Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

George S.W. DuBose Wiedstrasse 16 D-50859 Cologne Germany E-mail: boss@george-dubose.com Phone: +49 160 4811234

2. General information on data processing

The protection of your personal data is important to us. We process personal data exclusively within the framework of the statutory provisions, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Personal data is any information relating to an identified or identifiable natural person.

3. Hosting

Our website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit our website, technical access data is processed, in particular:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL
• Pages visited

Processing takes place to provide and secure the website on the basis of Art. 6 (1) (f) GDPR. Data transfers to the USA are based on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.

Further information: https://vercel.com/legal/privacy-policy

4. Server log files

When this website is accessed, information is automatically collected and stored in server log files (IP address, browser information, operating system, time of access, URL accessed). Processing takes place to ensure trouble-free operation and to prevent misuse and attacks. The legal basis is Art. 6 (1) (f) GDPR.

5. Contact

If you contact us by e-mail or phone, the data you provide (name, e-mail address, subject, content of your message) is processed to handle your enquiry. Processing is based on Art. 6 (1) (b) GDPR where the enquiry relates to a contract, and otherwise on Art. 6 (1) (f) GDPR.

Our e-mail mailboxes are hosted by webgo GmbH, Wandsbeker Zollstraße 95, 22041 Hamburg, Germany. Sender and recipient addresses, subject, message content and technical header data are processed. The legal basis is Art. 6 (1) (f) GDPR. Further information: https://www.webgo.de/datenschutz/

6. Orders and shopping cart

There is no customer account. The shopping cart is stored exclusively locally in your browser (localStorage) and is not transmitted to us before you proceed to checkout.

When you place an order we process the data required to perform the contract: name, billing and shipping address, e-mail address, phone number (for shipping queries) and order details. You enter this data in Stripe's payment form; order data is stored at Stripe. After successful payment we send you an order confirmation by e-mail and receive an internal notification; these e-mails are sent via our e-mail provider webgo (see section 5).

Processing takes place to perform the purchase contract pursuant to Art. 6 (1) (b) GDPR.

7. Payment processing via Stripe

Payments are processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Payment takes place via Stripe Checkout, where you enter your name, address, e-mail, phone number and payment details. We do not receive full card details.

The data required for payment processing (name, billing data, payment information, order value) is transmitted to Stripe. Stripe may transfer data to affiliated companies in the USA on the basis of the EU Standard Contractual Clauses. The legal basis is Art. 6 (1) (b) GDPR.

Further information: https://stripe.com/privacy

8. Shipping carriers

To deliver orders we transmit the necessary data (name, shipping address and, where applicable, e-mail address or phone number for shipping notifications) to the commissioned shipping carrier (e.g. DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany, or UPS). Processing takes place to perform the contract pursuant to Art. 6 (1) (b) GDPR.

9. Cookies and local storage

We do not use cookies for analytics, tracking or marketing purposes.

The only technically necessary items are a cookie storing your language selection (NEXT_LOCALE) and the local storage of your shopping cart and selected shipping country in your browser (localStorage). This data is not transmitted to us. The legal basis is Art. 6 (1) (f) GDPR and § 25 (2) no. 2 TDDDG.

When the payment page is opened, Stripe sets its own cookies that are necessary for payment processing and fraud prevention.

10. Recipients of data

Personal data is only disclosed where this is legally permitted or necessary to perform the contract. Recipients may include:

• Hosting provider (Vercel)
• E-mail provider (webgo)
• Payment service provider (Stripe)
• Shipping carriers
• Tax advisors and authorities, where required by law

11. Retention period

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention periods. Order and invoice data is retained for up to ten years in accordance with German commercial and tax law (§ 147 AO, § 257 HGB).

12. Rights of data subjects

You have the right to:

• Access pursuant to Art. 15 GDPR
• Rectification pursuant to Art. 16 GDPR
• Erasure pursuant to Art. 17 GDPR
• Restriction of processing pursuant to Art. 18 GDPR
• Data portability pursuant to Art. 20 GDPR
• Object to processing based on Art. 6 (1) (f) GDPR pursuant to Art. 21 GDPR

To exercise your rights, simply send an e-mail to boss@george-dubose.com.

13. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The competent authority for North Rhine-Westphalia is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen Kavalleriestraße 2–4 40213 Düsseldorf, Germany https://www.ldi.nrw.de

14. Changes to this privacy policy

This privacy policy is dated 1 November 2026. We reserve the right to amend it where necessary due to technical or legal changes.