Data Protection Notice
1. Controller
The controller responsible for processing personal data on this website is Vaulted (sole proprietorship), Barfusstraße 27, 13349 Berlin, represented by María Angeles Romero. For data protection inquiries contact support@vaultedrops.com.
2. Purpose and legal basis
We process personal data to fulfil orders, answer inquiries, improve our products, and comply with legal obligations. The legal bases are Art. 6 (1) lit. b GDPR (contract performance), Art. 6 (1) lit. c GDPR (legal obligation), and Art. 6 (1) lit. f GDPR (legitimate interest in a secure, efficient online experience).
3. Hosting and access data
Our service is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit our site, Vercel processes technical information (IP address, timestamp, browser data) to ensure secure operations. Data is typically deleted within 30 days.
4. Orders and payments
We process the contact and order details you provide to fulfil your purchase. Payments are handled via Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. Stripe processes payment data independently—see their privacy policy at https://stripe.com/privacy.
5. Shipping and logistics
To deliver orders we pass your address and contact data to our logistics partners. They use the data solely to fulfil the delivery contract. No further processing takes place.
6. Email communication
Transactional emails (e.g. order confirmations) are sent via Resend, Inc., 2093 Philadelphia Pike #1025, Claymont, DE 19703, USA. Transfers rely on EU Standard Contractual Clauses. Emails are stored only as long as required for contractual or legal obligations.
7. Analytics
We use Vercel Analytics to collect anonymous usage statistics. The data does not allow identification of individual users and helps us improve the experience. The legal basis is Art. 6 (1) lit. f GDPR.
8. Retention period
Personal data is stored only as long as necessary for the purposes described above or required by statutory retention periods. Afterwards the data is deleted or anonymised.
9. Your rights
You have the right to access, rectification, erasure, restriction of processing, and data portability. You may also object to processing based on Art. 6 (1) lit. f GDPR. Contact support@vaultedrops.com for requests. You also have the right to lodge a complaint with the competent supervisory authority.
10. Withdrawal of consent
You may withdraw consent for future processing at any time. The lawfulness of processing carried out before the withdrawal remains unaffected.
11. Automated decision-making
No automated decision-making, including profiling, takes place.
12. Updates
This notice is current as of October 2024. We may update it to reflect changes in legal requirements or our services.