YOUR DATA

Privacy policy

Here we explain how personal data is processed in connection with our shop.

To be completed before the shop launches: This version still needs to be completed: service providers, retention periods and the actual configuration of cookies, analytics, marketing and payments are not yet finalised.

1. Data controller

The controller responsible for processing personal data in the shop is Timo Tobias Krause, Seedbunker, Wittekindstr. 52, 47051 Duisburg, Germany; email: info@seedbunker.de. Contact details are also provided in the Legal notice .

2. Hosting and technical operation

The shop operates using WordPress.com and WooCommerce. Accessing it may involve processing technical connection data, such as IP address, time, pages visited, browser information and error messages. These data support provision of the service, security and fault analysis.

WordPress.com and Jetpack belong to the Automattic group. The provider explains its processing of website visitor data in its privacy information for website visitors .

[Document the contractual hosting provider, data processing arrangements, specific retention periods and any safeguards for third-country transfers – to be added]

3. Orders and customer accounts

For an order, we process the contact, billing and delivery details entered, together with items, variants and order information. A customer account also involves processing login details and associated orders. These details are needed to initiate and perform the purchase contract (Article 6(1)(b) GDPR). An order cannot be processed without the necessary order details.

4. Contact and support

When you contact us, we process your message and the contact details you provide to handle your enquiry. Depending on the matter, this is based on pre-contractual or contractual measures or our interest in responding to enquiries. Voluntary information is used only for the stated purpose.

5. Payment processing and shipping

Data required for payment and delivery may be sent to the selected payment provider and the appointed carrier. Only details needed for the relevant process are shared.

[Add the payment providers and carriers actually used, including their role, privacy details and third-country processing – to be added]

6. Cookies and similar technologies

WooCommerce uses functional storage mechanisms, including for the basket and session. Examples include woocommerce_cart_hash, woocommerce_items_in_cart and wp_woocommerce_session_…. Depending on the function, these last for the session or, for the WooCommerce session cookie, generally up to two days. Actual usage depends on the shop configuration.

Access to your device that is not technically necessary generally requires consent. Processing personal data additionally requires an appropriate legal basis. A privacy policy does not replace effective consent management.

[Check and complete the actual cookie inventory, consent solution, providers, purposes and retention periods – to be added]

7. Analytics, marketing and newsletters

The system has Jetpack, Google Analytics for WooCommerce, integrations for Google, Meta, Pinterest and TikTok, and newsletter tools installed, among others. Installation alone does not establish that these services are configured or transmit data in the customer-facing area.

[Check the configuration and actual data flows; describe only services actually used, with purpose, legal basis, recipients, retention period and withdrawal options – to be added]

8. Retention and deletion

Contract and invoice documents are retained for as long as statutory retention obligations require. Other data are deleted once their purpose and any legitimate reasons for retention cease to apply. Specific periods for individual processing activities still need to be determined.

9. Your data protection rights

Under the statutory conditions, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests. Consent can be withdrawn for the future. You have the right to complain to a data protection supervisory authority.

For enquiries about your data protection rights, you can reach the controller at info@seedbunker.de.

10. Further information

[Complete details of a data protection officer where required, automated decisions/profiling according to actual usage, recipients and transfer safeguards – to be added]

Age confirmation and session storage

For the age 18+ access check, your browser's sessionStorage uses the key seedbunker-age-session-v1 to store only the status 'adult' or 'denied'. This allows the confirmation to be remembered during the current session and keeps shop access blocked following a refusal. The check collects neither your date of birth nor identity document details and does not transmit the stored status to an external service. It does not perform tracking.

The entry lasts for the current browser session; after the session ends, the check is displayed again. Browsers may also restore session storage when restoring a session. You can make your declaration again using 'Open age confirmation' in the footer. If your browser blocks session storage, no lasting confirmation is saved.

Device access serves only the expressly requested access function (Section 25(2), point 2 TDDDG). Where personal data are processed, this serves our legitimate interest in restricting shop use to adults (Article 6(1)(f) GDPR).

Prepared version dated 4 October 2026.