Privacy Policy · Datenschutzerklärung
We take the protection of your personal data seriously. This policy explains what data we process and your rights under the GDPR.
1. Controller
CardVeo, Köln, Germany · [email protected]
2. Data we process
Account data (name, email), order & shipping data, payment status (via Stripe — we do not store card numbers), and anonymised WebAR scan statistics (IP stored only as a hash).
3. Cookies
Essential cookies keep the site working. Analytics/marketing cookies are only set with your consent, which you can withdraw at any time.
4. Processors
We use service providers (e.g. hosting, Stripe for payments, Cloudflare, email) who process data on our behalf under data-processing agreements.
5. Your rights
You have the right to access, rectification, erasure, restriction, data portability and to object. Contact us to exercise these rights.
⚠️ This is a template. Please have it reviewed by a lawyer before going live.