This website (wintersspells.com) is operated by Winter's Spells, Kolonnenstr. 8, 10827 Berlin, Germany (Commercial Register: HRB 197142 B, VAT ID: DE319818344, Email: [email protected]). We process personal data strictly in compliance with the EU General Data Protection Regulation (GDPR / DSGVO) and the German Federal Data Protection Act (BDSG).

Data Processing & Legal Bases (Art. 6 GDPR)

• Order & Commission Fulfilment (Art. 6(1)(b) GDPR): Name, email, billing/shipping address and custom order details, processed exclusively to fulfil your purchase or bespoke request and comply with statutory tax retention rules (Art. 6(1)(c) GDPR).
• Direct Inquiries (Art. 6(1)(b) & (f) GDPR): Messages sent via our contact form or email are used solely to answer your inquiry or shipping request.
• Essential Cart Storage & Server Logs (Art. 6(1)(f) GDPR): Shopping cart contents are stored locally in your browser (localStorage) and essential session cookies maintain your chosen language (en_GB, it_IT, de_DE).

Payment Processors & Shipping Partners

Payments are processed securely via encrypted connections by Shoppi Pay / Stripe or PayPal (or by Etsy when purchasing on Etsy). We never store your credit card numbers. For delivery, necessary address data is shared with our local or EU/global shipping partners (e.g. DHL).

No Sale of Personal Data

We never sell, rent or trade your personal data to third parties for advertising or profiling.

Your Rights Under the GDPR (Art. 15–21 GDPR)

You have the right to request access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing (Art. 21), as well as the right to lodge a complaint with a data protection supervisory authority (such as the Berlin Commissioner for Data Protection). To exercise your rights, contact us via our contact page.