Privacy Policy
1. Controller
The controller responsible for the processing of personal data on this website is:
Alice Bogen-Weiss
Karl-Ludwig-Str. 4
69117 Heidelberg
Germany
Email: mail@thepeacefulhangman.com
2. General information
We take the protection of your personal data seriously. We treat your personal data confidentially and process it in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).
This Privacy Policy explains what personal data we process when you use our website, why we process it, and what rights you have in relation to your personal data.
3. Visiting our website
When you visit our website, certain technical information may be processed by our web server or hosting provider.
This may include:
- your IP address;
- date and time of access;
- pages and files accessed;
- amount of data transferred;
- browser type and version;
- operating system;
- referring URL; and
- information about whether the requested content was successfully accessed.
This data is processed in order to provide the website, maintain its security and stability, and detect or prevent misuse.
The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest is the secure and technically reliable operation of our website.
The data will be deleted when it is no longer required for these purposes, unless statutory retention obligations apply.
4. Hosting
Our website is hosted by WEISS IT.
When you visit our website, the hosting provider may process personal data, in particular technical access data and IP addresses.
This processing is necessary for the technical provision and security of the website.
Where required, we have concluded a data processing agreement with our hosting provider pursuant to Article 28 GDPR.
The legal basis for this processing is Article 6(1)(f) GDPR.
5. Online shop and orders
If you place an order through our online shop, we process the personal data necessary to process and fulfil your order.
This may include:
- first and last name;
- billing and delivery address;
- email address;
- payment information;
- order details; and
- telephone number, where provided or required for delivery.
We process this information to process your order, arrange delivery, communicate with you about your order, and fulfil our contractual obligations.
The legal basis for this processing is Article 6(1)(b) GDPR.
We may also be legally required to retain certain business and accounting records. Where this applies, the processing is based on Article 6(1)(c) GDPR.
6. Payment processing
We use third-party payment providers to process payments.
Depending on the payment method you choose, your personal data may be transmitted to the relevant payment provider.
The payment providers we use are:
Paypal and Klarna
The respective payment provider may process your personal data in accordance with its own privacy policy.
The processing is carried out for the purpose of fulfilling the purchase contract and is based on Article 6(1)(b) GDPR.
7. Shipping and delivery
In order to fulfil your order, we provide the shipping provider with the information necessary to deliver your purchase.
This may include your name and delivery address.
Our shipping providers may include:
DHL
The legal basis for this processing is Article 6(1)(b) GDPR.
8. Contacting us
If you contact us by email or through another contact method provided on our website, we process the personal data you provide, such as your name, email address and the contents of your message.
We use this information to process and respond to your enquiry.
If your enquiry relates to the initiation or performance of a contract, the legal basis is Article 6(1)(b) GDPR. In other cases, the processing is based on our legitimate interest in responding to enquiries pursuant to Article 6(1)(f) GDPR.
We delete the data when your enquiry has been conclusively dealt with, unless statutory retention obligations apply.
9. Cookies and similar technologies
Our website may use cookies and similar technologies that are necessary for the technical operation of the website.
Technically necessary cookies may, for example, be required to operate the online shop, maintain your shopping cart or provide security functions.
Where such technologies are strictly necessary to provide a service you have explicitly requested, your consent is generally not required.
10. Social media
Our website may contain links to our social media profiles, including Instagram.
When you simply visit our website, these links do not generally transmit data to the respective social media provider. Data will generally only be transmitted once you click the relevant link and leave our website.
The processing of your personal data on the respective social media platform is governed by the privacy policy of that provider.
Our Instagram profile is operated by:
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland
Further information can be found in Meta’s privacy policy.
11. Your rights
Under the GDPR, you have the following rights, subject to the applicable legal requirements:
Right of access
You have the right to request information about whether we process personal data concerning you and, if so, which data we process.
Right to rectification
You have the right to request the correction of inaccurate personal data and the completion of incomplete personal data.
Right to erasure
Under certain circumstances, you have the right to request the deletion of your personal data.
Right to restriction of processing
Under certain circumstances, you have the right to request that the processing of your personal data be restricted.
Right to data portability
Under certain circumstances, you have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format.
Right to object
You have the right to object, on grounds relating to your particular situation, to the processing of your personal data where the legal requirements for such an objection are met.
Right to withdraw consent
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
12. Recipients of personal data
In the course of operating our website and online shop, personal data may be disclosed to the following categories of recipients where necessary:
- hosting providers;
- e-commerce and shop providers;
- payment service providers;
- shipping providers;
- IT and technical service providers;
- tax advisers and accounting service providers, where applicable; and
- public authorities where we are legally required to provide information.
Personal data will not otherwise be disclosed unless there is a legal basis for doing so.
13. Transfers to third countries
Where personal data is transferred to countries outside the European Union or the European Economic Area in connection with the use of certain services, such transfers will only take place in accordance with the requirements of Articles 44 et seq. GDPR.
Further information about any transfers to third countries can be found in the relevant sections of this Privacy Policy.
14. Data retention
We generally retain personal data only for as long as necessary for the purposes for which it was collected.
Statutory retention periods may also apply, particularly under tax and commercial law. Where such obligations apply, the relevant data will be retained for the legally required period and subsequently deleted.
17. Changes to this Privacy Policy
We may update this Privacy Policy where necessary due to changes to our website, the services we offer, applicable legal requirements or technical developments.
The current version published on this website shall apply.
Last updated: 03.10.2026