Legal
Privacy policy
Last updated: 2 November 2026
This translation is for information only. The German version is legally binding.
1. Controller
The controller responsible for processing personal data within the meaning of the General Data Protection Regulation (GDPR) is:
Tinycars-Schebler – sole proprietorshipOwner: Lucas Schebler
Chalonsstraße 8
41469 Neuss
Germany
Email: info@tinycars.store
The controller decides on the purposes and means of processing personal data in connection with the operation of this online shop.
2. Hosting
Our website is operated via the hosting provider GoDaddy.
Provider: GoDaddy
When you visit our website, the hosting provider processes technically necessary information. This may include in particular:
- IP address of the accessing device
- Date and time of access
- Pages and files accessed
- Browser type and browser version
- Operating system used
- Referrer URL
- Technical access and error logs
Processing takes place to provide the website technically, to ensure system security, to analyse errors and to prevent unauthorised access.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional operation of our online shop.
Depending on the hosting services and server locations used, personal data may be processed outside the European Economic Area. Where necessary, such transfers take place in compliance with the requirements of Art. 44 et seq. GDPR.
Further information on data protection at GoDaddy can be found at:
https://www.godaddy.com/legal/agreements/privacy-policy
The specific storage period of the server logs depends on the hosting services used and the applicable technical and contractual settings.
3. Order processing and payment
3.1 Processing of order data
When you place an order in our online shop, we process the personal data required to perform the purchase contract.
This includes in particular name, billing and delivery address, email address, telephone number if applicable, ordered products, vehicle configurations, order information as well as invoice and payment data.
Processing takes place to handle orders, process payments, deliver, communicate with customers and fulfil legal obligations.
The legal bases are Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR.
Where necessary, we transfer personal data to payment, shipping and logistics service providers.
The data is stored in accordance with the statutory retention periods and then deleted, unless there is another legal basis for storing it.
3.2 Payment processing via Stripe
We use the payment service provider Stripe to process payments.
Depending on the payment method offered, the data required for payment processing is transferred to the responsible companies of the Stripe group.
This may include in particular name, billing address, email address, payment amount, order information, payment data and technical information for fraud prevention.
Processing takes place to fulfil the purchase contract pursuant to Art. 6(1)(b) GDPR and, where necessary, on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR.
As part of its services, Stripe may also process personal data outside the European Economic Area. The legal requirements for international data transfers must be observed.
Further information:
4. Contact form
If you contact us via the contact form or by email at info@tinycars.store, we process the personal data you provide.
This may include in particular your name, email address, telephone number and the content of your enquiry.
Processing takes place to handle your enquiry and for subsequent communication.
The legal basis is Art. 6(1)(b) GDPR if the enquiry relates to a contract or pre-contractual measures. For other enquiries, processing is based on Art. 6(1)(f) GDPR.
The data is deleted as soon as it is no longer required for processing and no statutory retention obligations prevent this.
5. Local storage
Our online shop uses your browser's local storage function (localStorage) to store information about the shopping cart and selected vehicle configurations.
This includes in particular selected products, equipment variants, quantities and other cart information.
This information is stored on your device. It is only transferred to our systems where this is provided for by the technical functioning of the shop or as part of an order.
The storage serves to provide the shopping cart function.
Insofar as local storage is strictly technically necessary for the shopping cart function expressly requested by the user, it may be permissible without separate consent pursuant to Section 25(2) of the German TDDDG.
You can delete the locally stored data at any time via your browser settings.
6. Your rights
Within the scope of the statutory provisions, you have in particular the following rights:
- Access pursuant to Art. 15 GDPR: Information about your personal data being processed.
- Rectification pursuant to Art. 16 GDPR: Correction of inaccurate or completion of incomplete data.
- Erasure pursuant to Art. 17 GDPR: Erasure of your data under the statutory conditions.
- Restriction pursuant to Art. 18 GDPR: Restriction of processing under the statutory conditions.
- Data portability pursuant to Art. 20 GDPR: Receipt of the data you have provided in a structured, commonly used and machine-readable format, where the requirements are met.
- Objection pursuant to Art. 21 GDPR: Objection to certain processing, in particular processing based on legitimate interests.
- Withdrawal pursuant to Art. 7(3) GDPR: Withdrawal of consent given at any time with effect for the future.
- Complaint pursuant to Art. 77 GDPR: Lodging a complaint with a competent data protection supervisory authority.
The competent data protection supervisory authority for the company's registered office in North Rhine-Westphalia is generally:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
To exercise your rights, please contact: