77 GDPR

    11.2 Right to object

    If we process your personal data on the basis of our overriding legitimate interests as part of a balance of interests, you have the right at any time to object to this processing with effect for the future for reasons arising from your particular situation.

    If your personal data is processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising.

    12) Duration of storage of personal data

    The duration of storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and — where applicable — additionally on the basis of the respective statutory retention period (e.g. commercial and tax law retention periods).

    When personal data is processed on the basis of express consent in accordance with Art. 6(1)(a) GDPR, this data is stored until the data subject revokes their consent.

    If statutory retention periods exist for data processed in the context of legal or quasi-legal obligations on the basis of Art. 6(1)(b) GDPR, this data is routinely deleted after the retention periods have expired, provided it is no longer required for contract fulfilment or contract initiation and/or we have no legitimate interest in continued storage.

    As of: May 2026