Privacy policy
Last updated: 09 September 2026
We process personal data only where it is necessary to run this shop. This English version is a courtesy translation; the German version is legally binding.
1. Controller
Controller within the meaning of the GDPR: Henco2 GmbH, Badweg 1, 83126 Flintsbach a. Inn, email info@henco2-gmbh.de, phone +49 175 223 9594.
2. Visiting the website (server logs)
When you visit the site we process technically necessary data: IP address, date and time, page requested, volume transferred, referrer, browser and operating system.
The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in secure and stable operation. Logs are deleted or truncated after 7 days at the latest.
3. Orders and payment
To process an order we handle your name, delivery and billing address, email address and the product configuration you chose. The legal basis is Art. 6(1)(b) GDPR (performance of a contract).
Payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Payment details go directly to Stripe; we never receive them. Stripe's privacy policy applies in addition: https://stripe.com/privacy
If you choose Klarna, Stripe passes your order and contact details to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna is an independent controller and runs a credit check for pay-later options: https://www.klarna.com/international/privacy-policy/
If you save your details with Stripe Link, Stripe creates an account with itself on the basis of your consent to Stripe. For iDEAL and Wero the respective provider's terms apply; this data also passes through Stripe only. Stripe may transfer data to Stripe, Inc. in the USA under the EU-US Data Privacy Framework and the EU standard contractual clauses.
An engraving text you enter is part of the order. It may contain personal data, such as a name, and is kept together with the order data.
Invoice-related data is retained for 10 years under German commercial and tax law.
4. Cart and configurator
Your cart and your current bracelet configuration are stored solely in your browser (localStorage, key “razelet.cart.v1”). This data only reaches our server once you start the checkout.
The language identifier in the address is technically necessary and does not require consent.
5. Contact
The contact form hands your message to your own email program; nothing is stored on our server. If you email us, we process your details to handle the request (Art. 6(1)(b) or (f) GDPR) and delete the message once it is dealt with, unless a retention obligation applies.
6. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Consent can be withdrawn at any time.
To exercise these rights, simply write to info@henco2-gmbh.de.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for our registered office is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
7. Analytics
We use Vercel Web Analytics to count page views and checkout steps in aggregate. It sets no cookies and stores nothing on your device; it derives a short-lived hash from IP address and browser signature that expires after 24 hours. We only see aggregate numbers, never individuals. Legal basis is Art. 6(1)(f) GDPR — our legitimate interest in improving the shop.
We use no Google Analytics, Meta pixel, TikTok pixel or other services that would require consent.