Legal
Privacy policy
Draft. Placeholders in [brackets] must be filled in, and the text must be reviewed by a lawyer or a legal-text service before this site goes live.
This page explains which personal data is processed when you visit cope.tools or buy something in the shop. The site is built to collect as little as possible: no analytics and no third-party fonts. An advertising pixel (Meta) only loads after you accept marketing cookies.
Controller
Schings Holding UG (haftungsbeschränkt)[Street and number], [Postcode] Berlin, Germany
peter@cope.tools
Hosting
The site is delivered by Cloudflare, Inc. (Cloudflare Workers). To deliver pages, Cloudflare processes technical connection data such as IP address, time of request and browser information. Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in a secure and fast website. [Data processing agreement, data transfers to third countries and retention period: to be completed.]
Shopping cart and cookies
Your cart is stored only in your own browser (local storage). It is not sent to us until you start the checkout.
When the shop measures its ads, the site asks for consent and stores your choice in the first-party cookie
cope_consent (12 months). Without consent no marketing cookies are set.
Meta pixel (only with consent)
[If you accept marketing cookies, the Meta pixel of Meta Platforms Ireland Ltd. measures visits, cart and purchase events; paid orders are also reported server-side (Conversions API), deduplicated with the browser event. Legal basis: Art. 6 (1) (a) GDPR, revocable at any time under "Cookie settings" in the footer. Data transfers to third countries, retention and joint controllership: to be completed.]
Contact form and newsletter
[Messages from the contact form are stored in our shop system and forwarded to us by email (Resend). Newsletter sign-ups use double opt-in: we send a confirmation link and only write to confirmed addresses; every email has an unsubscribe link. Processors, legal bases and retention: to be completed.]
Payments via Stripe
Checkout and payment are handled by Stripe Payments Europe, Ltd. When you check out, the products in your cart are sent to Stripe, and you enter your name, address, email and payment details directly on Stripe's checkout page. We receive the order details needed to ship your order. Legal basis: Art. 6 (1) (b) GDPR — performance of a contract. [Stripe privacy policy link, retention periods under tax and commercial law: to be completed.]
Contact by email
If you email us, we process your message and contact details to answer it. Legal basis: Art. 6 (1) (b) or (f) GDPR. [Retention: to be completed.]
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a supervisory authority. [Responsible authority: to be completed.]