PRIVACY POLICY

5.1 Who is responsible for your data?

For Germany-market webshop operations, including Germany-market order handling, shipping, returns, customer support and website operations controlled by the seller, the controller is SchelmDev UG (haftungsbeschränkt), Baroperstraße 335, Z. 608, 44227 Dortmund, Germany; email: [email protected]; phone: +49 1522 9289018.

Abhishek Arora, Lüttfeld 15, App 211, 32657 Lemgo, Germany; email: [email protected], acts as a separate controller for brand, press or other communications sent directly to him. Ownership of the HABÄNE trademark does not, by itself, make Abhishek Arora the controller of customer-order data processed by SchelmDev UG.

FASTFAME MULTIVERSE (OPC) PRIVATE LIMITED, registered office 30, Block-B, Shivaji Park, Near Junglow Wali Mataji Temple, Yamuna Nagar, Haryana 135001, India, acts as a separate controller for India-market orders, customer interactions, local support and other India-market processing that it determines and handles directly. India customer care / grievance contact: Abhishek Arora, Director; email: [email protected]; phone: +91 9558903224; correspondence address: 30, Block-B, Shivaji Park, Near Junglow Wali Mataji Temple, Yamuna Nagar, Haryana 135001, India. SchelmDev UG (haftungsbeschränkt) acts as controller for the Germany-market webshop processing that it determines and handles directly. If either entity processes personal data only on documented instructions for another controller, the required processor terms and, where applicable, international-transfer safeguards must be in place.

5.2 What data we process and why

5.3 Hosting and technical infrastructure

The website is hosted and delivered using Vercel infrastructure. Vercel Inc. may process technical and customer data required to provide hosting, content delivery, security and related infrastructure services. To the extent Vercel acts as a processor, the applicable data-processing terms and safeguards must be in place. Vercel may separately act as a controller for certain account or service-generated data under its own privacy terms.

Server logs may include IP address, browser and device information, operating system, referrer, request time and similar technical data. These data are processed for security, troubleshooting, abuse prevention and reliable website operation on the basis of Art. 6(1)(f) GDPR.

5.4 Cookies, local storage and similar technologies

For the Germany-market storefront, access to or storage of information on a user’s device is governed by § 25 TDDDG. Strictly necessary technologies may be used without consent only where the statutory exception applies. Analytics, marketing and other optional technologies are activated only after valid consent and are disabled when consent is refused or withdrawn. The India-market storefront uses equivalent consent and privacy controls where required by applicable Indian law. Details of active technologies, providers, purposes and durations are shown in Cookie Settings.

5.5 Payment processing

Payment methods and the applicable provider are shown at checkout. Germany-market transactions handled by SchelmDev UG (haftungsbeschränkt) may involve providers such as Stripe, depending on the payment method offered. India-market transactions handled by FASTFAME MULTIVERSE (OPC) PRIVATE LIMITED may involve providers such as Razorpay, depending on the payment method offered. The contracting seller, payment recipient and applicable payment provider must be clearly identified before the order is placed. Payment providers and local operators may process payment-related data as processors or independent controllers under their own legal obligations. Only data necessary for payment, fraud prevention, customer support and legally required records should be shared.

5.6 Shipping and fulfilment

Where an order requires delivery, personal data such as name, delivery address, contact details, order reference and shipment information may be provided to carriers or logistics partners to perform the contract under Art. 6(1)(b) GDPR.

5.7 Newsletter and marketing

Marketing emails are sent only where a valid legal basis exists. For new subscribers, this normally means explicit consent under Art. 6(1)(a) GDPR together with § 7 UWG. Where the statutory existing-customer exception in § 7(3) UWG is used, all legal conditions must be satisfied. You can withdraw consent or object to direct marketing at any time without affecting the lawfulness of processing before withdrawal. Every marketing email must provide a simple unsubscribe method.

5.8 Recipients

Personal data may be disclosed, only where necessary and lawful, to hosting and IT providers, payment providers, carriers and fulfilment partners, email or customer-service providers, professional advisers, accountants, auditors, insurers and public authorities where disclosure is legally required. Data relating to Germany-market operations may be processed by SchelmDev UG and its service providers; data relating to India-market operations may be processed by FASTFAME MULTIVERSE (OPC) PRIVATE LIMITED and its service providers. Cross-market sharing should occur only where necessary, lawful and properly documented.

5.9 International transfers

Where personal data controlled from Germany or elsewhere in the EEA are transferred to India or another third country, the transfer is made only where a valid mechanism under Chapter V GDPR applies. For transfers to India, appropriate safeguards will normally be based on the European Commission Standard Contractual Clauses under Article 46 GDPR, or another valid Chapter V mechanism, together with supplementary technical, contractual or organisational measures where required. Information about the safeguards applicable to a specific transfer, including how to obtain a copy where required, can be requested from the relevant controller using the contact details above.

5.10 Data required to place and fulfil an order

Certain information, including identity/contact details, delivery information and payment-related details required by the selected payment method, is necessary to enter into or perform a purchase contract. If required information is not provided, the seller may be unable to accept, process or deliver the order. Optional marketing, analytics and personalization data are not required to purchase unless a particular optional feature clearly depends on them.

5.11 Retention

• Germany-market order, invoice and accounting data are retained for the periods required by applicable German commercial and tax law. India-market transaction, tax and corporate records are retained for the periods required by applicable Indian law.
• Customer-service and complaint records are retained only as long as necessary to resolve the matter and to establish, exercise or defend legal claims.
• Newsletter data are retained until consent is withdrawn or the marketing relationship ends; evidence of consent or objection may be retained for as long as reasonably necessary to demonstrate compliance.
• Technical logs are retained only for the period reasonably required for security, debugging and abuse prevention, subject to the hosting configuration and legal requirements.
• Data required for ongoing legal claims, regulatory duties, recalls, safety matters or fraud investigations may be retained longer where legally necessary.

5.12 Your rights

• Right of access (Art. 15 GDPR).
• Right to rectification (Art. 16 GDPR).
• Right to erasure where the legal conditions are met (Art. 17 GDPR).
• Right to restriction of processing (Art. 18 GDPR).
• Right to data portability where applicable (Art. 20 GDPR).
• Right to object to processing based on legitimate interests (Art. 21 GDPR).
• Absolute right to object at any time to processing for direct-marketing purposes.
• Right to withdraw consent at any time for future processing (Art. 7(3) GDPR).

To exercise rights relating to Germany-market webshop data handled by SchelmDev UG, contact [email protected]. For India-market data handled directly by FASTFAME MULTIVERSE (OPC) PRIVATE LIMITED, contact Abhishek Arora, Director, at [email protected] or +91 9558903224; correspondence address: 30, Block-B, Shivaji Park, Near Junglow Wali Mataji Temple, Yamuna Nagar, Haryana 135001, India. For data contained only in direct brand/press communications with Abhishek Arora, contact [email protected]. GDPR rights apply where the GDPR governs the processing; India-market requests are additionally handled in accordance with applicable Indian data-protection and consumer law.

5.13 Automated decision-making and personalization

The webshop does not use solely automated decision-making that produces legal effects or similarly significant effects within Art. 22 GDPR unless this is separately disclosed before such processing begins. Product-matching, recommendation or travel-profile features are intended to assist shopping decisions and do not determine legal rights.

5.14 Complaint to a supervisory authority

You have the right to lodge a complaint with a data-protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. For controllers established in North Rhine-Westphalia, you may contact the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany; email: [email protected].

5.15 Changes

This Privacy Policy may be updated when processing activities, providers or legal requirements change. Material changes will be published before or when they take effect. The version displayed on the website is the current version.