Legal & Privacy

1. General Provisions

This Privacy Policy governs the processing of personal data collected through the website www.bathvella.com (the “Website”). Operating as a commercial entity based in Germany, www.bathvella.com is fully committed to safeguarding personal privacy in strict accordance with the General Data Protection Regulation (GDPR) and relevant German national data protection laws, including the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).

2. Data Controller Identification

The data controller responsible for the collection, processing, and storage of personal data in connection with the operation of www.bathvella.com is:

• Website: www.bathvella.com
• Brand: Bathvella
• Contact Email: contact@bathvella.com

3. Types of Personal Data Collected

We collect and process only such personal data as is strictly necessary for the execution of our retail operations, communication, and order fulfillment. This includes:

• Contact details provided voluntarily (such as name, email address, telephone number, and delivery address).
• Transaction details and communication history related to your inquiries or purchases of bathroom goods.
• Technical connection data generated automatically during your visit to the Website (such as IP address, browser type, and access times) processed in accordance with legal operational parameters.

4. Purpose and Legal Basis for Data Processing

Personal data is processed exclusively under established legal frameworks pursuant to the GDPR:

• Contractual Performance: Processing necessary for the performance of a purchase contract or prior steps relating to orders of bathroom goods placed on www.bathvella.com (Article 6(1)(b) GDPR).
• Legal Obligations: Processing required to fulfill mandatory commercial, tax, and statutory retention obligations imposed by German and European law (Article 6(1)(c) GDPR).
• Legitimate Interests: Processing required to maintain Website functionality, administrative security, and customer service standards (Article 6(1)(f) GDPR).

5. Payment Processing via Stripe

To process financial transactions securely, www.bathvella.com utilizes Stripe as our payment processor. When you complete a transaction, your payment details (such as credit card information or other payment identifiers) are transmitted directly to Stripe.

Stripe processes your data as an independent data controller or processor in accordance with its own privacy regulations and rigorous international security standards. We do not store complete financial card instruments on our local servers. For comprehensive details regarding Stripe’s handling of personal data, please consult Stripe’s official privacy documentation.

6. Data Retention Periods

Personal data collected via www.bathvella.com is retained only for as long as necessary to fulfill the specific purposes for which it was collected, or to comply with statutory retention mandates under German law.

• Contractual and financial transaction records (including invoices, payment confirmations, and related correspondence) are retained for 10 years in compliance with commercial and tax code requirements (Handelsgesetzbuch – HGB and Abgabenordnung – AO).
• General customer inquiries and non-transactional correspondence are retained for 2 years following the final resolution of the communication, unless an ongoing contractual relationship requires otherwise.
• Upon the expiration of applicable statutory retention periods, personal data is systematically deleted or anonymised.

7. Data Subject Rights

Under the GDPR, individuals residing within the European Union possess distinct legal rights regarding their personal data. These include:

• The right to access stored personal data (Article 15 GDPR).
• The right to rectification of inaccurate data or completion of incomplete data (Article 16 GDPR).
• The right to erasure (“right to be forgotten”), subject to statutory archiving obligations (Article 17 GDPR).
• The right to restriction of processing (Article 18 GDPR).
• The right to data portability (Article 20 GDPR).
• The right to object to processing based on legitimate interests (Article 21 GDPR).

To exercise any of these rights, or to submit data protection inquiries, please contact our administrative team at contact@bathvella.com. You also retain the right to lodge a complaint with a competent European supervisory data protection authority.

8. Policy Updates

This Privacy Policy may be updated periodically to reflect ongoing adjustments in European regulatory frameworks or operational procedures. The governing version is consistently accessible directly on www.bathvella.com.