The controller within the meaning of the General Data Protection Regulation (GDPR) is T-Shirt Barn GmbH, Bergmannweg 68c, represented by the managing director. For questions regarding data protection or to exercise your rights, please contact: info@tshirtbarn.com or by phone at 04348 2648304.

We collect and process personal data that you voluntarily provide to us when registering for our design courses and creative training. This includes in particular:

• Last name, first name
• Email address
• Phone number (optional)
• Address (for invoicing)
• Payment data (processed via an external payment service provider)

Processing is carried out for contract fulfillment (Art. 6 para. 1 lit. b GDPR) and to fulfill legal obligations (Art. 6 para. 1 lit. c GDPR).

Your data is processed exclusively for the following purposes:

• Conducting and organizing the booked design courses and creative training
• Communication in connection with course registration and implementation
• Invoicing and payment processing
• Fulfillment of statutory retention obligations

Processing for other purposes, in particular for advertising or market research, will only take place with your express consent (Art. 6 para. 1 lit. a GDPR).

Our website uses only technically necessary cookies that are required for the operation of the site. These cookies serve security and the provision of basic functions. An analysis of your usage behavior or tracking for advertising purposes does not take place.

You can disable the use of cookies in your browser settings at any time. Please note that this may limit the functionality of the website.

Your personal data will only be disclosed to third parties if this is necessary for contract fulfillment or if you have given your express consent. Recipients may include:

• Payment service providers (for processing payments)
• Tax advisors (to fulfill tax law obligations)
• Hosting providers (for operating the website)

Transfer to third countries outside the EU does not take place unless suitable guarantees pursuant to Art. 44 et seq. GDPR exist.

We store your personal data only as long as is necessary to fulfill the purposes mentioned above or as required by statutory retention obligations. After the purpose ceases to apply or the statutory periods expire, your data will be deleted.

For contract data, the retention period is generally ten years after the end of the contract (pursuant to § 147 AO).

You have the following rights towards us regarding the personal data concerning you:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)

To exercise your rights, please contact: info@tshirtbarn.com. You also have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates data protection regulations.

If we process your data on the basis of consent, you have the right to withdraw this consent at any time with effect for the future. The withdrawal can be made informally by email to info@tshirtbarn.com. The lawfulness of the data processing carried out up to the withdrawal remains unaffected.

We take appropriate technical and organizational measures to protect your personal data from loss, unauthorized access, and misuse. This includes encryption of data transmission (SSL/TLS) as well as regular security checks.

We reserve the right to adapt this privacy policy as necessary to adjust it to changed legal frameworks or changes in our services. The current version is always available on this page.

Status: January 2025