Privacy policy

1. Controller

The controller responsible for data processing on this website is:

Tobias Honscha
Glockenheide 24
30916 Isernhagen
Germany
Telephone: 05136 \/ 879252
Email: info@honscha.de

2. General information on data processing

We process personal data only insofar as this is necessary for operating this website, using the online shop, processing orders, communicating with customers, fulfilling legal obligations or protecting legitimate interests.

This privacy policy applies to our online shop at emuenzen.de\/verkauf. A separate privacy policy applies to our forum at forum.emuenzen.de.

Personal data is all information relating to an identified or identifiable natural person. This includes, for example, name, address, email address, telephone number, order data, payment data, shipping data, IP address or other information that you provide to us as part of an order or enquiry.

Personal data is processed in particular on the basis of the following legal grounds:

• Art. 6 Abs. 1 lit. b DSGVO, insofar as processing is necessary for the performance of a contract or for taking steps prior to entering into a contract;
• Art. 6 Abs. 1 lit. c DSGVO, insofar as we are legally obliged to process data;
• Art. 6 Abs. 1 lit. f DSGVO, insofar as processing is necessary to protect legitimate interests;
• Art. 6 Abs. 1 lit. a DSGVO, insofar as consent is obtained.

3. Hosting and server log files

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.

When you access our website, the web server automatically processes information transmitted by your browser. This may include in particular:

• IP address;
• date and time of access;
• page or file accessed;
• amount of data transferred;
• referrer URL;
• browser type and browser version;
• operating system used;
• HTTP status code.

This data is processed for the technical provision of the website, to ensure system security, for error analysis and to prevent misuse or attacks.

The legal basis is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in the secure, stable and error-free operation of the website.

Insofar as Hetzner acts as a processor, processing is carried out on the basis of a data processing agreement pursuant to Art. 28 DSGVO.

Server log files are deleted as soon as they are no longer required for the stated purposes. Longer storage takes place only insofar as this is necessary to investigate security-related incidents, prevent misuse or assert or defend legal claims.

4. Customer account, shopping cart and orders

If you create a customer account in our online shop, place goods in the shopping cart or submit an order, we process the data required to set up the customer account, process the order and fulfil the contract.

This may include in particular:

• name;
• billing address;
• delivery address;
• email address;
• telephone number, insofar as provided or required;
• customer number;
• order data;
• payment method and payment status;
• shipping data;
• communication relating to the order.

Processing takes place for the performance of pre-contractual measures, the processing of the purchase contract, delivery of the goods, issuing invoices, customer service and handling enquiries, complaints or warranty cases.

The legal basis is Art. 6 Abs. 1 lit. b DSGVO. Insofar as obligations to retain records under tax or commercial law exist, processing is additionally based on Art. 6 Abs. 1 lit. c DSGVO.

A customer account may be deleted at your request, unless statutory retention obligations or legitimate reasons for further storage prevent this. Order and invoice data may continue to be stored after deletion of a customer account insofar as this is required by law or necessary to assert or defend legal claims.

5. Mandatory and voluntary information in the customer account and when placing orders

To create a customer account and process an order, we require the information necessary for these purposes. This includes in particular name, billing address, delivery address, email address, order data and payment information.

Depending on the order, additional information may be required or useful, for example a form of address or telephone number.

Providing a telephone number is voluntary unless it is exceptionally necessary for processing the contract. We do not use a telephone number provided for advertising calls, but only to process the order, clarify enquiries or resolve delivery problems.

6. Electronic cancellation function \/ cancellation button

If, as a consumer, you have concluded a contract via our website and a statutory right of cancellation applies to this contract, you may also exercise your right of cancellation via the electronic cancellation function provided on our website.

When using the cancellation function, we process the data you enter and that is required to process the cancellation. This may include in particular:

• name;
• email address;
• address, insofar as provided or required for allocation;
• order number, invoice number or other information identifying the contract;
• information about the goods or the part of the order to be cancelled;
• content of the cancellation statement;
• date and time of receipt;
• technical data for transmission and prevention of misuse, insofar as required.

Processing takes place to receive, assign, confirm and process your cancellation and to document that the right of cancellation was exercised within the applicable period.

After sending the cancellation via the electronic cancellation function, you will receive an acknowledgement of receipt on a durable medium, usually by email.

The legal basis is Art. 6 Abs. 1 lit. b DSGVO insofar as processing is necessary to perform or reverse the contract. Insofar as we are legally obliged to provide, document or retain information, the legal basis is Art. 6 Abs. 1 lit. c DSGVO. Insofar as technical data is processed to secure the function, prevent misuse or defend against unjustified claims, the legal basis is Art. 6 Abs. 1 lit. f DSGVO.

Our legitimate interest lies in providing the cancellation function securely, preventing misuse and properly documenting received cancellation statements.

Use of the electronic cancellation function is not mandatory. You may continue to exercise your right of cancellation in other ways, for example by letter or email.

7. Payment methods

We offer various payment methods. Depending on the payment method selected, we process the data required for payment processing.

Payment in advance

When paying in advance, we process in particular the name, invoice amount, payment reference, order number and payment status. The processing serves to allocate the payment to the order.

The legal basis is Art. 6 Abs. 1 lit. b DSGVO.

PayPal

If you choose PayPal as your payment method, payment processing takes place via the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal"). The data required for payment processing is transmitted to PayPal, in particular name, email address, invoice amount, currency, order or transaction number and other payment-related information.

The transmission takes place for the purpose of payment processing and performance of the purchase contract. PayPal is independently responsible for the further processing of your data; in this respect, PayPal's privacy policy applies, available at https:\/\/www.paypal.com\/de\/legalhub\/privacy-full.

As part of payment processing, PayPal may process data for fraud prevention and to fulfil legal obligations and may transmit it to third parties for these purposes. If this involves a transfer to third countries outside the EU\/EEA, PayPal bases this on suitable safeguards (e.g. EU standard contractual clauses) or an adequacy decision.

The legal basis for transmitting the data required for payment processing is Art. 6 Abs. 1 lit. b DSGVO; insofar as required for fraud prevention, Art. 6 Abs. 1 lit. f DSGVO.

Invoice for regular customers

Insofar as we offer regular customers payment by invoice, we process the order, invoice and payment data required for this purpose. This includes in particular the invoice amount, payment deadline, payment status and, where applicable, reminders or clarification procedures.

The legal basis is Art. 6 Abs. 1 lit. b DSGVO. Insofar as statutory retention obligations exist or claims are asserted, the legal basis is Art. 6 Abs. 1 lit. c DSGVO or Art. 6 Abs. 1 lit. f DSGVO.

8. Shipping providers

To deliver ordered goods, we disclose the data required for this purpose to shipping providers. These may include in particular:

• DHL;
• UPS;
• FedEx.

Depending on the shipping method, this may include in particular your name, delivery address and shipment data, as well as your email address and telephone number, insofar as required for delivery, shipping notifications or resolving delivery problems.

Processing is carried out for the delivery of the ordered goods and therefore for the performance of the purchase contract.

The legal basis is Article 6(1)(b) GDPR. Where disclosure is necessary to protect legitimate interests, for example for shipment tracking or resolving delivery problems, the additional legal basis is Article 6(1)(f) GDPR.

9. Contact by email or telephone

If you contact us by email, telephone or other means, we process the data you provide to process your enquiry.

This may include in particular:

• Name;
• Email address;
• Telephone number;
• Content of the enquiry;
• Order or customer number, if provided;
• Communication history.

The legal basis is Article 6(1)(b) GDPR insofar as your enquiry relates to a contract or pre-contractual measures. In other cases, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in processing and documenting enquiries.

Enquiries are deleted as soon as they are no longer required for processing, unless statutory retention obligations or legitimate interests in further storage apply.

10. Newsletters and information for existing customers

We send newsletters and information about our range, in particular about coins, offers and shop-related news.

Dispatch may take place:

• if you have subscribed to the newsletter;
• if you have purchased goods from us as an existing customer and the statutory requirements for advertising to existing customers are met;
• unless you have objected to receiving them.

When you subscribe to or receive the newsletter, we process in particular:

• Email address;
• Name, if available;
• Customer number, if available;
• Subscription and unsub­scription data;
• Information on whether the address can receive mail;
• Technical dispatch and error data.

Where the newsletter is sent on the basis of a subscription, registration generally takes place using the double opt-in procedure. After registering, you receive an email with which you can confirm your subscription. This serves as evidence that the subscription was actually made by the holder of the email address.

Where we inform existing customers by email, without separate consent, about our own similar goods, this is only done if we obtained your email address in connection with the sale of goods, the advertising concerns our own similar goods, you have not objected to its use, and you were clearly and expressly informed of the possibility of objecting when the address was collected and each time it was used.

If you unsubscribe from the newsletter or object to the promotional use of your email address, we store your email address on a blocklist so that we can ensure that you receive no further newsletters. We also process bounce information when emails cannot be delivered. This serves to maintain the distribution list, prevent further delivery attempts to unreachable addresses, and observe unsub­scriptions and objections.

You may unsubscribe at any time, for example via the unsubscribe link in the newsletter or in your customer account.

The legal basis for newsletters sent on the basis of consent is Article 6(1)(a) GDPR. The legal basis for information sent to existing customers is Article 6(1)(f) GDPR in conjunction with the statutory requirements for advertising to existing customers. Our legitimate interest lies in direct advertising for our own similar goods.

The legal basis for maintaining blocklists, unsub­scription data and bounce management is Article 6(1)(f) GDPR. Our legitimate interest lies in permanently observing unsub­scriptions and objections, avoiding unwanted mailings and documenting proper newsletter dispatch.

We do not track opening or click behaviour unless expressly stated otherwise in this privacy policy.

11. Cookies

Our website uses technically necessary cookies. Cookies are small text files stored on your device.

Technically necessary cookies are used in particular to provide basic shop functions, for example:

• Shopping cart function;
• Login and customer account;
• Session management;
• Security functions;
• Storage of technical settings required to operate the website.

These cookies are required for the website and online shop to function properly. Use of the shop is not possible, or only possible to a limited extent, without these technically necessary cookies.

The legal basis for accessing or storing information on your device is § 25 Abs. 2 Nr. 2 TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(b) GDPR insofar as the cookies are required for concluding or performing the contract; otherwise, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional operation of the online shop.

We do not use analytics, marketing or tracking cookies unless expressly stated otherwise in this privacy policy.

12. Fonts (Google Fonts, embedded locally)

This website uses fonts from Google Fonts. The fonts are embedded locally on our own server.

When you access our website, no connection is therefore established to Google servers to load fonts. Accordingly, your IP address is not transmitted to Google when the fonts are retrieved.

The local embedding of the fonts serves to provide a consistent and appealing presentation of the website.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the visually consistent presentation and technical optimisation of our online service.

13. Suppliers, service providers and business partners

We process personal data of suppliers, service providers and other business partners insofar as this is required to initiate, perform or process the respective business relationship.

This may include in particular:

• Names and contact details of contact persons;
• Business addresses;
• Email addresses and telephone numbers;
• Contract and communication data;
• Invoice and payment data.

Processing is carried out for communication, contract processing, accounting, organising our business operations and fulfilling statutory obligations.

The legal basis is Article 6(1)(b) GDPR insofar as processing is required to perform a contract or take pre-contractual measures. Where statutory obligations exist, in particular obligations under commercial and tax law, the legal basis is Article 6(1)(c) GDPR. In all other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the proper organisation and management of our business operations.

Customer data is not disclosed to suppliers or other business partners unless this is required in an individual case for contract processing, required by law or another legal basis applies. Shipping providers, payment service providers, hosting providers and tax advisers are described separately in this privacy policy.

14. Statutory retention obligations and storage period

We store personal data only for as long as this is required for the respective purposes or statutory retention obligations apply.

Commercial and tax law requirements provide in particular for the following retention periods:

• 8 years for accounting records, in particular invoices (§ 147 Abs. 3 i. V. m. Abs. 1 Nr. 4 AO, § 257 HGB);
• 10 years for books, records, inventories and annual financial statements (§ 147 Abs. 3 i. V. m. Abs. 1 Nr. 1 AO);
• 6 years for received and sent commercial and business letters and other documents relevant for tax purposes (§ 147 Abs. 3 i. V. m. Abs. 1 Nr. 2 und 3 AO).

The periods begin at the end of the calendar year in which the record was created or the document was last processed, received or sent. The tax retention period does not expire as long as the documents are relevant for taxes for which the assessment period has not yet expired.

The legal basis is Article 6(1)(c) GDPR.

After the statutory retention periods have expired, the data is deleted unless further legitimate reasons for storage exist, such as outstanding claims, pending proceedings, complaints, warranty cases or the assertion or defence of legal claims.

15. Recipients of personal data

Personal data is disclosed only insofar as this is required for the stated purposes or a statutory obligation exists.

Recipients or categories of recipients may include in particular:

• Hosting and IT service providers;
• Payment service providers;
• Shipping providers;
• Tax advisers;
• Tax authorities;
• Lawyers, courts or debt collection service providers, insofar as this is required to enforce or defend claims.

Customer data is generally not disclosed to suppliers or other business partners.

Personal data is not disclosed to third parties beyond this without a legal basis.

16. Data transfers to third countries

Personal data is transferred to countries outside the European Union or the European Economic Area only where this is required to use a service selected by you, a legal basis exists or appropriate data protection safeguards are in place.

This may apply in particular when using individual payment or shipping service providers. Where data is transferred to a third country, this is based on an adequacy decision by the EU Commission (e.g. EU-US Data Privacy Framework) or on appropriate safeguards such as EU standard contractual clauses. Further details can be found in the privacy information of the respective provider.

17. Obligation to provide data

Providing certain personal data is required to conclude and perform a purchase contract. Without the required information, we cannot process an order, or cannot process it completely.

This applies in particular to your name, billing address, delivery address, email address, order data and payment information.

Providing any additional personal data is voluntary unless expressly stated otherwise.

18. Automated decision-making

Automated decision-making, including profiling within the meaning of Article 22 GDPR, does not take place.

19. Your rights

You have the following rights in accordance with the statutory provisions:

• Right of access to the data stored about you pursuant to Article 15 GDPR;
• Right to rectification of inaccurate data pursuant to Article 16 GDPR;
• Right to erasure pursuant to Article 17 GDPR;
• Right to restriction of processing pursuant to Article 18 GDPR;
• Right to data portability pursuant to Article 20 GDPR;
• Right to object to certain processing pursuant to Article 21 GDPR;
• Right to withdraw consent that has been granted, with effect for the future, pursuant to Article 7(3) GDPR.

You may contact us at any time to exercise your rights:

Tobias Honscha
Glockenheide 24
30916 Isernhagen
Email: info@honscha.de

20. Right to object (Article 21 GDPR)

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is based on Article 6(1)(f) GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where we process your personal data for the purposes of direct marketing, you have the right to object to this processing at any time. Following an objection, your personal data will no longer be used for direct marketing. However, your email address may continue to be stored on a blocklist so that the objection is permanently observed.

21. Right to lodge a complaint with the data protection supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

The authority responsible in particular for Lower Saxony is:

The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hannover
E-mail: poststelle@lfd.niedersachsen.de

22. Currency and amendment of this privacy policy

This privacy policy is currently valid.

As of: 18 June 2026

We reserve the right to amend this privacy policy if the legal requirements, our website or our data processing activities change.