Privacy Policy (GDPR)
Privacy notice pursuant to Arts. 13–14 GDPR (EU Regulation 2016/679) and § 13 DDG.
Controller: Hasan Lombardi-Yoksulabakan, CrackersCompany, 70736 Fellbach, Germany | info@aperigusto.com
Last revised: June 2026.
1. Data controller
Hasan Lombardi-Yoksulabakan
CrackersCompany · Stuttgarter Straße 106 · 70736 Fellbach · Germany
Email: info@aperigusto.com · Tel.: +49 711 6451979
The appointment of a DPO is not mandatory (Art. 37 GDPR) for SMEs that do not process special categories of data on a large scale.
2. Data processed and purposes
2.1 Technical browsing data
IP address, browser, operating system, pages visited, date/time — retained for a maximum of 7 days for IT security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
2.2 B2B registration data
Name, company name, EU VAT number, address, email, telephone — for verification of B2B status, account management and performance of contracts. Legal basis: Art. 6(1)(b) GDPR.
2.3 Order and invoice data
Items, prices, shipping/billing addresses, payment type. Card data is never stored by the Seller. Retention: 10 years (§ 147 AO, § 257 HGB). Legal basis: Art. 6(1)(b) and (c) GDPR.
2.4 Communications (email / contact form)
Data entered in communications — processed to respond and manage the relationship. Retention: 3 years (§ 195 BGB). Legal basis: Art. 6(1)(b) and (f) GDPR.
2.5 Cookies
Essential technical cookies (session, cart, authentication): necessary for operation and do not require consent. For any analytics or marketing cookies, see the Cookie Policy and the cookie banner.
3. Recipients of the data
3.1 Shopify Inc. (processor — Art. 28 GDPR)
The store is operated through Shopify (151 O'Connor Street, Ottawa, ON K2P 2L8, Canada). Transfers to Canada take place on the basis of the EU adequacy decision. Shopify may use sub-processors in the USA in compliance with the SCCs. Current DPA. Further details: shopify.com/legal/privacy.
3.2 Payment providers
Payments are handled by PCI DSS Level 1 certified providers (e.g. Stripe / PayPal). Only the data necessary to process the payment is transmitted.
3.3 Carriers
The delivery name, address and telephone number are provided to the carrier (DHL, DPD or equivalent) solely for delivery.
3.4 Tax adviser
Billing data may be shared with the Seller's tax adviser for accounting obligations (Art. 6(1)(c) GDPR).
3.5 Public authorities
Where required by law, data may be transmitted to competent authorities (Finanzamt, Zoll, Guardia di Finanza).
4. Data retention
| Category | Period | Legal basis |
|---|---|---|
| Orders and invoices | 10 years | § 147 AO / § 257 HGB |
| Inactive accounts | 3 years from the last activity | § 195 BGB (limitation period) |
| Technical logs | 7 days | Legitimate interest |
| Email communications | 3 years | § 195 BGB |
5. Rights of data subjects (Arts. 15–22 GDPR)
- Access (Art. 15) — confirmation as to whether your data is being processed and a copy of that data;
- Rectification (Art. 16) — correction of inaccurate data;
- Erasure (Art. 17) — removal of data, subject to statutory retention obligations;
- Restriction (Art. 18) — suspension of processing in certain circumstances;
- Portability (Art. 20) — receipt of data in a structured, machine-readable format;
- Objection (Art. 21) — objection to processing based on legitimate interest;
- Withdrawal of consent (Art. 7(3)) — withdrawal at any time for processing based on consent.
To exercise your rights: info@aperigusto.com. Response within 30 days.
6. Competent supervisory authorities
- Germany: Landesbeauftragte für Datenschutz und Informationsfreiheit Baden-Württemberg — www.baden-wuerttemberg.datenschutz.de
- Italy: Garante per la protezione dei dati personali — www.garanteprivacy.it
7. Data security
The site uses TLS encryption (HTTPS). Shopify is certified to PCI DSS Level 1 and SOC 2 Type II. We implement technical and organisational measures pursuant to Art. 32 GDPR.
8. Updates
This policy may be updated in the event of regulatory changes. The revision date is shown at the top. Registered users will be informed by email of material changes.