1. Controller

Critch GmbH  (freitag boutique)
Waldstraße 14a
85579 Neubiberg – Munich
Germany
Phone: +49 0 89 380 79 948
Email: customerservice@freitag.boutique
Represented by the Managing Director: Michael Freitag
Commercial Register: Munich District Court – HRB 214507
VAT ID No.: DE296898420

2. General Information on Data Processing

We process personal data of our customers exclusively in accordance with the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and other applicable data protection laws.

“Personal data” means any information relating to an identified or identifiable natural person (e.g., name, address, email, telephone number, IP address).

3. Data Collection and Use for Contract Fulfillment

a) Orders via eBay

When you place an order through our eBay store, eBay processes your data (name, address, email, payment information) and provides it to us for the purpose of fulfilling the contract.
We process this data to handle your order, ship your goods, and answer any related inquiries (Art. 6(1)(b) GDPR).

b) Our Website – freitag.boutique

When you visit our website, certain technical data is automatically collected by the server:

  • IP address

  • Date and time of access

  • Browser and operating system used

  • Referring URL (referrer)

This data is used for system security and error analysis (Art. 6(1)(f) GDPR) and is deleted after 7 days.

4. Disclosure of Data to Third Parties

We only disclose personal data if necessary for contract fulfillment or if required by law (Art. 6(1)(b) or (c) GDPR).

Recipients may include:

  • Shipping service providers (e.g., DHL, DPD, UPS)

  • Payment service providers (e.g., PayPal, Klarna, Stripe, eBay Payments)

  • Tax advisors, accountants, or authorities within the scope of legal obligations

No transfer to third countries takes place unless required for payment processing (e.g., PayPal in the USA). In such cases, data is transferred based on appropriate safeguards such as Standard Contractual Clauses (Art. 46 GDPR).

5. Payment Service Providers

PayPal

If you pay via PayPal, your payment data is transmitted to PayPal Europe S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
The transfer is based on Art. 6(1)(b) GDPR.
Further details can be found in PayPal’s Privacy Policy.

Klarna / Credit Card / Apple Pay

If you choose these payment methods on eBay or our website, your data is processed via the respective providers (e.g., Klarna Bank AB, Sweden).
Processing is carried out for the purpose of contract execution (Art. 6(1)(b) GDPR).
Further information: https://www.klarna.com/de/datenschutz/

6. Shipping Service Providers

For delivery purposes, we share your data (name, address, and, if necessary, phone number for delivery coordination) with the commissioned shipping provider.
Legal basis: Art. 6(1)(b) GDPR.

7. Contact

When contacting us (e.g., via email, phone, or contact form), the data you provide is processed to handle your inquiry.
Legal basis: Art. 6(1)(b) GDPR (contract initiation) or Art. 6(1)(f) GDPR (legitimate interest in customer service).
Your data will be deleted once your inquiry has been resolved.

8. Use of Cookies (where applicable)

Our website uses cookies to ensure proper functionality and security.
Cookies are small text files stored on your device.
Legal basis: §25(2) TTDSG in conjunction with Art. 6(1)(f) GDPR.

You can disable cookies in your browser, but doing so may limit website functionality.

9. Analytics Tools (optional for websites)

If you use Google Analytics or similar tools, the following applies:
This website uses Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies. Data processing occurs only with your consent (Art. 6(1)(a) GDPR).
You can withdraw your consent at any time via the cookie banner.

If you do not use tracking, this section can be omitted.

10. Storage and Deletion of Data

We store personal data only as long as necessary for contract fulfillment or as legally required.
After statutory retention periods expire (e.g., 10 years for tax and commercial records), the data is deleted or anonymized.

11. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

  • Access to your stored data (Art. 15 GDPR)

  • Rectification of incorrect data (Art. 16 GDPR)

  • Erasure (“Right to be Forgotten”, Art. 17 GDPR)

  • Restriction of processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Objection to processing (Art. 21 GDPR)

To exercise your rights, simply send an email to:
📧 customerservice@freitag.boutique

12. Right to Lodge a Complaint with a Supervisory Authority

If you believe that your personal data is being processed unlawfully, you can contact a supervisory authority.

Responsible authority in Bavaria:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27, 91522 Ansbach
Phone: +49 0 981 180093-0
Email: poststelle@lda.bayern.de

13. Data Security

We employ technical and organizational measures to protect your data from manipulation, loss, or unauthorized access.
Our security measures are regularly reviewed and updated to meet current technological standards.

14. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy as needed to reflect legal or technical changes.
The latest version is always available on our website or our eBay seller page.

Last updated: October 13, 2025