Privacy notice
Datenschutzerklärung under the GDPR (EU 2016/679), the German BDSG and the TTDSG. What we collect, why, for how long, and what you can demand of us.
Last updated: 12 August 2026
1 · Controller
The controller for the processing described here is Jahn-Lederwaren GmbH, Dischingerweg 19, 72070 Tübingen, Germany. Email support@jahnlederwaren.shop, telephone +49 1601984639. Company details are on the Impressum page.
We have not appointed a data protection officer, as we are not required to under Art. 37 GDPR / §38 BDSG. Data protection enquiries go to the address above and are handled by the management.
2 · What we process, and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Name, address, email, phone | Processing and delivering your order, and writing to you about it | Art. 6(1)(b) — performance of a contract | Duration of the contract, then 6 or 10 years under German commercial and tax retention rules (§257 HGB, §147 AO) |
| Order contents and value | Invoicing, accounting, warranty and withdrawal handling | Art. 6(1)(b) and 6(1)(c) — contract and legal obligation | 10 years (tax) |
| Contact form entries | Answering your message | Art. 6(1)(b) where it concerns a contract, otherwise 6(1)(f) — our legitimate interest in answering enquiries | Deleted 12 months after the matter is closed |
| Bespoke enquiry, including desk measurements | Preparing a written quotation | Art. 6(1)(b) — pre-contractual steps at your request | Deleted 12 months after the quotation lapses |
| Email address for the newsletter | Sending occasional letters about new sizes and care | Art. 6(1)(a) — consent, withdrawable at any time | Until you unsubscribe |
| Server log data (IP, time, page, user agent) | Operating the site securely and diagnosing faults | Art. 6(1)(f) — legitimate interest in a working, secure shop | Short-lived, held by the hosting provider |
3 · The Desk Layout Builder does not send us anything
The desk width, depth, handedness and intended use you enter in the Desk Layout Builder are processed entirely in your own browser. They are not transmitted to us, not logged, and not stored on any server. The exported PNG is rasterised on your machine. The only way those measurements reach us is if you choose to type them into the bespoke enquiry form and submit it.
4 · Cookies and local storage
We set only what is technically necessary to run the shop: your basket contents and your cookie decision, both held in your browser's local storage. These are strictly necessary within the meaning of §25(2) TTDSG and require no consent.
We currently run no analytics, no advertising pixels, no social plug-ins and no third-party trackers. Should that ever change, the relevant technology will stay switched off until you actively consent, and refusing will remain exactly as easy as accepting. See the cookie policy for the itemised list.
5 · Who else sees your data
- The carrier delivering your parcel receives your name, address and, where you gave one, your phone number or email for delivery notifications.
- Our payment provider receives what it needs to take the payment. Card details are entered on the payment step and never on our own pages; we do not see or store card numbers.
- Our hosting and email providers process data on our behalf under Art. 28 GDPR data processing agreements.
- Our tax adviser and the tax authorities, to the extent required by law.
We do not sell personal data, and we do not pass it to anyone for their own marketing.
6 · Transfers outside the EU/EEA
Our processing takes place within the EU/EEA wherever possible. Where a provider processes data in a third country, we rely on an adequacy decision of the European Commission or on the Standard Contractual Clauses under Art. 46(2)(c) GDPR, together with supplementary measures where required. You can ask us for a copy of the safeguards in place.
7 · Your rights
Under the GDPR you have the right to:
- access the data we hold about you (Art. 15);
- have inaccurate data corrected (Art. 16);
- have data erased, where no retention obligation stands in the way (Art. 17);
- restrict processing (Art. 18);
- receive your data in a portable format (Art. 20);
- object to processing based on legitimate interests, on grounds relating to your particular situation (Art. 21);
- withdraw consent at any time with effect for the future, without affecting the lawfulness of what was done before (Art. 7(3)).
Write to support@jahnlederwaren.shop. We answer within one month and we do not charge for it. You may also complain to a supervisory authority — for us that is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, or the authority where you live or work.
8 · Is providing data mandatory?
Only in the sense that we cannot deliver a parcel without an address or answer a message without a reply route. Nothing beyond that is required, and the fields marked optional are genuinely optional.
9 · Automated decision-making
We carry out no automated decision-making and no profiling within the meaning of Art. 22 GDPR.
10 · Security
The site is served over TLS; you can see this in your browser's address bar. We apply appropriate technical and organisational measures under Art. 32 GDPR and keep access to order data limited to the people who need it.
11 · Changes
We update this notice when the processing changes. The date at the top of the page shows the current version.
Questions about this page? Write to support@jahnlederwaren.shop or call +49 1601984639. Governing law: Federal Republic of Germany.