Privacy policy

Last updated: July 10, 2026

1. Controller

Paramaniac Shop
Owner: Stephan Walkowiak
Grünwalder Str. 155
81545 Munich
Germany
Email: contact@paramaniac.de
Phone: +49 (0) 152 34 34 0294

2. General information about data processing

We process personal data only to the extent required to provide our online shop, customer service, order processing, and related services. Processing is based on the GDPR and applicable German privacy and telecommunications rules.

3. Legal bases

  • Art. 6(1)(a) GDPR - consent, for example for cookies, newsletter, chat, or marketing tracking.
  • Art. 6(1)(b) GDPR - contract performance, for example orders, payment, shipping, and customer communication.
  • Art. 6(1)(f) GDPR - legitimate interests, for example fraud prevention, server logs, shop security, and service improvement.

4. Hosting and infrastructure

Our shop system, ERP integration, search functionality, and live-chat infrastructure are primarily self-hosted on our own server in Germany.

For DNS, CDN, and DDoS protection we use Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare may process technical data such as IP addresses. Transfers to the USA are based on EU standard contractual clauses. More information: Cloudflare Privacy Policy.

5. Cookies

We use necessary cookies and, only after consent, statistics and marketing cookies.

Necessary cookies

  • checkout - cart and checkout session.
  • csrf_token - security token.
  • cookie_consent - stores your cookie settings.

Statistics cookies

  • _ga, _ga_* - Google Analytics.
  • _clck, _clsk - Microsoft Clarity.

Marketing cookies

  • _gcl_au - Google Ads conversion tracking.
  • _fbp, _fbc - Meta/Facebook Pixel.
  • _ttp - TikTok Pixel.
  • _uetmsclkid, _uetvid - Microsoft UET / Bing Ads.

6. Analytics tools

Analytics tools are activated only with your consent.

Google Analytics 4 is provided by Google Ireland Limited. It collects pseudonymous usage data for website optimization. IP anonymization is enabled where applicable. Transfers to the USA may take place on the basis of EU standard contractual clauses. Privacy policy.

Microsoft Clarity is provided by Microsoft Corporation. It may collect anonymized heatmaps and session recordings for UX improvement. Privacy statement.

7. Marketing tools

Marketing tools are activated only with your consent.

8. Payment processing

For payment processing we use external providers. Payment data is transmitted directly to the selected payment provider where required for contract performance.

  • Stripe - Stripe Payments Europe, Ltd., Ireland, for credit cards, SEPA, Apple Pay, Google Pay, and further payment methods. Privacy policy.
  • Klarna, where available via Stripe, for invoice and installment payments. Privacy policy.
  • PayPal - PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. Privacy statement.

9. Newsletter

Our newsletter is sent through Brevo / Sendinblue GmbH, Germany. Registration uses double opt-in. You can unsubscribe at any time using the unsubscribe link in each email or by contacting us. Legal basis is Art. 6(1)(a) GDPR. Privacy policy.

10. Live chat (Chatwoot)

We operate our live-chat system (Chatwoot) on our own infrastructure. The chat is part of the necessary shop and customer-service functionality for pre-purchase advice, order questions, and after-sales support. If you use the chat, we process your chat messages, technical connection data, and, if you are logged in, the customer contact data required for identification. The legal basis is Art. 6(1)(b) GDPR where the communication relates to orders or pre-contractual advice, and Art. 6(1)(f) GDPR for our legitimate customer-service interest.

11. WhatsApp and optional notifications

WhatsApp is an optional contact channel. If you click a WhatsApp link or write to us there, you leave our shop and use the service of WhatsApp Ireland Limited or the Meta group. This may involve processing of your phone number, communication content, metadata, and technical data. Optional order or shipping notifications by WhatsApp or SMS are sent only if you explicitly select them.

12. Cross-platform profile

With your consent, we may connect data within the Paramaniac platform, such as shop account, community forum, events, orders, newsletter subscriptions, and support history, to provide personalized service. Without activation, each platform works independently.

You can withdraw this consent at any time in your account settings under "Pilot experience" or by contacting us.

13. Contact form and email contact

If you contact us by form or email, we store the information you provide to process your request. Legal basis is Art. 6(1)(b) GDPR for pre-contractual or contractual communication and Art. 6(1)(f) GDPR for our legitimate interest in responding.

14. Server log files

Our server automatically records technical data such as IP address, browser type, operating system, referrer URL, and request time. These logs are used for security and troubleshooting and are deleted after 14 days.

15. SSL/TLS encryption

This site uses SSL/TLS encryption. You can recognize an encrypted connection by "https://" in your browser address bar.

16. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, port, object to processing, and withdraw consent with effect for the future. Contact us at contact@paramaniac.de.

17. Supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
www.lda.bayern.de

18. Changes

We may update this privacy policy to reflect changes in law, our services, or our technical setup. The current version is always available on this page.