Privacy policy

Short version: we use your data to deliver your order and run your account, and for nothing else. There are no advertising trackers or analytics on this site, and no third-party scripts, fonts or embeds.

Who is responsible

Switchboard Keyboards GmbH, Oranienstraße 190, 10999 Berlin, Germany. Email: hello@switchboard.example. Full company details are in the imprint.

What we process, why and on what legal basis

• Visiting the site: our server and hosting provider log technical data of each request (IP address, time, page, browser) so the site runs and stays secure. Legal basis: Art. 6(1)(f) GDPR, our interest in a secure and stable site.
• Orders: name, email, shipping and invoice address, the items and the payment status, to deliver, invoice and give warranty. Legal basis: Art. 6(1)(b) GDPR; we keep invoices and books as tax and commercial law require (Art. 6(1)(c) GDPR, up to 10 years).
• Your account: your email and, if you save them, your default address and phone number, so the checkout is prefilled. Sign-in runs through our own identity provider. Legal basis: Art. 6(1)(b) GDPR. In your account you can download your data and delete the account.
• Payment: you pay on the page of our payment provider. We receive the payment status and a reference, never your card number. Legal basis: Art. 6(1)(b) GDPR.
• Email about your order: confirmation, shipping notice, refund and the receipt of a withdrawal, sent by our email delivery provider. Legal basis: Art. 6(1)(b) GDPR.
• Withdrawal: the declaration you make on the withdrawal page (name, order number, email, items, date and time) is stored with the order and confirmed to the address you typed, whether or not it matches an order. Legal basis: Art. 6(1)(c) GDPR with section 356a BGB.
• Order lookup: if you ordered without an account, we email a link to your order to the address of the order. Legal basis: Art. 6(1)(b) GDPR.
• Newsletter: only if you ask for it. We send a confirmation mail first (double opt-in) and store your address, the time of the request and of the confirmation, where you asked and a signature as proof. You can withdraw at any time with the link in every mail or in your account. Legal basis: your consent, Art. 6(1)(a) and 7 GDPR.
• Back-in-stock notice: if you ask for one, we store your email and the product, ask you to confirm by link, and send one message when it is available. Legal basis: your consent, Art. 6(1)(a) GDPR; you can withdraw it by writing to us.
• Reviews: only buyers of a product can review it (we say so next to the reviews). Your stars, title, text and the name shown are published after our check. Legal basis: Art. 6(1)(f) GDPR, our interest in honest product information.
• Wishlist: the products you save are kept in a cookie on your device.
• Messages to us: what you write and your address, to answer you. Legal basis: Art. 6(1)(b) or (f) GDPR.

Giving us the data for an order is required to make the contract; without it we cannot deliver. Everything else is voluntary. We take no automated decisions and do no profiling.

Cookies

We set only cookies the shop needs or that you asked for. They need no consent (section 25(2) no. 2 TDDDG). We use no analytics, advertising or third-party cookies.

• shop_session: keeps you signed in. It lasts until you sign out or up to 30 days.
• shop_cart: remembers your cart. It lasts up to 14 days.
• shop_wishlist: remembers the products you saved. It lasts 180 days.
• shop_flash: carries one message (for example a form error) to the next page and expires after two minutes.
• shop_locale: remembers the language you chose with the language switcher, for one year. It is only set when you switch languages.

Who receives data

Our payment provider, the parcel carrier (name and address, email or phone for delivery notices), our hosting provider, our email delivery provider and our tax advisor. All are bound by data-processing agreements or their own legal duties. Where a provider processes data outside the EU or EEA, this happens only under an adequacy decision or the EU standard contractual clauses.

How long we keep it

Order and invoice data is kept for the periods that German tax and commercial law require (up to 10 years). Account data is kept until you delete your account. Newsletter proof is kept while the consent stands and for the limitation period afterwards. Messages are deleted after the matter is closed.

Your rights

• Access to the data we hold about you (Art. 15 GDPR)
• Correction of wrong data (Art. 16)
• Deletion, where no legal duty to keep it applies (Art. 17)
• Restriction of processing and data portability (Art. 18, 20)
• Objection to processing based on our legitimate interest (Art. 21)
• Withdrawal of a consent at any time, with effect for the future (Art. 7(3))

Write to hello@switchboard.example and we answer within one month. You can also complain to the supervisory authority: the Berlin Commissioner for Data Protection and Freedom of Information.