Privacy Policy

1. Controller

The controller responsible for processing personal data on this website is the operator named in the Imprint. For any data-protection enquiry, write to privacy@amstags.com.

2. What we process and why

Order processing

When you place an order we process your name, shipping address, email address, ordered items, and order total. Legal basis: Art. 6 (1) (b) GDPR (performance of a contract). Retention: 10 years to satisfy tax and commercial-law obligations (Art. 6 (1) (c) GDPR).

Payment

Payments are processed by Stripe Payments Europe, Ltd. (Ireland). We never see or store full card numbers. Stripe receives the information necessary to process the transaction (amount, currency, billing details). See stripe.com/privacy.

Transactional email

We send order confirmations, shipping notifications, and replies to support requests to the address you provide at checkout. Legal basis: Art. 6 (1) (b) GDPR. Every email contains an unsubscribe link for non-essential messages.

Shopping cart

Your cart is stored in your browser's local storage so it survives reloads. It is a strictly necessary technical mechanism and not shared with third parties.

Server logs

Our hosting provider stores standard server logs (IP address, timestamp, requested URL, user agent) for security and troubleshooting. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in operating a secure service). Logs are deleted after 30 days at the latest.

3. Cookies and local storage

We do not use tracking cookies, advertising cookies, or third-party analytics. Only strictly necessary technical storage is used (cart contents, session state). No consent banner is shown because we set no cookies that require consent under § 25 TTDSG.

4. Processors and recipients

• Stripe — payment processing (Ireland / USA, EU SCCs in place).
• Hosting & database — operated within the European Union; data-processing agreement in place.
• Email delivery — transactional email provider; data-processing agreement in place.
• Shipping carrier — receives recipient name and address to deliver your order.

5. International transfers

Where a processor is located outside the EU/EEA (e.g. Stripe in the USA), transfers are protected by the EU Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR.

6. Your rights

Under the GDPR you have the right to:

• access your personal data (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased, subject to retention obligations (Art. 17);
• restrict processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interests (Art. 21);
• withdraw consent at any time, without retroactive effect.

To exercise any of these rights, contact privacy@amstags.com. You also have the right to lodge a complaint with your local data-protection authority (Art. 77 GDPR).

7. Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

8. Changes to this policy

We may update this policy to reflect changes to our service or legal requirements. The current version is always available on this page; the date at the top indicates the last update.