Sternenherz

PRIVACY POLICY

This Privacy Policy explains how personal data is processed when you visit and use this website, contact us, interact with embedded content, or use services connected to Sternenherz.

Controller

The controller responsible for data processing on this website is:

Philip Kammerl
Bahnhofstr. 34
82194 Groebenzell
Germany

Email: support (at) sternen-herz.de

Personal Data We Process

Depending on how you use this website, we may process the following categories of personal data:

  • technical access data, such as IP address, date and time of access, browser type and version, operating system, referrer URL, requested files or pages, HTTP status code and transferred data volume;
  • communication data, such as your name, email address and message content if you contact us by email or through a contact form;
  • consent data relating to cookies and similar technologies;
  • usage data generated when interacting with embedded third-party content, such as YouTube videos, if you have consented to loading such content;
  • purchase-related data if you buy digital products or software through a checkout or payment provider.

Purposes of Processing

We process personal data for the following purposes:

  • to provide, secure and technically operate this website;
  • to respond to contact requests and support messages;
  • to manage cookie and content-consent preferences;
  • to display embedded content only after consent where required;
  • to provide information about Sternenherz products, software and music;
  • to process or support digital purchases, license delivery and customer support where applicable;
  • to comply with legal obligations.

Legal Bases

Where we obtain your consent, the legal basis is Art. 6(1)(a) GDPR.

Where processing is necessary for the performance of a contract or for pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR.

Where processing is necessary to comply with a legal obligation, the legal basis is Art. 6(1)(c) GDPR.

Where processing is necessary to protect our legitimate interests and your interests or fundamental rights and freedoms do not override those interests, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interests include the secure and reliable operation of this website, protection against misuse, and communication with visitors and customers.

Hosting and Server Log Files

When you visit this website, the hosting provider automatically processes technical access data that your browser transmits to the server. This may include:

  • IP address;
  • date and time of access;
  • browser type and version;
  • operating system;
  • referrer URL;
  • requested page or file;
  • HTTP status code;
  • transferred data volume.

This processing is necessary to display the website, maintain technical stability, ensure security and investigate potential misuse or attacks. The legal basis is Art. 6(1)(f) GDPR.

Server log files are stored only for as long as necessary for security, technical operation and legal purposes, unless a longer retention period is required in an individual case, for example to investigate attacks or legal violations.

Cookies and Similar Technologies

This website may use cookies and similar technologies. Cookies are small text files stored on your device. Similar technologies may include local storage, pixels, web beacons or comparable technical methods.

Some cookies and similar technologies are technically necessary for the operation of the website. Others are used only after your consent, for example to load external media such as YouTube videos.

You can configure your browser to block or delete cookies. If you disable cookies completely, some functions of this website may not work properly.

Real Cookie Banner

To manage the cookies and similar technologies used on this website, such as tracking pixels, web beacons and similar technologies, and the related consents, we use the consent tool “Real Cookie Banner”.

Details on how “Real Cookie Banner” works can be found at:
https://devowl.io/rcb/data-processing/

According to the provider, Real Cookie Banner is installed and operated on our own WordPress website and stores consent settings and documented consents in the WordPress database of this website. The tool uses technically necessary cookies or comparable storage mechanisms to remember your consent choices and to document them.

The legal basis for processing personal data in this context is Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest is the legally compliant management and documentation of the cookies and similar technologies used and the related consents.

Where consent is required for certain cookies or similar technologies, the storage of information on your device or access to information already stored on your device is based on your consent. Where cookies or similar technologies are technically necessary, they are used because they are required for the operation of the website and consent management.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we may not be able to manage your consents correctly.

YouTube Videos

This website may embed videos from YouTube. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

YouTube videos are loaded only after you have given your consent through our consent banner or content blocker. Before consent is given, the video content should remain blocked and no direct connection to YouTube should be established by the embedded player.

When you load or play a YouTube video, personal data may be transmitted to Google. This may include your IP address, technical device information, browser information, the page you visited, interaction data and usage data. Google may also process data in the United States or other third countries.

The legal basis for loading YouTube content is your consent under Art. 6(1)(a) GDPR. Where cookies or similar technologies are used, the related consent requirements for storing or accessing information on your device also apply.

You can withdraw your consent at any time through the consent settings on this website.

Further information is available in Google’s Privacy Policy:
https://policies.google.com/privacy

Contact by Email or Contact Form

If you contact us by email or through a contact form, we process the data you provide, such as your name, email address and message content, in order to respond to your request.

The legal basis is Art. 6(1)(f) GDPR. If your request relates to a contract, software license, purchase or pre-contractual communication, the legal basis may also be Art. 6(1)(b) GDPR.

We store contact requests only for as long as necessary to process your request and comply with possible legal retention obligations.

Digital Purchases and Payment Providers

If digital products, software licenses or downloads are sold through this website, the checkout and payment process may be handled by an external payment or merchant-of-record provider, such as Lemon Squeezy or another payment service provider.

In that case, the provider may process personal data such as name, email address, billing information, payment information, tax information, order data and transaction metadata. The respective provider is responsible for its own processing activities unless otherwise stated.

Please review the privacy information provided during checkout and by the payment provider. We process purchase-related information only as necessary to provide support, manage licenses, fulfill contractual obligations and comply with legal obligations.

Disclosure of Data to Third Parties and Processors

We do not sell personal data.

Personal data may be shared with third parties or processors where this is necessary for website hosting, technical operation, customer communication, payment processing, legal compliance or the enforcement of rights.

Where processors are used, we select them carefully and, where required, conclude data processing agreements under Art. 28 GDPR.

Transfers to Third Countries

Some external services, especially services provided by international technology companies, may process data outside the European Union or the European Economic Area. Where such transfers occur, they are based on appropriate safeguards, adequacy decisions, standard contractual clauses, consent or another legal basis under Art. 44 et seq. GDPR.

Data Retention

Unless a more specific retention period is stated in this Privacy Policy, we store personal data only for as long as necessary for the respective purpose.

Data may be stored for a longer period where legal retention obligations apply, where this is necessary for contract performance, or where the data is required to establish, exercise or defend legal claims.

Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

Your Rights

Under the GDPR, you have the following rights, subject to the applicable legal requirements:

  • the right of access under Art. 15 GDPR;
  • the right to rectification under Art. 16 GDPR;
  • the right to erasure under Art. 17 GDPR;
  • the right to restriction of processing under Art. 18 GDPR;
  • the right to data portability under Art. 20 GDPR;
  • the right to object under Art. 21 GDPR;
  • the right to withdraw consent at any time under Art. 7(3) GDPR.

If you believe that the processing of your personal data violates data protection law, you also have the right to lodge a complaint with a competent data protection supervisory authority.

Withdrawal of Consent

Where processing is based on your consent, you can withdraw that consent at any time with effect for the future. The lawfulness of processing based on consent before its withdrawal remains unaffected.

Objection to Processing Based on Legitimate Interests

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.

Security

We use appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration or destruction. This website uses SSL/TLS encryption to protect data transmitted between your browser and our server.

Changes to This Privacy Policy

We may update this Privacy Policy when our website, services, legal requirements or data processing activities change. The current version is available on this website.

Last updated: July 2026