// Legal
Privacy Policy
Pursuant to GDPR, BDSG and TMG1. Controller
Ramil Abil
Römerstraße 28, 82049 Pullach im Isartal, Germany
Email: support_gravex@protonmail.com
2. Principles of Data Processing
We process personal data only where permitted by law or where you have given consent. We collect only data necessary for the respective purpose (Art. 5 para. 1 lit. c GDPR).
3.1 When Visiting This Website
When you access this site, technically necessary information is recorded in server log files: IP address (anonymized), date and time, page accessed, browser type, operating system, referrer URL. Legal basis: Art. 6 para. 1 lit. f GDPR.
3.2 When Purchasing a Digital Product
When purchasing, the following data is processed via Shopify: name, email address, billing address, payment information (processed exclusively by Shopify Payments — we do not see card details). Legal basis: Art. 6 para. 1 lit. b GDPR. Retention period: up to 10 years (§ 257 HGB, § 147 AO).
3.3 Email Contact
When you contact us by email, we store your address and the message content. This data is not shared with third parties.
4. Cookies
This website uses only technically necessary cookies. No tracking, analytics or marketing cookies are set. The only cookie stores your cookie notice confirmation (localStorage).
5.1 Shopify Inc.
We use Shopify as our e-commerce platform. A Data Processing Agreement is in place. Shopify is certified under the EU-US Data Privacy Framework.
shopify.com/legal/privacy
6. Your Rights
You have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21), and to lodge a complaint with the competent supervisory authority.
Competent authority: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach — lda.bayern.de
7. Data Security
This website uses HTTPS encryption. Payments are processed via Shopify's PCI-DSS compliant system.
Last updated: 29.04.2026