Privacy Policy

1. General Information

The protection of your personal data is important to us. We treat your personal data confidentially and process it in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

This Privacy Policy explains which personal data we process in connection with our website and online shop, for what purposes we process it, and on which legal basis the processing takes place.

Controller

Ganapatee Fairtrades UG (haftungsbeschränkt)
Danziger Straße 2
61440 Oberursel
Germany
Email: fairtrades@ganapatee.de

2. Data Collection on Our Website

2.1 Server Log Files

OurWhen you access our website, our hosting provider automatically processes information transmitted by your browser to the server. This may include, in particular:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing device
  • Date and time of the server request
  • IP address

This data is processed, insofar as necessary for the technical provision, security, and stability of our website, on the basis of Art. 6(1)(f) GDPR. Our legitimate interest is the secure and technically reliable operation of our website.

3. Cookies

Our website uses cookies. Some cookies are technically necessary, while others support specific functions of our website.

Technically Necessary Cookies

We use technically necessary cookies for the basic functions of our website. This includes, in particular, storing the language selected by you.

On our multilingual website, the pll_language cookie provided by Polylang is used for this purpose. It stores your selected language, for example “de”, so that the website can be displayed in the appropriate language when you visit other pages.

WooCommerce / Order Attribution

Our website also uses cookies from WooCommerce to collect information about the source and use of a session in connection with our online shop. These include cookies with names beginning with sbjs_* (Sourcebuster).

These cookies may store information such as the source of a visit, referrer information, campaign information, and session data. They are used to attribute and evaluate orders and to improve our online shop.

The Sourcebuster cookies used by WooCommerce are generally limited in duration and are not intended to track visitors across different sessions for advertising purposes.

Cookie Settings

Where consent is legally required for the use of certain cookies, we obtain your consent before using them. Technically necessary cookies may be used without consent where legally permitted.

You can manage your cookie preferences using the options provided on our website and withdraw any consent you have given at any time with effect for the future.

4. Contact Form & Email Contact

If you contact us via our contact form, by email, or by other means, we process the personal data you provide to the extent necessary to handle your inquiry.

Depending on the content of your inquiry, the processing is based on Art. 6(1)(b) GDPR if the inquiry relates to the preparation or performance of a contract, or on Art. 6(1)(f) GDPR based on our legitimate interest in handling contact inquiries.

We store the data only for as long as necessary to process your inquiry or for as long as statutory retention obligations apply.

5. Data Processing for Orders (WooCommerce)

When you place an order through our online shop, we process the personal data necessary to process your order. This may include, in particular:

  • First and last name
  • Billing and delivery address
  • Email address
  • Telephone number, if provided
  • Order details
  • Selected payment method
  • Payment information required for processing the payment

The processing is carried out for the performance of the contract on the basis of Art. 6(1)(b) GDPR.

Where statutory retention obligations apply, particularly under commercial and tax law, the data is stored on the basis of Art. 6(1)(c) GDPR.

5.1 What personal data do we process?

External payment service providers may be used to process payments. The data required for the respective payment is transmitted to the relevant payment service provider.

PayPal

If you select PayPal as your payment method, payment processing is carried out through PayPal. The personal data required for payment processing may be transmitted to PayPal.

The provider is:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg

The processing is carried out for the performance of the contract in accordance with Art. 6(1)(b) GDPR.

5.2 WooPayments / Card Payments

Where card payments are offered through WooPayments, payment processing is carried out through the payment service used for this purpose. The data required to process the payment is processed accordingly.

For users in the European Economic Area, the companies responsible for Europe within the WooCommerce/Automattic corporate group may be involved.

The processing is carried out for the performance of the contract in accordance with Art. 6(1)(b) GDPR.

5.2 Cryptocurrency Payments

Our website allows customers to pay for goods using cryptocurrencies. We use the DePay service for the technical processing of cryptocurrency payments.

When you make a cryptocurrency payment, information required for processing may include the public wallet address used and transaction information.

Public blockchain data, in particular transaction data on a public blockchain such as Ethereum, may generally be publicly accessible and permanently stored on the respective blockchain. We have no control over such storage.

We do not store your wallet’s private keys.

The processing of personal data in connection with payment processing is carried out, insofar as necessary for the performance of the purchase contract, on the basis of Art. 6(1)(b) GDPR.

6. Sharing of Personal Data

We only transmit personal data where this is necessary to fulfil our contractual and legal obligations or where another legal basis permits the transfer.

6.1 Shipping Providers

To deliver ordered goods, we may transmit the data required for delivery, in particular your name and delivery address, to the relevant shipping provider.

Depending on the shipping method, the following service providers may be used:

  • DHL
  • DPD
  • Hermes
  • FedEx
  • Other shipping providers where required for the respective delivery

The processing is carried out for the performance of the contract in accordance with Art. 6(1)(b) GDPR.

6.2 Tax & Accounting

As part of our statutory obligations, we process and store invoice, order, and payment data.

Where statutory retention obligations apply, the relevant data is retained for the period prescribed by law.

The processing is therefore based on Art. 6(1)(c) GDPR.

7. Hosting

Our website is hosted by Hostinger. Personal data generated when visiting and using our website may be processed as part of the hosting service.

The processing serves, in particular, the technical provision, security, and stability of our website.

Where personal data is processed in countries outside the European Union or the European Economic Area, this is only carried out in compliance with the applicable data protection requirements of the GDPR.

Where processing is necessary for the operation of our website, the legal basis is Art. 6(1)(f) GDPR.

8. Your Rights

Subject to the applicable legal requirements, you have in particular the following rights:

  • Right of access to your personal data (Art. 15 GDPR)
  • Right to rectification of inaccurate data (Art. 16 GDPR)
  • Right to erasure of your data (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to certain processing activities (Art. 21 GDPR)
  • Right to withdraw consent at any time with effect for the future

To exercise your rights, you may contact us at any time:

fairtrades@ganapatee.de

9. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

The competent supervisory authority may in particular be:

The Hessian Commissioner for Data Protection and Freedom of Information (HBDI)
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany

10. SSL/TLS Encryption

For security reasons, our website uses SSL/TLS encryption. This protects transmitted data during transmission.

You can recognize an encrypted connection by, among other things, “https://” in your browser’s address bar and the padlock symbol.

11. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy if our website, the services we use, or the legal requirements change.

The current version published on our website shall apply.

Last updated: October 2026