Free shipping from 150 € · 5-year warranty
Damastchef - Premium Damastmesser

Rechtliches

Privacy & cookies

Last updated: 4 November 2026

1. Controller

Trade & Content, owner Marcel Wery
Zum Sülzufer 1
51491 Overath, Germany
Email: kontakt@damastchef.de
Phone: +49 155 11953282

You will find further details in the legal notice.

2. The key points in brief

We only process personal data where this is necessary to run this shop, process your order, meet legal obligations or with your consent. Statistics and marketing services only load once you agree in the cookie banner. You can change your choice at any time via “Cookie settings” in the footer.

  • Consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG) – e.g. statistics and marketing services, newsletter, chat.
  • Contract and pre-contractual measures (Art. 6(1)(b) GDPR) – order, payment, shipping, customer account, enquiries.
  • Legal obligation (Art. 6(1)(c) GDPR) – in particular retention obligations under tax and commercial law.
  • Legitimate interest (Art. 6(1)(f) GDPR) – secure and stable operation of the shop, protection against misuse, customer communication.

4. Hosting and technical infrastructure

Hosting

The shop is hosted by Vercel. Whenever a page is accessed, Vercel processes technically necessary data such as IP address, date and time, the address accessed, browser and operating system (server log files) in order to deliver the page and protect it from attacks. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with Vercel.

Provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Privacy policy: https://vercel.com/legal/privacy-policy

Data may be transferred to the USA in the process. The transfer is based on the EU-US Data Privacy Framework, insofar as the provider is certified under it, and otherwise on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).

Database

We store order, customer and shop data in a Neon database with servers located in the EU (Frankfurt am Main). The legal basis is Art. 6(1)(b) and (f) GDPR; a data processing agreement is in place.

Provider: Neon, Inc., San Francisco, CA, USA. Privacy policy: https://neon.tech/privacy-policy

Files and images

We store invoices, images and other files with Cloudflare R2. A data processing agreement is in place.

Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Privacy policy: https://www.cloudflare.com/de-de/privacypolicy/

Data may be transferred to the USA in the process. The transfer is based on the EU-US Data Privacy Framework, insofar as the provider is certified under it, and otherwise on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).

5. Cookies and similar technologies

We use cookies and comparable storage in the browser (e.g. Local Storage). Our cookie banner distinguishes three categories:

  • Necessary: basket, checkout, customer account and saving your cookie choice. The shop does not work without them (Section 25(2) no. 2 TDDDG, Art. 6(1)(b) and (f) GDPR).
  • Statistics: Google Analytics and Microsoft Clarity – only with your consent.
  • Marketing: measuring the success of our Google Ads advertising – only with your consent.

You can withdraw or change your consent at any time with effect for the future via “Cookie settings” in the footer.

6. Our own visitor statistics

To see how many visitors are in the shop right now and which pages are used, we record a random session ID (in your browser's session storage, deleted when you close the tab), the pages viewed, the contents of the basket and the approximate location (city and country) that our hosting provider derives from the IP address. We do not store the IP address itself. The legal basis is our legitimate interest in improving the shop (Art. 6(1)(f) GDPR).

7. Orders and customer account

For your order we process the details you enter at checkout: name, delivery and billing address, email address, phone number if provided, the items ordered and the payment method. We need this data to perform the contract (Art. 6(1)(b) GDPR). We keep invoices and accounting records for eight years in accordance with Section 147 AO and Section 257 HGB (German law) (Art. 6(1)(c) GDPR).

If you create a customer account, we also store your login details, order history and loyalty points until you delete the account or ask us to delete it – subject to statutory retention obligations.

8. Payment

Payments are processed by Stripe. The data required for payment (e.g. name, email address, invoice amount and payment details) is transmitted directly to Stripe; card details never reach our server. The legal basis is Art. 6(1)(b) GDPR.

Provider: Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Privacy policy: https://stripe.com/de/privacy

Depending on the payment method chosen, the following providers also process your data under their own responsibility:

  • Klarna: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden – privacy policy. For invoice and instalment purchases, Klarna may carry out identity and credit checks.
  • PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg – privacy policy.
  • Apple Pay: Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland – privacy policy.
  • Google Pay: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – privacy policy.

With prepayment, you transfer the amount to our bank account; we then receive the details from your transfer.

9. Shipping

We ship with DHL. For this purpose we pass your name and delivery address to DHL (Art. 6(1)(b) GDPR). So that DHL can inform you about the delivery and arrange a delivery date, we also pass on your email address (Art. 6(1)(f) GDPR). You can object to this at any time – a short message to us is enough.

Provider: Deutsche Post AG / DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany. Privacy policy: https://www.dhl.de/de/toolbar/footer/datenschutz.html

10. Emails

We send order confirmations, invoices, shipping information, newsletters and other emails from the shop via Resend. Our mailboxes (e.g. kontakt@damastchef.de) are hosted by IONOS. Data processing agreements are in place with both providers.

Provider: Resend, Inc., San Francisco, CA, USA. Privacy policy: https://resend.com/legal/privacy-policy

Data may be transferred to the USA in the process. The transfer is based on the EU-US Data Privacy Framework, insofar as the provider is certified under it, and otherwise on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).

Provider: IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. Privacy policy: https://www.ionos.de/terms-gtc/datenschutzerklaerung/

11. Newsletter

For the newsletter we need your email address and your consent (Art. 6(1)(a) GDPR). After signing up you receive an email in which you confirm your subscription (double opt-in). We store the time of sign-up and confirmation as proof. You can unsubscribe at any time via the link in every issue.

12. Contact, chat and reviews

Contact form and email

When you write to us, we process your details in order to answer your enquiry (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed and no retention obligation applies.

Live chat

The tawk.to chat only loads when you click “Start chat” (Art. 6(1)(a) GDPR). tawk.to then processes your IP address, device information and the content of the chat.

Provider: tawk.to inc., 187 East Warm Springs Rd, SB298, Las Vegas, NV 89119, USA. Privacy policy: https://www.tawk.to/privacy-policy/

Data may be transferred to the USA in the process. The transfer is based on the EU-US Data Privacy Framework, insofar as the provider is certified under it, and otherwise on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).

Reviews

After an order we ask you for a review by email. If you leave a review, we publish it with the name you provided, your text, the stars and any photos. You can object to the review request at any time and ask us to delete your review.

Google Tag Manager and Google Analytics

With your consent we use Google Analytics 4 via Google Tag Manager to understand how the shop is used (e.g. pages viewed, time spent, device, approximate location, purchases). IP addresses are truncated by Google within the EU. Without consent we use Google's consent mode, in which no analytics cookies are set.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy policy: https://policies.google.com/privacy

Data may be transferred to the USA in the process. The transfer is based on the EU-US Data Privacy Framework, insofar as the provider is certified under it, and otherwise on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).

Google Ads and conversion tracking

With your consent to “Marketing”, we measure whether an order came about through one of our Google ads and can show you relevant ads. If you come to us via an ad, we store the ad's click ID in your browser for up to 90 days and send it to Google Ads together with the order value and order time when you place an order. Without your consent we do not store the ID and send nothing; Google then only passes it on within our shop in the page addresses, without setting cookies. The provider is also Google Ireland Limited.

Microsoft Clarity

With your consent to “Statistics”, we use Microsoft Clarity to analyse mouse movements, clicks and scrolling and make the shop easier to understand. Entries at checkout and in the customer account are completely masked.

Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Privacy policy: https://privacy.microsoft.com/de-de/privacystatement

Data may be transferred to the USA in the process. The transfer is based on the EU-US Data Privacy Framework, insofar as the provider is certified under it, and otherwise on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).

14. Retention period

We delete personal data as soon as the purpose no longer applies and no statutory retention obligations prevent this. Invoices and accounting records are kept for eight years, books and annual accounts for ten years and business correspondence for six years.

15. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future. To do so, write to us at kontakt@damastchef.de.

You can also lodge a complaint with a data protection supervisory authority, for example the authority responsible for us, the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, or the authority in your own country.

16. Changes

We update this privacy policy whenever the shop or the services used change. The version published here applies.