Datenschutzerklärung
Last updated: June 2026
1. Introduction & Our Commitment
Bruderfeld is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you visit www.bruderfeld.de or place an order with us. Bruderfeld acts as the data controller under the EU General Data Protection Regulation (GDPR). We will never sell, rent, or trade your personal data to third parties under any circumstances.
2. Information We Collect
We collect information you provide directly to us when placing an order, creating an account, or contacting our support team. This includes your name, email address, delivery address, phone number, and payment information. We also collect certain data automatically when you visit our website, including your IP address, browser type, device information, and pages visited. This data is collected through cookies and similar tracking technologies as described in Section 4.
3. How We Use Your Information
We use your personal data to process and fulfil your orders, send transactional emails such as order confirmations and dispatch notifications, and provide customer support. These activities are carried out on the basis of contractual necessity. Where you have given your consent, we may also send you marketing communications about new products, promotions, and updates — you may withdraw this consent at any time by clicking the unsubscribe link in any marketing email or by contacting us directly. We also use aggregated and anonymised data for analytical purposes to improve our website and services. This data cannot be used to identify you individually.
4. Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to operate and improve your experience. Strictly necessary cookies are essential for the website to function and cannot be disabled. Analytical and advertising cookies are used by our advertising partners — Meta, Google Ads, and TikTok — to help us measure the effectiveness of our campaigns and deliver relevant advertisements. On your first visit to our website, you will be presented with a cookie consent tool allowing you to accept or decline non-essential cookies. You may update your preferences at any time through your browser settings.
5. Order Fulfilment & Third-Party Services
To deliver our services, we work with a number of trusted third-party providers who act as data processors on our behalf.
Our store is built and hosted on Shopify, which provides our e-commerce infrastructure and checkout functionality. Shopify processes your data solely to support our store operations and is bound by strict data processing agreements.
Payments are processed securely by our payment partners, which include Shop Pay, Visa, Mastercard, American Express, Diners Club, Discover, Apple Pay, Google Pay, and PayPal Wallet. We do not store your full card details on our systems at any point.
To fulfil your order efficiently and ensure fast delivery, we operate fulfilment centres across multiple locations. Orders are routed to our fulfilment centres in the United States, Germany, and China based on stock availability and proximity to the delivery address — allowing us to dispatch your order from the closest available centre. All products, regardless of their dispatch origin, go through the same strict quality control process before being shipped. Every order is packaged using reinforced, tamper-evident materials to ensure it arrives in perfect condition.
Once dispatched, your name and delivery address are shared with our shipping carrier partners solely for the purpose of delivering your order.
We use advertising pixels and cookies operated by Meta, Google Ads, and TikTok to support our marketing activities. These partners may process limited data such as browsing behaviour and purchase events in accordance with your cookie preferences.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Order records are retained in accordance with applicable German and EU legal requirements, including tax and commercial retention obligations. Once your data is no longer required, it will be securely deleted or anonymised. If you submit a deletion request, we will fulfil it within 30 days, subject to any legal retention obligations that may require us to retain certain records for longer.
7. Your Rights Under the GDPR
As a data subject under the EU General Data Protection Regulation, you have the following rights: the right to access the personal data we hold about you; the right to request correction of inaccurate or incomplete data; the right to request erasure of your data where it is no longer necessary for the purposes it was collected; the right to restrict processing in certain circumstances; the right to data portability; the right to object to processing based on legitimate interests or for direct marketing purposes; and the right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us at kontakt@bruderfeld.de. We will acknowledge your request within 48 hours and provide a full response within 30 days.
8. International Data Transfers
As some of our third-party service providers operate outside the European Economic Area, your personal data may be transferred internationally. All such transfers are carried out in compliance with the GDPR and are covered by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission or adequacy decisions where applicable. These safeguards ensure your data receives the same level of protection regardless of where it is processed.
9. Data Security
We take the security of your personal data seriously. Our website uses SSL/TLS encryption to protect all data transmitted between your browser and our servers. Our store infrastructure is hosted on Shopify, which maintains industry-standard security certifications. In the event of a data breach that poses a risk to your rights and freedoms, we will handle it promptly and notify the relevant supervisory authority and affected individuals in accordance with our legal obligations under the GDPR.
10. Children's Privacy
Our website and services are not directed at children under the age of 16, in accordance with the GDPR threshold applicable in the EU. We do not knowingly collect personal data from anyone under this age. If you believe a minor has submitted personal data to us without appropriate consent, please contact us at kontakt@bruderfeld.de and we will take prompt steps to delete that information from our records.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The date at the top of this page will always reflect the most recent version. Your continued use of our website following any update constitutes your acceptance of the revised policy. We encourage you to review this page periodically.
12. Contact Us & Supervisory Authority
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us at kontakt@bruderfeld.de. We respond within 24 hours on business days.
You also have the right to lodge a complaint with the competent supervisory authority in your EU member state. For customers based in Germany, the relevant authority is the Federal Commissioner for Data Protection and Freedom of Information (BfDI), reachable at bfdi.bund.de.