1. Name and Contact Information of the Person/Entity Responsible for Data Processing

This Data Protection Information applies to data processing work performed by

Dirk Maass und Regina Maass OHG
represented by Mr Dirk Maass
Lessingstr. 27
22087 Hamburg
Germany
Phone +49 (0)40 18089289
Fax +49 (0)40 380178-68885
Email mail@en.color-style.com

2. Data Processing Overview

Principally, we process your personal data only to the extent absolutely necessary for the provision of a functional website and of the content as well as the services we offer. Your personal data will be processed only if you have given us your consent or if processing is permitted by the applicable statutory provisions. We do not use any automated decision-marking tools or profiling based on your data.

Below you will find a complete overview of the occasions on which what type of data is recorded/collected; by which processors this information is processed and archived for what period of time and for which purpose.

Occasion Data Processor and Location Duration Purpose
1. You get in touch with us via contact form or direct e-mail Name, e-mail address, subject, question or message, consent to data processing, IP address (Google reCaptcha only) Dirk Maass und Regina Maass OHG respectively at our hoster WebhostOne GmbH, Rheinvogtstraße 7, 79713 Bad Säckingen, Germany (according to instructions); Requests for training also: Kolibri Campus – Regina Maass, Lessingstr. 27, 22087 Hamburg, Germany; Google reCaptcha: Google Ireland Limited, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland 2 years, concerning Google reCaptcha see privacy policy of Google Ireland Limited Handling of your reason for contacting us and distinguishing whether input is made by a natural person or abusive by automated and automated processing.
2. Registration for creation of a user account First name, last name, company name, country, username, password, e-mail address, consent to data processing; only for commercial users: address of the website, document certifying commercial activity See 1. See 1., if an order is placed, 10 years in compliance with applicable statutory provisions (AO, GoBD, etc.) Opening of a user and customer account, acceptance and management of orders
3. Log-in, i.e. sign into your user account; password reminder or change password Username, password See 1. See 1., if an order is placed, 10 years in compliance with applicable statutory provisions (AO, GoBD, etc.) Acceptance and management of orders
4. Sending of an order (online or via phone) First name, last name, e-mail address, phone number, billing address, shipping address, consent to data processing, if applicable VAT ID no, notes or special wishes for order processing See 1. 10 years in compliance with applicable statutory provisions (AO, GoBD, etc.) Order processing
5. PayPal or Stripe payment Option PayPal payment: Order information, name and e-mail address of the PayPal account holder; Option direct debit to account: Order information, first name, last name, address, date of birth, phone number, e-mail address, account information; Option credit card payment: Order information, first name, last name, address, date of birth, phone number, e-mail address, credit card data Options Giropay, Sofortüberweisung, Bancontact, EPS, iDEAL, P24, Alipay, Multibanco: Order information, first name, last name, account number PayPal (Europe) Sàrl et Cie, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands in compliance with applicable statutory provisions Payment acceptance and approval
6. Payment via transfer Payment data, name Dirk Maass und Regina Maass OHG GLS Gemeinschaftsbank eG, Christstr. 9, 44789 Bochum, Germany 10 years in compliance with applicable statutory provisions (AO, GoBD, etc.) Payment acceptance and approval
7. Shipping Order information, complete invoice and shipping address, email address, phone number, instructions See 1., also: DATA2000 GmbH, Winsbergring 8, 22525 Hamburg, Germany (according to instructions) Additionally contingent upon selected shipping option: Deutsche Post AG DHL Paket GmbH / DHL International GmbH Federal Express Europe Inc. United Parcel Service Deutschland S.à r.l. & Co. OHG, if applicable customers broker and agencies 12 months, other companies in compliance with applicable statutory provisions (AO, GoBD, etc.) Order pulling, shipping, handling of returns and shipment tracking, in accordance with Art. 6 para. 1 lit. b DSGVO we pass on your data exclusively for the purpose of processing your online order. A transfer will only be made if this is actually necessary for the transaction.
8. Request for notification when product becomes available E-mail address, consent to data processing See 1. At a minimum until product is available, no more than 2 years Sending of notifications
9. Posting of a product rating Name, e-mail address, rating information See 1. See 1., additional data 5 years Verification and approval
10. Using our website Access data: location, page visited, date and time of retrieval, IP address* Defiant, 800 5th Ave Ste 4100, Seattle, WA 98104, United States (according to instructions)</ td> 90 days Burglary protection and hazard monitoring for our website (firewall) based on Art. 6 Sect. 1 lit. f GDPR (justified interest)
11. Use of our stores on Amazon.de, Amazon.co.uk, Amazon.fr, Amazon.es, Amazon.it, Amazon.com or Amazon.ca See 4., the data protection declarations of Amazon apply as well See 7., also easybill GmbH, Düsselstr. 21, 41564 Kaarst, Germany; the data protection declarations of Amazon apply as well 10 years in accordance with applicable statutory provisions (AO, GoBD, etc.), the data protection declarations of or Amazon apply as well Order processing, issuance of invoices, order pulling, shipping, handling of returns and shipment tracking; the data protection declarations of Amazon apply as well.
12. Financial accounting Complete order and payment details  AccountOne GmbH, Schiffbrücke 66, 24939 Flensburg 10 years in accordance with applicable statutory provisions (AO, GoBD, etc.) Financial accounting

*) The IP address is a sequence of numbers which gives every Internet access transaction an address.

We select and commission all of our third party service providers with great diligence. If they work based on our instructions, we enter into separate special contracts governing the contract processing of data, which govern the rights and obligations in concise detail, with these service providers.

3. Cookies

For the proper use of our website, up to six cookies, i. Files stored in your browser:

The first two cookies contain information about the shopping cart and help our shop system to recognize changes in the shopping cart. The third cookie contains a unique key to associate shopping cart data with the associated customer. These cookies contain no personal information.

Our website uses the security plugin Wordfence to protect against hackers. Providers is DEFIANT, 800 5th Ave Ste 4100, Seattle, WA 98104, United States. An order processing contract has been completed. Wordfence currently has up to three cookies:

The fourth cookie is used by the firewall to perform a proficiency check on the current user before loading WordPress. This cookie is only set for users who log in to WordPress. With this cookie, the firewall detects logged-in users and gives them more access.

The fifth cookie is used to notify our administrator when an administrator logs in from a new device or location. It helps us to know if an admin login has taken place from a new device or location.

The sixth cookie only offers our landlocked visitors the opportunity to bypass country blocking by accessing a hidden URL. With this cookie can be understood, who may bypass the blocking of the country.

For more information on how to handle user information, please see the DEFIANT privacy policy at https://www.wordfence.com/privacy-policy/

4. Your Rights

(1) With regard to the abovementioned personal data, you are entitled to the following from us:

  • Information (Art. 15 GDPR) about any data of yours we process. In particular, you may ask for information on the purposes of processing, the categories of personal data, the categories of recipients to whom we have disclosed or will disclose your data, the planned archiving period, the existence of the right to have your data corrected, deleted, restrict its processing or to object to its use, the existence of the right to file grievances, the source of your data if we did not collect it in-house as well as the existence of automated decision-making tools including profiling and, if applicable, meaningful detailed information about the former.
  • Correction (Art. 16 GDPR) of incorrect or completion of any of your data stored by us.
  • Deletion (Art. 17 GDPR). You have the right to demand that we delete any of your data stored by us unless such data is required for processing, exercising of the right to freedom of speech and information, for the fulfillment of a legal mandate, for reasons of public interest or the claiming, exercising or defense of legal claims.
  • Restricted processing (Art. 18 GDPR). You have the right to demand that we restrict the processing of your data, if you deny the correctness of the data, its processing is illegal, and you refuse to have it deleted and we no longer need the data, while you need it to claim, exercise or defend legal entitlements or you have objected to its processing pursuant to Art. 21 GDPR.
  • Data transferability (Art. 20 GDPR). You are entitled to receive data you have made available to us in a structured, standard and machine-readable format. You also have the right to demand its transfer to a different responsible party.
  • Objection to processing (Art. 7 Sect. 3 GDPR). This means that you may revoke any consent you have given us at one time at any time. As a consequence, we will no longer be able to process data based on your former consent in the future.
  • File a grievance (Art. 77 GDPR) with a regulatory agency. As a rule, you may contact the regulatory agency at your usual place of residency or work or at our corporate domicile.

(2) If we are processing your personal data based on justified interests pursuant to Art. 6 Sect. 1 S. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, if there are grounds for this arising from your special situation or if the objection targets direct advertising. In the latter case, you have a general right to object, which will be implemented by us without you having to provide information about a special situation.

(3) To exercise your rights please contact

Dirk Maass und Regina Maass OHG
Lessingstr. 27
22087 Hamburg
Germany
Phone +49 (0)40 18089289
Fax +49 (0)40 380178-68885
Email mail@en.color-style.com

5. Data Security

We are deploying all suitable technical and organizational security precautions to protect your data against accidental or intentional manipulations, partial or complete loss, destruction or unauthorized third party access. We optimize our security precautions continually in accordance with the state-of-the-art.

6. Changes to Our Data Protection Declaration

To warrant that our Data Protection Declaration is always on par with the latest statutory provisions, we reserve the right to make changes at any time. This shall also apply in the event that the Data Protection Declaration must be updated because of new or revised services, such as new additions to our service portfolio. In such cases, the new Data Protection Declaration shall apply to you the next time you visit our website.

Source in excerpts: Attorney Andreas Gerstel (http://www.anwaltblog24.de/); version from 15-04-2026