1. DATA CONTROLLER

The legal entity responsible for the processing of your personal data on this website is:

Easterlies GmbH  
Rankestraße 26, 10789 Berlin, Germany  
Email: info@everstein.eu  
Customer Support Telephone: +48732083880  
Business Hours: Monday – Sunday, 9:00 – 17:00 (CET)

2. INFORMATION WE COLLECT

We collect personal information necessary to deliver our services, process orders, and improve your shopping experience:

• Order & Transaction Data: Full name, billing address, delivery address, email address, phone number, purchased items, and payment status. (Note: Payment transaction details are processed directly by certified payment service providers and are never stored on our local servers).
• Customer Communication: Inquiries, warranty claims, messages, or technical attachments sent to our support channels.
• Device & Technical Data: IP addresses (anonymized where feasible), browser type and version, device identifier, operating system, referral URLs, and access timestamps collected automatically via server logs.

3. HOW WE USE YOUR INFORMATION & LEGAL BASES (GDPR Art. 6)

We process personal data strictly in compliance with lawful European grounds:

• Performance of a Contract (Art. 6(1)(b) GDPR):  
  To fulfill transactions, process payments, dispatch orders via our European logistics partners, provide tracking information, and handle after-sales service or warranty claims.
• Compliance with Legal Obligations (Art. 6(1)(c) GDPR):  
  To adhere to statutory European commercial, financial, and tax record-keeping requirements (e.g., German Commercial Code HGB and Fiscal Code AO).
• Legitimate Interests (Art. 6(1)(f) GDPR):  
  To ensure the cybersecurity and operational stability of our store, conduct basic internal analytics, prevent fraudulent transactions, and protect our legal rights.
• Explicit Consent (Art. 6(1)(a) GDPR):  
  To send marketing newsletters or activate non-essential analytics and targeted advertising cookies. You may withdraw your consent at any time.

We do not sell, rent, or trade your personal data to third parties.

4. COOKIES & TRACKING TECHNOLOGIES

Our store uses cookies and similar technologies in accordance with the EU ePrivacy Directive and the GDPR:

• Strictly Necessary Cookies: Essential for the core technical functions of our store (e.g., cart preservation, session integrity, secure checkout). These do not require prior consent.
• Performance & Analytics Cookies: Measure visitor volume and user journeys to help us optimize page load speeds and navigation.
• Marketing & Social Pixels: Placed by authorized advertising networks to deliver relevant advertisements tailored to your interests.

Consent Management:  
Non-essential cookies are only activated if you grant explicit permission via our cookie consent banner. You can manage or revoke your cookie choices at any time via the cookie settings on our site or through your browser settings.

5.THIRD-PARTY SERVICE PROVIDERS

We collaborate with carefully selected third-party partners who process personal data exclusively under our instruction and under strict Data Processing Agreements (DPAs):

• E-Commerce Hosting & Infrastructure Providers
• Logistics, Fulfillment & Courier Networks (for parcel delivery within Europe)
• Payment Service Providers (PCI-DSS certified gateways)
• Customer Support, Email & Communication Systems
• Advertising Platforms (e.g., Google Ads, Meta Ads)

6.  INTERNATIONAL DATA TRANSFERS

EVERSTEIN operates with international technical infrastructure. Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), such as the United States or Canada.

Whenever data is transferred internationally, we ensure an equivalent level of protection by implementing:

• Adequacy Decisions: Transfers to jurisdictions officially recognized by the European Commission as offering adequate protection (e.g., Canada).
• Standard Contractual Clauses (SCCs): Model clauses approved by the European Commission pursuant to Art. 46(2)(c) GDPR.
• EU-U.S. Data Privacy Framework (DPF): For participating certified entities in the United States.

7. DATA RETENTION

We retain your personal data only for as long as necessary to achieve the specific purpose for which it was gathered:

• Order & Tax Records: Retained for statutory commercial and fiscal retention periods (typically up to 10 years under applicable European law).
• Warranty & Customer Records: Retained for the duration of the statutory conformity period (2 years) and any extended commercial warranty.
• Marketing Data: Retained until you withdraw consent or click "unsubscribe" in our communications.

Once retention periods expire, your data is securely erased or permanently anonymized.

8. YOUR GDPR DATA PROTECTION RIGHTS

If you are located in the European Union or European Economic Area (EEA), you are entitled to the following statutory rights under the GDPR:

• Right of Access (Art. 15 GDPR): Obtain confirmation and receive a free copy of your stored personal data.
• Right to Rectification (Art. 16 GDPR): Request prompt correction of inaccurate or incomplete data.
• Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): Request deletion of your data when retention is no longer legally necessary.
• Right to Restriction of Processing (Art. 18 GDPR): Request that your data be restricted under certain statutory circumstances.
• Right to Data Portability (Art. 20 GDPR): Receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21 GDPR): Object at any time to the processing of your data based on legitimate interests or for direct marketing.
• Right to Withdraw Consent (Art. 7(3) GDPR): Revoke any previously given consent with future effect.

Exercising Your Rights:  
Exercising your rights is free of charge. We will process and respond to your request within one (1) month. Please contact our privacy team at info@everstein.eu.

Right to Lodge a Complaint:  
You have the right to lodge a formal complaint with a competent Data Protection Supervisory Authority (such as the Berliner Beauftragte für Datenschutz und Informationsfreiheit in Germany or your local national supervisory authority).

9. PROTECTION OF MINORS

Our website and products are directed exclusively at adults. We do not knowingly collect personal data from individuals under the age of 16. If we discover that personal data of a minor has been submitted without verifiable parental consent, we will delete it immediately.

10. DATA SECURITY

We maintain appropriate technical and organizational measures (TOMs)—including SSL/TLS encryption, restricted access controls, and firewall defenses—to protect your personal data against unauthorized access, destruction, loss, or manipulation.

11. CHANGES TO THIS PRIVACY POLICY

We reserve the right to amend this Privacy Policy to reflect evolving technical, operational, or legal standards. Any modifications will be posted directly to this page with an updated revision date.

12. CONTACT US

If you have questions, feedback, or wish to exercise your data protection rights, please contact our data controller:

Easterlies GmbH  
Rankestraße 26, 10789 Berlin, Germany  
Email: info@everstein.eu  
Phone: +48732083880