Privacy Policy

1. Who is responsible

The controller for this website is Euro Vapes, Gutenbergstraße 2, 75203 Königsbach-Stein, Germany. Email: [email protected].

2. Data we collect

• Inquiry and contact forms: name, company (optional), email, phone or WhatsApp number, country, products, quantities and your message.
• Messages by WhatsApp, Telegram or email: the details you send us through those services.
• Technical data: when you visit the site, our server records your IP address, browser type, the pages you request and the time of the request.
• Age confirmation: your browser stores a small setting showing that you confirmed you are 18+, so you are not asked on every page.

3. Why we use it and the legal basis

• To answer inquiries, prepare quotes and fulfil orders – Art. 6(1)(b) GDPR (contract and pre-contract steps).
• To keep invoices and business records – Art. 6(1)(c) GDPR (legal obligations under German tax and commercial law).
• To keep the website secure and working – Art. 6(1)(f) GDPR (legitimate interest).

4. Third-party services

• WhatsApp and Telegram: if you contact us through these apps, their own privacy policies apply to the data they process.
• Google Maps: our contact page embeds a Google map. When it loads, Google receives your IP address. Google may process data in the USA.
• Google Fonts: our fonts are loaded from Google servers, which receive your IP address when a page loads.
• Hosting and caching: our hosting provider processes server logs on our behalf.

5. How long we keep data

Inquiries that do not lead to an order are deleted after 24 months. Order and invoice records are kept for the periods required by German law (generally up to 10 years). Server logs are kept for a short time and then deleted.

6. Your rights

You have the right to access, correct or delete your data, to restrict or object to processing, and to data portability (Art. 15–21 GDPR). Email [email protected] to use these rights. You can also complain to a data-protection authority, for example the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW).

7. Changes

We update this policy when our services or the law change. The current version is always on this page.

8. Data protection when you place a wholesale order

When you send an inquiry, we use the details you give us to check stock, prepare a pro-forma invoice and arrange delivery. Your name, company name, address and contact details appear on the invoice and the shipping label. We share delivery details only with the carrier that delivers your order. We do not sell personal data and we do not use it for third-party advertising.

9. Cookies and similar technologies

This website uses only the cookies and browser storage needed to run it: for example, remembering that you confirmed you are 18 or over, keeping your language choice and protecting the forms against spam. We do not use advertising cookies. If we add analytics or marketing tools in future, we will update this privacy policy and ask for your consent where the law requires it.

10. Security of your data

The website is served over an encrypted HTTPS connection. Access to inquiries and order records is limited to the staff who need them to handle your order. Emails and messages you send us are stored in our business mailbox and messaging accounts, which are protected by passwords and, where available, two-factor authentication.

11. International transfers

Most of our data processing takes place in the European Union. Some services, such as WhatsApp, Telegram and Google Maps, may process data outside the EU. Where that happens, the providers rely on the safeguards allowed under the GDPR, such as adequacy decisions or standard contractual clauses. You can avoid these services by contacting us by email instead.

12. How to exercise your data protection rights

1. Email us with the subject line “Data request” and say which right you want to use (access, correction, deletion, restriction, objection or portability).
2. We may ask you to confirm your identity so we do not disclose data to the wrong person.
3. We reply within one month, as required by the GDPR. Complex requests can take longer; if so, we tell you why.

The full text of the EU General Data Protection Regulation is available on EUR-Lex.

13. Related pages

See also our sales terms, shipping policy, refund policy and age policy. For questions about this privacy policy or data protection at Euro Vapes, use the contact page.