Privacy policy

Last updated: March 2026

1. Responsible Entity

The entity responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

ida.nervt | SANCTUM

Ludwig-Erhard-Straße 18

c/o IP-Management #8665

20459 Hamburg

Germany

Email: support@idanervt-sanctum.com

2. General Information on Data Processing

The protection of your personal data is important to us. We process personal data exclusively in accordance with the applicable legal regulations, in particular the General Data Protection Regulation (GDPR).

Personal data refers to all information relating to an identified or identifiable natural person.

3. Personal Data We Collect

We collect personal data in particular in the following cases:

• when placing an order in our shop

• when creating a customer account

• when contacting us by email

• when using our website

The following data may be processed:

• Name

• Billing and shipping address

• Email address

• Phone number

• Payment information

• Order and transaction data

• IP address

• Device and browser information

4. Purposes and Legal Basis of Processing

We process personal data for the following purposes:

Contract Fulfillment

For processing orders, payments and shipping. Legal basis: Art. 6(1)(b) GDPR.

Customer Communication

For handling inquiries and support requests. Legal basis: Art. 6(1)(b) or Art. 6(1)(f) GDPR.

Legal Obligations

To comply with tax and commercial record keeping obligations. Legal basis: Art. 6(1)(c) GDPR.

Technical Operation of the Website

To ensure functionality and IT security of the website. Legal basis: Art. 6(1)(f) GDPR.

5. Hosting and Shop System (Shopify)

Our online shop is operated via Shopify Inc.

151 O’Connor Street, Ottawa, Ontario K2P 2L8, Canada

Shopify provides the technical infrastructure, hosting services and functions required to process orders.

Shopify may process data outside the European Union. In such cases, appropriate safeguards such as standard contractual clauses are used.

Further information:

https://privacy.shopify.com

6. Payment Service Providers

Shopify Payments

If Shopify Payments is selected, payment processing is handled by Shopify or its integrated payment providers.

PayPal

PayPal (Europe) S.à r.l. et Cie, S.C.A.

22–24 Boulevard Royal

L-2449 Luxembourg

If you choose to pay with PayPal, your payment data will be transmitted to PayPal.

https://www.paypal.com/webapps/mpp/ua/privacy-full

Klarna

Klarna Bank AB (publ)

Sveavägen 46

111 34 Stockholm

Sweden

If Klarna is selected as the payment method, personal data may be transmitted to Klarna for payment processing and credit checks.

https://www.klarna.com/privacy

7. Shipping Service Providers

For the delivery of your order, we share necessary data (for example name and shipping address) with the respective shipping service provider.

Legal basis: Art. 6(1)(b) GDPR.

8. Cookies

Our website uses cookies.

Technically Necessary Cookies

These cookies are required to provide basic website functions such as the shopping cart, login or payment processing.

Legal basis: Art. 6(1)(f) GDPR.

Analytics or Marketing Cookies

Such cookies are only set if you have explicitly given your consent via the cookie banner.

Legal basis: Art. 6(1)(a) GDPR.

You can withdraw or adjust your consent at any time via the cookie banner.

9. International Data Transfers

Personal data may also be processed outside the European Economic Area, for example through Shopify.

In such cases we ensure that appropriate safeguards such as standard contractual clauses are in place.

10. Data Retention

We store personal data only for as long as necessary to fulfill the respective purposes or as required by legal retention obligations.

11. Data Security

We implement appropriate technical and organizational measures to protect your data against loss, misuse or unauthorized access.

12. Your Rights

You have the right to:

• access your data (Art. 15 GDPR)

• rectification (Art. 16 GDPR)

• erasure (Art. 17 GDPR)

• restriction of processing (Art. 18 GDPR)

• data portability (Art. 20 GDPR)

• object to processing (Art. 21 GDPR)

• withdraw consent at any time (Art. 7(3) GDPR)

To exercise your rights, please contact us at: support@idanervt-sanctum.com

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection laws.

14. Changes to This Privacy Policy

We reserve the right to amend this privacy policy if necessary due to legal or technical developments. The current version published on our website shall apply.

15. Pinterest

Our website may include links to the social media platform Pinterest or allow users to access our Pinterest content.

When you interact with Pinterest features or click on a Pinterest link, data may be transmitted to Pinterest.

Pinterest may collect information about your interaction with our content and process personal data according to its own privacy policy.

Pinterest Europe Ltd.

Palmerston House

2nd Floor

Fenian Street

Dublin 2

Ireland

Privacy policy:

https://policy.pinterest.com/en/privacy-policy

16. Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. Google Analytics uses cookies and similar technologies to analyze how users interact with our website. The information generated by these cookies about your use of this website may be transmitted to and stored on servers operated by Google.

We use Google Analytics to better understand how visitors use our website and to improve our services.

Google processes personal data such as IP addresses, device information and browsing behavior.

Data processing is based on your consent in accordance with Art. 6(1)(a) GDPR.

You can withdraw your consent at any time via the cookie banner.

More information about Google’s privacy practices can be found at:

https://policies.google.com/privacy