Gürteltier Handyzubehör

SHOP NOW

Privacy Policy

‌Effective Date: October 9, 2026‌

1. Introduction

Welcome to www.gurteltier.com, the official e-commerce website operated by Gürteltier Handyzubehör GmbH. We specialize in designing and distributing premium phone cases, practical Type-C accessories, and other high-quality mobile essentials that blend stylish design with reliable daily device protection. At Gürteltier Handyzubehör, we are deeply committed to protecting the personal data and privacy rights of every customer, website visitor, and user who interacts with our platform.

This Privacy Policy is drafted in full compliance with the European General Data Protection Regulation (GDPR, known in Germany as DSGVO), the German Federal Data Protection Act (BDSG), and the Telecommunications, Digital Services and Data Protection Act (TDDDG), alongside all applicable local and EU-level data protection regulations. It is designed to provide you with clear, transparent information about how we collect, process, store, and share your personal data when you browse our website, create an account, place an order, subscribe to our communications, or use any of the services offered on www.gurteltier.com. We recognize that online privacy is a core priority for consumers across Germany and the European Union, and we have structured every data handling practice to uphold the strict standards set by these regulatory frameworks, to ensure your personal information is always treated with full respect and robust protection.

This Policy applies to all data processing activities conducted through our website, regardless of whether your data is stored on our on-premise servers or encrypted third-party cloud storage solutions. By accessing and using www.gurteltier.com, you acknowledge that you have read, understood, and agree to the terms outlined in this document. If you do not agree with any part of this Privacy Policy, please refrain from using our website and our related e-commerce services.

2. Data Controller Information

For the purposes of all applicable data protection laws, the data controller responsible for your personal data is:
‌Gürteltier Handyzubehör GmbH‌
Kleine Friedensstraße 24
15328 Küstriner Vorland, Germany
Contact Email: fernld@gurteltier.com
Contact Phone: +49 33479 239

As the official data controller, we retain full and comprehensive legal responsibility for ensuring every data processing activity associated with our website adheres to all relevant data protection regulations. If you have any questions, concerns, or requests related to your personal data or this Privacy Policy, you can reach out to our data protection team at any time using the contact details provided above. We will respond to all legitimate user inquiries within 14 calendar days of receiving your communication, in full alignment with GDPR requirements.

3. Categories of Personal Data We Collect

We only collect personal data that is directly relevant to delivering our e-commerce services to you, in line with the core data minimization principle defined under Article 5 of the GDPR. The categories of personal data we may process include the following:

  • ‌Information you voluntarily provide to us during account creation and ordering‌: This includes your full name, billing and shipping addresses, email address, contact phone number, and payment details (including bank account information or payment service provider identifiers required to process your purchase). We also store any personal preferences you share with us, such as your favorite phone case styles, preferred product categories, or custom request notes you submit when placing an order.
  • ‌Automatically collected technical data‌: When you access www.gurteltier.com, our systems automatically log certain technical information about your device and browsing activity. This includes your device IP address, browser type and version, operating system details, time zone settings, website referral sources, pages you view on our site, time spent on each page, click paths, and other standard browsing behavior metrics. We also collect partial location data derived from your IP address when you interact with our site.
  • ‌Cookie and tracking related data‌: In compliance with the TDDDG, we process data generated through necessary and non-necessary cookies installed on your terminal device. This data may include unique device identifiers, browsing preference records, and information about how you interact with different features of our online store.
  • ‌Communication data‌: If you contact our customer support team via email, our website contact form, or other channels, we store the content of your messages, your associated contact details, and any follow-up response records to ensure we can resolve your inquiries effectively.
  • ‌Newsletter and marketing preference data‌: If you voluntarily opt in to receive our promotional emails or newsletter, we maintain a record of your email address, your consent status, and any records of your interactions with our marketing communications, including opens and clicks on promotional content.

We will never collect any sensitive special category personal data (such as information related to your race, religion, health status, or political beliefs) through our website, and we have not designed any data collection features that would request or process this type of information from our users.

4. Legal Basis for Data Processing

Every processing activity involving your personal data is supported by a clear, legally recognized basis as defined under Article 6 of the GDPR, as outlined below:

  1. ‌Processing based on contractual necessity (Article 6(1)(b) GDPR)‌: We process your name, shipping address, payment information, and order details exclusively to fulfill the sales contract we enter into with you when you make a purchase on our website. This processing is essential to process your order, arrange product shipment, verify payment, handle returns and refunds, and ensure we can fulfill all our contractual obligations to deliver the phone cases, Type-C accessories, and other mobile essentials you purchase from us. Without processing this data, we will be unable to complete your order and provide you with the products you have requested.
  2. ‌Processing based on your explicit, opt-in consent (Article 6(1)(a) GDPR)‌: For processing activities that go beyond what is strictly necessary to fulfill our sales contract, we will only process your data after we have obtained your clear, freely given, specific, and informed prior consent. This includes sending you our newsletter with new product announcements, exclusive promotional offers, and mobile accessory related recommendations, as well as processing your browsing behavior for non-necessary website analytics and personalized marketing purposes. You retain the full right to withdraw this consent at any time, with immediate effect, by sending an email to our team at fernld@gurteltier.com, or using the one-click unsubscribe link included at the bottom of every marketing email you receive from us. Withdrawing your consent will not affect the lawfulness of any data processing we completed before you submitted your withdrawal request.
  3. ‌Processing based on legitimate interests (Article 6(1)(f) GDPR)‌: For certain critical data processing activities, we rely on our legitimate business interests that do not override your fundamental privacy rights. This includes storing your IP address for the purpose of maintaining the security and stability of our website, preventing unauthorized access, identifying and mitigating cyberattacks, detecting fraudulent payment activity, and optimizing the performance of our online store to provide all users with a faster, more reliable browsing experience. We have completed a full legitimate interests assessment to verify that this processing does not adversely impact your privacy rights, and all such data processing is conducted in a way that minimizes any potential privacy risk to you.

For all non-necessary cookies that are not strictly required for the core function of our website (including analytics, advertising, and social media plugin cookies), we will only install these cookies on your device after you have provided your explicit, affirmative consent via our industry-standard consent management platform, in full compliance with Section 25(1) of the TDDDG. For technically necessary cookies that are required to ensure our website functions correctly (such as cookies that remember your cart contents while you browse, or maintain your logged in status for your user account), we process this data based on the provisions of Section 25(2) No.2 of the TDDDG, without requiring your separate explicit consent, as these cookies are strictly required to deliver the e-commerce services you have requested.

5. Purpose of Data Processing

We only use your personal data for the explicit, transparent purposes that we have disclosed to you at the point of data collection, and will never repurpose your data for any incompatible secondary use without providing you with new information and obtaining any required additional consent. The specific purposes for which we process your data are as follows:

  • To process, confirm, fulfill, and track your orders for phone cases, Type-C accessories, and other mobile products purchased through www.gurteltier.com, including arranging product shipment, coordinating with our logistics partners, and sending you real-time order status updates.
  • To process payments securely, verify transaction legitimacy, prevent payment fraud, and manage returns, exchanges, and post-purchase customer support requests.
  • To operate, maintain, optimize, and improve the functionality, performance, and user experience of our e-commerce website, including troubleshooting technical errors, identifying popular product categories, and testing new website features to better serve our customer base.
  • To send you service-related mandatory communications that are necessary for your use of our platform, such as notifications about updates to our Terms and Conditions, critical website security alerts, or important changes to our order fulfillment processes.
  • When you have provided your explicit opt-in consent, to send you personalized newsletters, information about new product launches, exclusive discounts, promotional campaigns, and updates related to our latest mobile accessory offerings. You can opt out of all marketing communications at any time, free of charge.
  • To respond to your customer support inquiries, answer your product questions, resolve any order-related disputes, and provide you with timely, helpful assistance whenever you contact our team.
  • To enforce our website terms of use, protect our legal rights, and defend against potential legal claims, as permitted by applicable data protection laws.
  • To comply with all legal and regulatory obligations that apply to our business, including tax reporting requirements, consumer protection regulations, and mandatory data retention rules set out under German and EU law.

6. Disclosure of Your Personal Data

We will never sell, rent, or trade your personal data to any unaffiliated third parties for their independent marketing purposes, under any circumstances. We only share your personal data with carefully selected third party service providers who are bound by strict data protection obligations, and only to the extent that such sharing is strictly necessary to deliver our e-commerce services to you. The categories of third parties we may share your data with include:

  • ‌Logistics and shipping partners‌: We share your full name, shipping address, and contact phone number with our trusted courier and delivery service providers, exclusively for the purpose of delivering your purchased products to the address you specify during checkout.
  • ‌Payment service providers‌: We share necessary payment-related data with our PCI DSS compliant payment processing partners, to securely process your transactions, verify payment authenticity, and prevent fraudulent payment activity. All payment processing activities are conducted in full adherence to global payment security standards.
  • ‌Cloud service and technical vendors‌: We work with encrypted, secure cloud hosting providers to store your order and account data, and with website analytics vendors that help us understand how users interact with our platform to improve our service quality. All of these third parties are required to comply with our strict data protection requirements.
  • ‌Legal authorities and regulatory bodies‌: We may only disclose your personal data if we are compelled to do so by binding, lawful official order issued by a competent German or European government authority, court, or regulator.

Before we transfer any of your personal data to any third party data processor, we will sign a formal Data Processing Agreement (Auftragsverarbeitungsvertrag) with that third party, in full compliance with the requirements of Article 28 of the GDPR. This agreement legally binds the processor to adhere to the same strict data protection standards we follow, prohibits them from processing your data for any purposes other than the explicit purposes we have authorized, and requires them to implement adequate technical and organizational security measures to protect your personal information.

7. Cross-Border Data Transfers

As an e-commerce business operating within Germany and the European Union, the vast majority of your personal data is stored and processed exclusively on servers located within the European Economic Area (EEA). In the limited scenarios where we may need to transfer your personal data to a third country located outside of the EEA, we will ensure that appropriate, legally recognized safeguards are in place to guarantee that your personal data receives a level of protection equivalent to the standards required under the GDPR.

If we transfer your personal data to a third country that the European Commission has not issued an adequacy decision confirming provides sufficient data protection, we will ensure that the data transfer is governed by the standard data protection clauses formally adopted by the European Commission, as outlined in Article 46(2)(c) of the GDPR. Upon your formal request, we will provide you with a full copy of these standard contractual clauses, or information on where you can access this document free of charge. We specifically note that any third-party visitor statistics tools or embedded code we use on our website that may process user data outside the EEA are fully configured to adhere to these cross-border transfer rules, and we conduct regular audits to verify all such embedded services maintain full GDPR compliance.

8. Data Retention Period

We will never store your personal data for any longer period than is strictly necessary to fulfill the explicit purposes for which the data was originally collected. The specific retention periods for different categories of personal data are as follows:

  • Order-related personal data (including your name, shipping address, payment details, and order history) will be retained for the full duration of our contractual relationship with you, and for an additional period of 10 years after your last order, to comply with German tax law and commercial record keeping requirements. After this mandatory retention period expires, this data will be securely anonymized or permanently deleted.
  • Personal data related to your user account (if you choose to create an account on our website) will be retained for as long as your account remains active. You can request to permanently delete your entire user account and all associated personal data at any time, and we will complete the deletion process within 30 calendar days, unless we are legally required to retain specific subsets of that data for extended regulatory compliance reasons.
  • Data related to newsletter marketing consent will be retained until you choose to unsubscribe from our marketing communications, at which point we will immediately remove your email address from all our marketing distribution lists.
  • Automatically collected browsing and IP address data stored for website security purposes will be retained for a maximum period of 30 days, after which this data will be deleted or anonymized so that it can no longer be linked back to an individual identifiable user.
  • Customer support communication records will be retained for 3 years after your inquiry is fully resolved, to ensure we can reference past interactions if you follow up with related questions at a later date.

After the relevant retention period expires, all of your personal data will be securely erased, encrypted beyond recovery, or anonymized so that it can no longer be associated with you as an identifiable natural person.

9. Your Data Protection Rights

Under the GDPR and German national data protection laws, you hold a comprehensive set of enforceable rights over your personal data. You can exercise any of these rights at any time, free of charge, by submitting a request to us using the contact details provided earlier in this document:

  • ‌Right of Access‌: You have the right to request a clear, transparent copy of all personal data we hold about you, alongside full information about the purposes of processing, the categories of data being processed, the recipients we have shared your data with, and the expected data retention period.
  • ‌Right to Rectification‌: If you find that any of the personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request immediate correction of that information. This includes updating your shipping address, changing your preferred contact email, or correcting any error in your order history records.
  • ‌Right to Erasure (Right to be Forgotten)‌: You have the right to request that we permanently delete all of your personal data from our systems, without undue delay, if the data is no longer necessary for the purposes for which it was collected, if you withdraw your consent to the processing, or if the processing no longer has any other valid legal basis. We will only deny this request if we are legally obligated to retain specific data to fulfill a legal obligation, such as mandatory tax record keeping requirements.
  • ‌Right to Restriction of Processing‌: You have the right to request that we temporarily suspend the processing of your personal data in specific circumstances, including if you contest the accuracy of your data, if the processing is unlawful but you do not want us to fully delete the data, or if we no longer need the data for our original processing purposes but you require the data to establish, exercise, or defend a legal claim.
  • ‌Right to Data Portability‌: You have the right to receive all the personal data you have provided to us, in a structured, commonly used, machine-readable format, and the right to request that we transmit this data directly to another data controller of your choice, where technically feasible.
  • ‌Right to Object to Processing‌: You have the right to object at any time to any processing of your personal data that we conduct based on our legitimate interests. If you submit an objection, we will immediately pause the processing of your data, unless we can demonstrate compelling legitimate grounds for the processing that override your privacy rights, or the processing is required to establish, exercise, or defend legal claims. You also have an absolute right to object to the processing of your personal data for direct marketing purposes, at any time and free of charge.
  • ‌Right to Withdraw Consent‌: For any processing activity that you previously provided explicit consent for, you retain the full right to withdraw that consent at any time, with immediate effect. Withdrawing your consent will not impact the lawfulness of any processing that we completed before your withdrawal was received.
  • ‌Right to Lodge a Complaint‌: If you believe that our processing of your personal data violates applicable data protection laws, you have the full right to submit a formal complaint to the competent local data protection authority in the German federal state where you reside, or the authority responsible for our business operations in Brandenburg, Germany.

When you submit a rights request, we may first ask you to provide minimal verification information to confirm your identity, to ensure that we are fulfilling the request for the legitimate data subject, and not disclosing personal data to an unauthorized third party. We will respond to all valid rights requests within one month of receiving your submission, in full compliance with GDPR timelines.

10. Data Security Measures

We have implemented a comprehensive set of technical and organizational security measures as required under Article 32 of the GDPR, to ensure the personal data we process is protected against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access. These security measures include, but are not limited to:

  • Full end-to-end HTTPS encryption for all traffic between your browser and our website, ensuring that all personal data you submit on www.gurteltier.com (including payment details and account login information) is encrypted during transmission.
  • Regular, scheduled backups of all our user data, stored on geographically separated encrypted servers to prevent total data loss in the event of a system failure.
  • Strict role-based access controls that limit access to personal user data exclusively to authorized members of our team who require access to perform their specific job functions (such as customer support agents and order fulfillment staff), with all access activity logged and audited on a regular basis.
  • Regular mandatory data protection training for all our staff, to ensure every team member understands their legal obligations to protect user personal data.
  • Ongoing security monitoring, regular vulnerability scans, and annual third-party penetration testing of our website systems, to identify and remediate any potential security risks before they can impact your personal data.

In the extremely unlikely event that a personal data breach occurs that poses a high risk to your rights and freedoms, we will notify the relevant competent data protection authority within 72 hours of becoming aware of the breach, and we will directly notify all affected individual users without undue delay, as required by applicable GDPR rules.

11. Protection of Minors

Our e-commerce website www.gurteltier.com is intended for general adult consumers who are 18 years of age or older. We do not intentionally collect any personal data from children under the age of 16, and our website is not designed to appeal to underage users. If you are the parent or legal guardian of a child who has submitted personal data to our website without your explicit permission, please contact us immediately at fernld@gurteltier.com, and we will take all necessary steps to securely delete that child’s personal information from all our systems as quickly as possible.

12. Updates to This Privacy Policy

From time to time, we may need to update and revise this Privacy Policy to reflect changes in our business operations, new legal regulatory requirements, or updates to our website functionality. When we make material changes to this Policy, we will update the Effective Date listed at the top of this document, and we will place a prominent notification on the homepage of www.gurteltier.com, and send a notification to all users with registered accounts. We encourage all our users to review this Privacy Policy periodically on a regular basis, to stay informed about how we are protecting your personal data. Any new revised version of this Privacy Policy will take effect 14 days after we publish the updated notice on our website.

13. Contact Information

If you have any questions, comments, concerns, or requests related to this Privacy Policy, or any aspect of how we handle your personal data, please do not hesitate to reach out to our data protection team:
‌Gürteltier Handyzubehör GmbH‌
Kleine Friedensstraße 24
15328 Küstriner Vorland, Germany
Email: fernld@gurteltier.com
Phone: +49 33479 239