Datenschutzerklärung

Privacy Policy Effective Date: January 1, 2026

The protection of your personal data is important to us. This Privacy Policy explains how The Organic Candle Lab collects, uses, and protects your personal data when you visit or use our website.

1. Data Controller The data controller responsible for processing your personal data is: The Organic Candle Lab info@the-organic-candle-lab.com Eschersheimer Land Str. 559 60431 Frankfurt am Main

2. Collection and Processing of Personal Data We collect and process personal data only when you voluntarily provide it to us, for example when you:

Place an order
Contact us via email or a contact form
Subscribe to a newsletter (if offered)

The data processed may include: name, email address, billing and delivery address, order information, payment information (payments are processed by external payment service providers; we do not store complete payment data), and the content of messages you send us.

3. Purpose of Data Processing We process your personal data for the following purposes:

Processing and delivering orders
Communicating with you regarding orders or inquiries
Fulfilling legal obligations
Improving our website and services
Sending marketing emails (only with your explicit consent)

4. Legal Basis for Processing (Art. 6 GDPR) Your personal data is processed on the following legal bases:

Art. 6(1)(b) GDPR – Performance of a contract (e.g. order processing)
Art. 6(1)(c) GDPR – Compliance with legal obligations
Art. 6(1)(f) GDPR – Legitimate interests (e.g. secure and stable website operation)
Art. 6(1)(a) GDPR – Consent (e.g. newsletter)

5. Sharing Data with Third Parties We only share your personal data when necessary, for example with:

Payment service providers
Shipping and logistics companies
Website hosting and technical service providers

All service providers are contractually obligated to comply with the GDPR.

6. Website Hosting Our website is hosted by an external hosting provider. Personal data collected on this website is processed on the hosting provider’s servers. Processing is carried out on the basis of a data processing agreement in accordance with Art. 28 GDPR.

7. Cookies Our website uses cookies — small text files stored on your device. Essential cookies are required for the website to function properly. Optional cookies (e.g. analytics or marketing cookies) are only used with your consent. You can disable or delete cookies at any time through your browser settings.

8. Data Retention We store personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by statutory retention periods.

9. Your Rights under the GDPR You have the following rights under the GDPR:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to withdraw consent at any time (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority.

10. Data Security We implement appropriate technical and organizational measures to protect your personal data against loss, misuse, or unauthorized access.

11. Changes to this Privacy Policy We reserve the right to update this Privacy Policy to reflect changes in legal requirements or our services. The current version will always be available on this website.

12. Contact If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at: info@the-organic-candle-lab.com The Organic Candle Lab