GDPR Art. 13

Privacy Policy

Information on the processing of personal data pursuant to the GDPR and the German Federal Data Protection Act (BDSG).

1. Controller

The controller within the meaning of the GDPR is the provider pursuant to Imprint.

2. Data Collected

2.1 Server Log Files

With every access, technically necessary data is collected (IP address, date/time, browser, referrer). Legal basis: Art. 6(1)(f) GDPR (legitimate interest: security, stability). Retention period: 7 days.

2.2 Order Data

Name, address, email, payment data for contract processing. Legal basis: Art. 6(1)(b) GDPR. Retention: 10 years (§147 AO, §257 HGB).

2.3 Newsletter (optional)

Email address with double opt-in. Legal basis: Art. 6(1)(a) GDPR. Withdrawal at any time via the link in every email.

2.4 Account Data

Upon registration: name, email, password (hashed). Legal basis: Art. 6(1)(b) GDPR. Deletion at any time upon request.

3. Cookies

We use technically necessary cookies (session, cart, login) as well as additional cookies subject to consent (analytics, marketing). Manage them in the cookie banner at the bottom left.

4. Recipients / Processors

Recipient	Purpose	Legal basis
NOWPayments	Crypto payment	Art. 6(1)(b)
Brevo (Sendinblue GmbH, DE/FR)	Delivery of order and shipping notifications	Art. 6 Abs. 1 lit. b + AVV
Cloudflare, Inc. (USA)	Content delivery network, website delivery and attack protection	Art. 6 Abs. 1 lit. f + SCC
DHL / UPS / FedEx	Shipping	Art. 6(1)(b)
HostGator / Newfold Digital (Hosting-Provider) *	Server operation	Art. 6(1)(f) + DPA

5. Third-Country Transfer

Insofar as data is transferred to third countries (USA), this is carried out on the basis of EU Standard Contractual Clauses (SCC) pursuant to Art. 46 GDPR.

6. Your Rights

Access (Art. 15 GDPR)
Rectification (Art. 16)
Erasure (Art. 17)
Restriction (Art. 18)
Data portability (Art. 20)
Objection to legitimate interest (Art. 21)
Complaint to a supervisory authority (Art. 77)

Requests to: support@alphasynth.store

7. Right to Lodge a Complaint

Zuständige Aufsichtsbehörde: Autoriteit Persoonsgegevens (niederländische Datenschutzbehörde), Bezuidenhoutseweg 30, 2594 AV Den Haag, Niederlande *

* Complete the mandatory fields: Enter the hosting provider and competent supervisory authority according to the actual place of business.

As of: April 2026

Cart

Every vial.Traceable.