Privacy Policy
Who is responsible?
Data processing on this website is carried out by the website operator:
Collection of Stories Raumerstraße 23, 10437 Berlin Germany paula.collectionofstories@gmail.com
Last updated: November 2025
1. Privacy at a glance
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
We collect data that you actively provide (e.g. via contact form or when making a purchase).
We automatically collect data when you visit the website (e.g. IP address, browser, time of access).
We use cookies and analytics tools to optimise our website and marketing activities.
You have the right to access, rectify, delete, restrict, port and object to the processing of your data at any time.
To exercise your rights, please contact us at: paula.collectionofstories@gmail.com
2. Data collection on this website
a) Automatically collected data
When you visit our website, your browser automatically transmits information to our server. This information is temporarily stored in a log file. The following data is collected without any action on your part and stored until automatically deleted:
IP address of the requesting device
Date and time of access
Name and URL of the retrieved file
Website from which access was made (referrer URL)
Browser used and, if applicable, operating system
Name of your internet service provider
Purpose: Ensuring a smooth connection, comfortable use of the website, evaluation of system security and stability, and administrative purposes. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Retention period: Log files are automatically deleted after 7 days.
b) Cookies
Our website uses cookies to improve your experience and provide certain features. Cookies are small files stored on your device.
Cookies we use:
Functional cookies (e.g. for login or shopping cart)
Tracking/analytics cookies (Google Analytics)
We only set non-essential cookies (such as analytics cookies) after you have given your active consent via our cookie banner. You can withdraw your consent or adjust your preferences at any time through the cookie settings on our website.
You can also disable or delete cookies at any time through your browser settings. Please note that some parts of the website may no longer function properly as a result.
Opt-out options: Google Analytics: https://tools.google.com/dlpage/gaoptout
c) Contact form / Email
When you contact us via the contact form or by email, we collect:
Name
Email address
Subject and message
Date and time of the request
IP address where applicable
Purpose: Processing your enquiry Legal basis: Art. 6(1)(a) GDPR (your consent) Retention period: Contact enquiries are deleted after 3 years unless a longer retention period is required by law.
d) Orders in the online shop
When you make a purchase via Instagram or Squarespace Payments, we collect:
First and last name
Billing and delivery address
Email address
Payment information (depending on the payment provider)
Purpose: Processing, shipping and invoicing of your order Legal basis: Art. 6(1)(b) GDPR (performance of a contract) Retention period: Order-related data is retained for 10 years in accordance with German commercial law (§ 147 AO, § 257 HGB).
Payment service provider: Stripe – Privacy Policy: https://stripe.com/privacy
e) Social media & marketing
We use:
Instagram (incl. Shop)
Facebook
Pinterest
Purpose: Marketing, optimising our services, analysing user behaviour Tools: Meta Business Suite Legal basis: Art. 6(1)(f) GDPR (legitimate interest) Please note: Data is processed on the servers of the respective providers. We have no influence over this.
3. International data transfers
Some of our service providers, including Stripe and Meta (Instagram, Facebook), may process your data outside the European Economic Area (EEA), including in the United States. Where such transfers occur, appropriate safeguards are in place, such as EU Standard Contractual Clauses (SCCs) approved by the European Commission, to ensure your data remains protected to the same standard as within the EEA.
For more information, please refer to the respective privacy policies:
4. Sharing of data
Personal data is only shared with service partners who are necessary for processing your order (e.g. payment providers, shipping service providers). We do not sell your personal data to third parties.
5. Your rights
Under GDPR, you have the right to:
Access your stored data (Art. 15 GDPR)
Request correction of inaccurate data (Art. 16 GDPR)
Request deletion of your data (Art. 17 GDPR)
Request restriction of processing (Art. 18 GDPR)
Request data portability (Art. 20 GDPR)
Object to processing (Art. 21 GDPR)
Withdraw consent at any time (Art. 7(3) GDPR)
Lodge a complaint with a supervisory authority (Art. 77 GDPR)
To exercise any of these rights, please contact us at: paula.collectionofstories@gmail.com
We will respond to your request within 30 days.
6. Supervisory authority
If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority:
Berliner Beauftragte für Datenschutz und Informationsfreiheit Friedrichstr. 219, 10969 Berlin www.datenschutz-berlin.de
7. Data security
We use SSL encryption (Secure Socket Layer) for the secure transmission of your data. Our website is hosted via Squarespace, which maintains industry-standard security measures.
8. Updates to this privacy policy
We reserve the right to update this privacy policy as needed to reflect changes in legal requirements or our services. The most current version can always be found on our website. We recommend checking this page periodically.