Privacy Policy
1. Controller
The controller responsible for data processing on this website is:
Timeless Home Story
Romana Stanojevic
Jawlenskystr.4
65183 Wiesbaden
Germany
Email: info@timelesshomestory.com
2. General Information
We take the protection of your personal data very seriously. Your personal data is processed
confidentially and in accordance with applicable data protection laws, in particular the General Data
Protection Regulation (GDPR).
This Privacy Policy explains how and why we collect, use, and protect your personal data.
3. Data Collection and Processing
a) When Visiting the Website
When you access our website, information is automatically collected and stored in server log files:
- IP address
- Date and time of access
- Browser type and version
- Operating system
- Referrer URL
This data is processed to ensure website stability, security, and functionality.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
b) Hosting
This website is hosted by:
Raidboxes GmbH
Hafenstraße 32
48153 Münster
Germany
Raidboxes processes personal data on our behalf based on a data processing agreement pursuant to Art. 28 GDPR.
c) WooCommerce (Online Shop)
When you place an order, we collect and process the following personal data:
- First and last name
- Billing and shipping address
- Email address
- Phone number (optional)
- Order details
- Payment information
This data is required for:
- Order processing
- Delivery of goods
- Customer communication
- Compliance with legal obligations
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
d) Payment Providers
We use external payment service providers to process payments:
- Stripe – Stripe Payments Europe Ltd., Dublin, Ireland
- PayPal – PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
When you select a payment method, the necessary payment data is transmitted directly to the respective provider.
Data processing may involve transfers outside the EU/EEA using safeguards such as Standard Contractual Clauses.
e) Shipping Providers
We share necessary data with shipping providers (e.g. DHL, UPS):
- Name
- Delivery address
- Email address (if applicable)
- Phone number (if provided)
Legal basis: Art. 6(1)(b) GDPR
Shipping Notifications
Email may be shared for tracking updates (consent-based). You can withdraw consent anytime.
Delivery Coordination
Phone number may be shared to coordinate delivery (consent-based).
f) Cookies and Consent Management
We use cookies and a consent management tool (e.g. Complianz or Borlabs).
- Essential cookies
- Functional cookies
- Marketing & analytics cookies (only with consent)
Legal basis:
Art. 6(1)(a) GDPR (consent)
Art. 6(1)(f) GDPR (legitimate interest)
g) Newsletter
If you subscribe, your email is stored using double opt-in. You can unsubscribe anytime.
Legal basis: Art. 6(1)(a) GDPR
h) Contact
If you contact us, your data will be processed to handle your request.
Legal basis: Art. 6(1)(b) GDPR
4. Data Sharing
Your data is only shared if:
- Necessary for contract fulfillment
- Required by law
- You gave consent
5. International Data Transfers
Transfers outside EU/EEA are secured using safeguards like Standard Contractual Clauses (SCCs).
6. Data Retention
- Order data: up to 10 years
- Inquiries: until resolved
7. Your Rights
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object (Art. 21 GDPR)
8. Withdrawal of Consent
You may withdraw your consent at any time.
9. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority.
10. Data Security
We implement appropriate technical and organizational measures to protect your data.
11. Updates
This Privacy Policy was last updated on 14.04.2026.