Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

Uladzislau Haiduk, sole proprietor Henschelring 2A 85551 Kirchheim bei München, Germany

Email: u.haiduk@watches4collectors.com Telephone: +49 173 8605674

We have not appointed a data protection officer, as we are not required to do so.

2. General Information

We process personal data only where there is a legal basis for doing so. Depending on the processing, that basis is:

Art. 6 (1) (b) GDPR — performance of a contract or steps taken at your request before entering into a contract
Art. 6 (1) (c) GDPR — compliance with a legal obligation, in particular commercial and tax record-keeping
Art. 6 (1) (f) GDPR — our legitimate interests, where these are not overridden by your interests
Art. 6 (1) (a) GDPR — your consent, where we ask for it

Where we rely on consent, you may withdraw it at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before it.

3. Hosting and Server Log Files

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. We have concluded a data processing agreement with IONOS in accordance with Art. 28 GDPR.

The data is processed on servers within the European Union or the European Economic Area. Under that agreement, a transfer to a third country takes place only where it is necessary for the provision of the service, and then only subject to the safeguards required by Art. 44 et seq. GDPR. IONOS is certified to ISO 27001 for information security management.

Each time this website is accessed, the hosting provider’s system automatically records technical data in log files:

the IP address of the requesting device
the date and time of access
the page or file requested
the referring website, where transmitted
the browser type and version, and the operating system

This data is processed on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure and stable operation of the website and in the investigation of technical faults and misuse. Log file data is deleted as soon as it is no longer required for these purposes, and at the latest on expiry of the storage period applied by our hosting provider. It is not merged with other data and is not used to identify individual visitors.

4. Encryption

This website uses SSL/TLS encryption. You can recognise an encrypted connection by the https:// prefix in the address bar and the padlock symbol. While encryption is active, the data you transmit to us cannot be read by third parties.

5. Cookies and Consent Management

We use cookies and comparable technologies. Cookies that are technically necessary for the operation of the website and the shop — for example to keep the contents of your shopping cart or to keep you logged in — are used on the basis of § 25 (2) TDDDG and Art. 6 (1) (f) GDPR.

All other cookies and services are only used after you have given your consent, on the basis of § 25 (1) TDDDG and Art. 6 (1) (a) GDPR.

To obtain and document consent we use Real Cookie Banner, a product of devowl.io GmbH, Germany. The plugin runs on our own server; no consent data is transferred to the provider. Real Cookie Banner stores the following in your browser and in our database in order to document your decision: the consents you have given, the time of consent, an anonymised identifier, the banner version and your device and browser information. Consent records are retained for the statutory period so that we can demonstrate compliance.

You can change or withdraw your settings at any time via the cookie settings link in the footer of this website.

6. Fonts

The fonts used on this website are hosted on our own server. No connection is made to Google servers when you visit the site, and no data — in particular no IP address — is transmitted to Google for this purpose.

7. Contacting Us

By email or telephone. If you contact us by email or telephone, we process the data you provide — such as your name, contact details and the content of your enquiry — in order to deal with your request. The legal basis is Art. 6 (1) (b) GDPR where the enquiry relates to a contract or pre-contractual steps, and otherwise Art. 6 (1) (f) GDPR, our legitimate interest in responding to enquiries.

Via the contact form. Our contact form uses the Fluent Forms plugin, which runs on our own server. The data you enter is stored in our website database and is also sent to us by email. It is not passed to the plugin’s provider or to any other third party. The legal bases are the same as above.

Via WhatsApp. If you contact us via WhatsApp, the processing of your data on that platform is subject to the terms of WhatsApp Ireland Ltd. Data may be transferred to servers of Meta Platforms, Inc. in the United States. We have no influence over this processing. If you would prefer to avoid it, please contact us by email or telephone instead.

We retain the content of enquiries until they have been fully dealt with, and thereafter for as long as statutory retention periods require.

8. Customer Account

You can create a customer account in our shop. We process the data you provide during registration — in particular your name, address, email address and password in encrypted form — together with your order history. This allows you to place orders without re-entering your details and to view your previous orders.

The legal basis is Art. 6 (1) (b) GDPR. You can delete your customer account at any time. Data that is subject to statutory retention periods will be restricted rather than deleted until those periods expire.

Ordering as a guest, without creating an account, is also possible.

9. Orders and Shop Operation

Our shop runs on WooCommerce, installed on our own server.

When you place an order we process your name, billing and delivery address, email address, telephone number where provided, the items ordered, the payment method and the payment status. This data is required to conclude and perform the contract; the legal basis is Art. 6 (1) (b) GDPR. In addition we are required by commercial and tax law to retain order and invoice data, which we do on the basis of Art. 6 (1) (c) GDPR.

Recipients. In order to fulfil your order we pass on the data that is necessary for that purpose to:

the payment service provider you select (see section 10)
our shipping service providers, Parcelbroker and GoRocket, which arrange the transport for us and receive your name and delivery address, together with your email address or telephone number where this is needed for delivery notifications
the carrier selected for your shipment. Depending on the destination and the value of the consignment, transport is carried out by FedEx, UPS, DHL Express or a specialist insured-freight forwarder. The delivery data required for the shipment is passed to that carrier
our tax advisor, for the purposes of bookkeeping and tax returns
public authorities, where we are legally obliged to provide the data

10. Payment Service Providers

Bank transfer. If you pay by advance bank transfer, your payment data is processed by your bank and ours. We receive the payment reference and the details shown on the bank statement.

Credit card via Stripe. Payments by card are processed by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Your card details are entered directly with Stripe and are not stored by us. Stripe may transfer data to its parent company Stripe, Inc. in the United States. Stripe is certified under the EU-US Data Privacy Framework, on the basis of which the European Commission has recognised an adequate level of data protection. The legal basis is Art. 6 (1) (b) GDPR.

Instalment purchase via Klarna. Payments by instalment are processed by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna acts as an independent controller for this processing. In order to decide whether to offer you instalment payment, Klarna carries out a credit assessment and for this purpose obtains information from credit reference agencies. The result of that assessment determines whether the payment method is available to you. The legal bases are Art. 6 (1) (b) GDPR and Art. 6 (1) (f) GDPR. Further information is available in Klarna’s own privacy notice, which is shown to you during the ordering process.

11. Transfers to Third Countries

Personal data may reach recipients outside the European Union or the European Economic Area in the following cases:

Stripe (section 10), which may transfer data to its parent company in the United States. Stripe is certified under the EU-US Data Privacy Framework, on the basis of which the European Commission has recognised an adequate level of data protection.
WhatsApp (section 7), if you choose to contact us that way.
International carriers (section 9). Where FedEx or UPS carry your shipment, delivery data may be processed by group companies outside the EU. These carriers process the data as independent controllers under their own privacy notices.

Apart from these cases, we do not transfer personal data to third countries.

12. Retention Periods

We retain personal data only for as long as is necessary for the purposes described here, or for as long as statutory retention obligations require:

Invoices, order data and booking records: ten years, in accordance with § 147 of the German Fiscal Code
Commercial and business correspondence: six years, in accordance with § 257 of the German Commercial Code
Server log files: deleted once they are no longer needed for security and fault analysis
Enquiries that do not lead to a contract: deleted once the matter has been dealt with, unless a retention period applies
Customer account data: until you delete the account, subject to the periods above
Consent records: for the statutory period, so that consent can be demonstrated

13. Automated Decision-Making

We do not carry out automated decision-making or profiling on this website.

Where you select instalment payment, Klarna carries out an automated credit assessment as described in section 10, and the availability of that payment method depends on the result. This assessment is carried out by Klarna as controller, not by us. You may object to a decision reached in this way, express your point of view and request human intervention by contacting Klarna directly.

14. Your Rights

You have the following rights in relation to the personal data we hold about you:

Access (Art. 15 GDPR) — to obtain confirmation of whether we process your data, and a copy of it
Rectification (Art. 16 GDPR) — to have inaccurate data corrected
Erasure (Art. 17 GDPR) — to have your data deleted, where no retention obligation applies
Restriction (Art. 18 GDPR) — to have processing restricted
Data portability (Art. 20 GDPR) — to receive your data in a structured, machine-readable format
Withdrawal of consent (Art. 7 (3) GDPR) — at any time, with effect for the future

To exercise any of these rights, write to u.haiduk@watches4collectors.com. Exercising them is free of charge.

15. Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Art. 6 (1) (f) GDPR.

If you object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to establish, exercise or defend legal claims.

Where your data is processed for direct marketing purposes, you have the right to object at any time without giving reasons. If you object, your data will no longer be processed for those purposes.

To object, write to u.haiduk@watches4collectors.com.

16. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes data protection law, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18 91522 Ansbach, Germany

You may also lodge a complaint with the supervisory authority in your place of residence or work.

17. Provision of Data

Providing certain data is necessary in order to conclude a contract with us — in particular your name, address and contact details. If you do not provide it, we will not be able to process your order. Beyond that, you are under no obligation to provide personal data.

18. Changes to This Privacy Policy

We update this privacy policy when changes to our website or to the law make it necessary. The version published here is the version that applies.

Status: 13.08.2026