Privacy Policy

Last updated: 28 July 2026

1. Controller

The controller responsible for data processing on this website is:

SOLISYNTH

Harzer Strasse 6

12059 Berlin

GERMANY

Email: info[at]solisynth.com

(See our Imprint page for full company details.)

2. Overview

Protecting your personal data matters to us, and we handle it strictly within the boundaries set by data protection law. In this policy, “personal data” means any information that could be used to identify you as an individual. We only process such data where a legal basis permits it, or where you’ve given us your explicit consent to do so. The main legal frameworks behind this policy are the EU General Data Protection Regulation (GDPR), Germany’s Federal Data Protection Act (BDSG), and the German Digital Services Data Protection Act (TDDDG), which governs privacy in telecommunications and digital services.

This policy sets out what data we collect, why we collect it, and who we share it with, whenever you browse this shop, place an order, or otherwise interact with us. Our shop also uses Germanized for WooCommerce, a plugin that helps generate legally required checkout information (such as VAT details and withdrawal notices) for the German and EU market; it does not itself share personal data with any third party.


3. Hosting

This website is hosted by:

ALL-INKL.COM – Neue Medien Münnich Hauptstraße 68, 02742 Friedersdorf, Germany

All-Inkl is based in Germany, so your data stays within the EU when it comes to server hosting. Hosting providers automatically collect technical data for every visit (see Section 4) to keep the site running securely.


4. Data Collected Automatically (Server Log Files)

Every time you visit our site, our hosting provider’s servers automatically record:

  • IP address (anonymized/shortened where technically possible)
  • Date and time of access
  • Browser type and version, operating system
  • Referring URL
  • Requested page/file

Purpose: ensuring stable and secure operation of the website (technical necessity). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning website). Retention: log data is typically deleted automatically after 7 days.


5. Cookies & Consent Management

We use a cookie consent banner (Complianz) to obtain your consent before any non-essential cookie or tracking script (such as WP Statistics or the Meta Pixel) is activated.

  • Strictly necessary cookies (e.g. shopping cart, checkout session, security) are used without consent, as they’re required for the site to function. Legal basis: Art. 6(1)(f) GDPR, § 25(2) No. 2 TDDDG. If you log into a customer account, we also set login cookies (kept for 2 days, or 2 weeks if you select “Remember Me”) and a screen-display-preference cookie (kept for 1 year); these are removed automatically when you log out.
  • Statistics and marketing cookies (WP Statistics, Meta Pixel) are only activated after you actively consent via the banner. Legal basis: Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG.

You can withdraw or change your consent at any time via the cookie settings link in our website footer.


6. Creating an Account & Placing Orders

You can check out as a guest or create a customer account. Depending on your choice, we collect:

  • Name, billing and shipping address
  • Email address, phone number (if provided)
  • Order history, products purchased
  • Account password (stored encrypted, if you register)

If you request a password reset, your IP address is included in the reset email for security purposes.

Purpose: processing and fulfilling your order, managing your account, customer service. We also use a plugin (PDF Invoices & Packing Slips for WooCommerce) to automatically generate invoices and packing slips from your order data; this runs entirely on our own server and does not share your data with any third party. Legal basis: Art. 6(1)(b) GDPR (necessary for performance of a contract with you). Retention: account data is kept until you delete your account; order data is retained for the statutory retention periods under German commercial and tax law (typically 6–10 years for invoices).


7. Payment Processing

Depending on the payment method you choose at checkout, your payment details are shared with the following processors:

PayPal Processed via PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal’s parent company, PayPal Inc., is based in the United States; data may be transferred there under appropriate safeguards (EU-U.S. Data Privacy Framework / Standard Contractual Clauses). See PayPal’s Privacy Policy.

WooCommerce Payments (credit/debit card, Apple Pay, Google Pay, Trustly) Processed via WooCommerce Payments, provided by Automattic Inc., using Stripe’s payment infrastructure. Both are U.S.-based companies; card and payment data is transferred and processed under appropriate safeguards (Standard Contractual Clauses). Neither we nor our server ever store your full card details. See WooCommerce Payments Privacy Policy and Stripe’s Privacy Policy.

Legal basis: Art. 6(1)(b) GDPR (necessary to fulfil your purchase contract).


8. Shipping

To deliver your order, we share the following with our shipping carriers:

DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany) We share your name, delivery address, and (where relevant for tracking notifications) email address/phone number with DHL so they can deliver your parcel.

Hermes (Hermes Germany GmbH, Essener Straße 89, 22419 Hamburg, Germany) We share your name, delivery address, and (where relevant for tracking notifications) email address/phone number with Hermes so they can deliver your parcel.

Legal basis: Art. 6(1)(b) GDPR (necessary to fulfil the purchase contract).


9. Analytics & Advertising Tools

We use the following tools to understand site usage and measure our advertising:

WP Statistics We use WP Statistics, a self-hosted analytics plugin. Unlike third-party analytics services, WP Statistics processes visit data (pages viewed, referrer, approximate location derived from IP, browser/device type) directly on our own server. No data is sent to an external company, and no data leaves the EU through this tool. IP addresses are anonymized/hashed before storage. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent), activated only after you agree via our cookie banner. Opt-out: withdraw consent via our cookie banner.

Meta Pixel (via the “Meta for WooCommerce” plugin) Provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (ultimate parent: Meta Platforms, Inc., USA). This tool tracks purchase and browsing events on our site to measure and optimize our Facebook/Instagram advertising, and may be used to show you relevant ads on Meta platforms. Data may be transferred to the U.S. under the EU-U.S. Data Privacy Framework. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent). Opt-out: withdraw consent via our cookie banner, or manage your ad preferences directly in your Meta account settings.


10. Newsletter

If you subscribe to our newsletter, we use the Newsletter plugin (by Stefano Lissa & The Newsletter Team), which stores subscriber data directly in our own website database. No third-party mailing service receives your data unless you’re told otherwise here.

We collect: email address, and name if you provide it. We use double opt-in: you’ll receive a confirmation email and must actively confirm before receiving any newsletters.

Purpose: sending you marketing emails about products, offers, and updates. Legal basis: Art. 6(1)(a) GDPR (consent). Retention: until you unsubscribe. Every newsletter includes an unsubscribe link.


11. Back-in-Stock Notifications

If a product you’re interested in is out of stock, you can enter your email address to be notified when it’s available again (via the Back in Stock Notifier for WooCommerce plugin).

We collect: your email address only. Notifications are sent through our own website’s standard email system. No third-party email service is used.

Purpose: notifying you when a specific product is back in stock. Legal basis: Art. 6(1)(a) GDPR (consent), given when you submit the notification request. Retention: until you’re notified, or until you unsubscribe/request deletion of this data.


12. Social Media Links

Our website displays icons/buttons linking to our profiles on Instagram, YouTube, and GitHub. These are plain hyperlinks, not embedded social media widgets or plugins, so no data is transferred to these platforms simply by visiting our site or seeing the icons.

If you click one of these links, you’ll leave our website and be taken to the respective platform. From that point on, the privacy policy and terms of that platform apply, not ours. We have no influence over how these third parties process your data once you’re on their site. Since we don’t collect or transmit any personal data through these links ourselves, no processing on our part occurs and no separate legal basis is required.


13. Your Rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you (Art. 15)
  • Rectify inaccurate data (Art. 16)
  • Erase your data (“right to be forgotten”), subject to legal retention obligations (Art. 17)
  • Restrict processing (Art. 18)
  • Data portability: receive your data in a structured, machine-readable format (Art. 20)
  • Object to processing based on legitimate interest or for direct marketing purposes (Art. 21)
  • Withdraw consent at any time, without affecting processing carried out before withdrawal (Art. 7(3))
  • Lodge a complaint with a data protection supervisory authority: in Germany, typically the authority of the state where our company is registered, or your own country’s authority if you’re located elsewhere in the EU.

To exercise any of these rights, contact us at info[at]solisynth.com


14. Data Security

We use appropriate technical and organizational measures (SSL/TLS encryption for data transmission, restricted access to personal data, regular software/plugin updates) to protect your data against unauthorized access, loss, or misuse.


15. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our services or legal requirements. The current version is always available on this page.

16. Contact

Questions about this privacy policy or how we handle your data? Contact us at:

info[at]solisynth.com

SOLISYNTH

Harzer Strasse 6

12059 Berlin

×