1. Data Controller Identification
The data controller responsible for the processing of personal data on www.slouchstand.com is:
- Brand / Data Controller: slouchstand
- Website: www.slouchstand.com
- Contact Email: lazy@slouchstand.com
- Location: Germany
slouchstand determines the purposes and means of processing personal data collected from customers located within Europe and the United States.
2. Information Collected & Processing Purposes
slouchstand processes personal information strictly necessary for contract fulfillment, order handling, customer service, and compliance with statutory record-keeping duties.
- Identification & Contact Data: Name, billing address, delivery address, and email address provided during the checkout process to complete product delivery.
- Transaction Data: Details regarding items purchased, order history, and payment status required for customer account management and legal accounting compliance.
3. Payment Processing
To facilitate transaction processing on www.slouchstand.com, payment processing services are provided by Stripe.
When placing an order, payment data is transmitted to and processed directly by Stripe in accordance with their applicable privacy notices and security protocols. slouchstand does not collect, store, or process full payment card details on its own servers. Processing by Stripe enables secure handling of payments, transaction verification, and fraud prevention in accordance with European and United States regulatory requirements.
4. Data Retention Periods
slouchstand retains personal data only for as long as necessary to fulfill the operational purposes for which it was collected or to satisfy statutory retention requirements under applicable commercial and tax law:
- Contractual Execution & Order Data: Retained for the duration of the active commercial relationship and post-purchase handling.
- Statutory Commercial & Tax Records: Transaction records and invoices are retained for up to 10 years following completion of the transaction, pursuant to the German Commercial Code (Handelsgesetzbuch – HGB) and German Tax Code (Abgabenordnung – AO), as well as applicable European and United States accounting disclosure standards.
- Customer Inquiries: General email correspondence sent to lazy@slouchstand.com is retained for up to 3 years from the end of the calendar year in which the inquiry was resolved, matching statutory limitation periods.
Upon expiration of statutory retention obligations, personal data is deleted or rendered anonymous in accordance with data protection rules.
5. Data Subject Rights
Under the European Union General Data Protection Regulation (GDPR) and relevant United States privacy legislation, individuals residing in Europe and the United States maintain specific rights regarding their personal data:
- Right of Access: Request confirmation regarding whether personal data is processed and obtain a copy of such data.
- Right to Rectification: Request correction of inaccurate or incomplete personal records.
- Right to Erasure: Request deletion of personal data when retention is no longer necessary or authorized by law.
- Right to Restriction of Processing: Request limitation of data handling under specific legal statutory conditions.
- Right to Data Portability: Obtain provided personal data in a structured, standard format.
To exercise any applicable statutory rights, please contact slouchstand directly at lazy@slouchstand.com.
6. International Data Transfers
Where personal data is transferred across jurisdictions between Europe and the United States for order execution or third-party service integration, slouchstand ensures appropriate safeguards are implemented in compliance with applicable international data protection standards.