Orderlydesk respects the privacy of individuals who visit and use our website. This privacy policy outlines how Orderlydesk collects, uses, stores, and discloses personal data related to our website, products, orders, and customer inquiries.

Orderlydesk is based in Germany and processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), applicable German data protection laws, and other relevant European data protection requirements.

  1. Data Controller

For the purposes of applicable data protection laws, the data controller responsible for the processing activities described in this privacy policy is:

Orderlydesk

Address: Marktstraße 28, 31303 Burgdorf, Germany
Phone: +49 51369712537
Email: rack@orderlydesk.com

Orderlydesk determines the purposes and means of processing personal data related to the website and customer activities, unless another organization determines these purposes and means in its capacity as a controller.

  1. Personal Data We Collect

Depending on how you use our website, we may process the following categories of personal data:

Name and contact details;
Email address and phone number;
Billing address and shipping address;
Order details and transaction information;
Content included in messages sent to us;
Information related to returns, refunds, and customer inquiries;
Website usage information, such as IP address, browser information, and related access data;
Information required to manage customer accounts (where applicable);
Records required for accounting, tax, and legal purposes.

We only request information that is necessary for the relevant purposes.

  1. How We Use Personal Data

Orderlydesk may process personal data for the following purposes:

Processing and managing orders;
Arranging payment for purchases;
Communicating with customers regarding orders and inquiries;
Processing returns and refunds;
Providing customer service;
Maintaining business and transaction records;
Complying with accounting, tax, and other statutory obligations;
Establishing, exercising, or defending legal claims, where applicable;
Managing and improving website operations;
Identifying and addressing improper or illegal use of our website.

4. Legal Basis for Processing Personal Data

Depending on the specific circumstances, Orderlydesk processes personal data based on one or more of the legal grounds set out in Article 6 of the General Data Protection Regulation (GDPR):

Necessity for the performance of a contract

Processing may be necessary to take steps at your request prior to entering into a contract, or to perform a contract, including processing orders, communicating regarding orders, and handling related requests.

Compliance with a legal obligation

Processing may be necessary to comply with legal obligations applicable to Orderlydesk, including accounting, tax, record-keeping, and other statutory requirements.

Legitimate interests

Processing may be based on Orderlydesk’s legitimate interests, including website administration, customer communication, record management, prevention of misuse, and the establishment, exercise, or defense of legal claims, provided that such interests are not overridden by applicable individual rights.

Consent

Where applicable law requires consent, Orderlydesk will obtain your consent before carrying out the relevant processing. If processing is based on consent, you may withdraw that consent at any time, thereby stopping future data processing.

Withdrawing consent does not affect the lawfulness of data processing activities carried out prior to the withdrawal.

  1. Payment Processing via Stripe

Orderlydesk uses Stripe to process payments made through this website.

When a customer selects a payment method supported by Stripe, relevant information required to process the transaction may be transmitted to Stripe. Depending on the payment method and transaction circumstances, this information may include your name, email address, billing information, transaction details, and payment method information.

Stripe processes personal data in different capacities depending on the specific processing activity. When providing payment services to businesses, Stripe may act as a “data processor” on behalf of the merchant; however, when conducting certain processing activities for its own purposes (including compliance with legal and regulatory obligations and transaction-related activities), Stripe may act as an independent “data controller.”

Stripe’s privacy documentation details its processing activities, relevant entities, legal bases, and data processing practices.

Customers can access the latest privacy information from Stripe via the Stripe Privacy Center and Stripe’s privacy documentation.

  1. Information Shared with Service Providers

Orderlydesk may disclose relevant personal data to service providers if necessary for the purposes described in this Privacy Policy.

Such service providers may assist with the following:

Payment processing;
Website hosting and operation;
Order management;
Customer communication;
Accounting and statutory record-keeping;
Other services required to operate the website and fulfill contractual or legal obligations.

When service providers process personal data on behalf of Orderlydesk, the relevant processing relationship is subject to applicable data protection requirements.

  1. Data Transfers

Some service providers may process personal data outside the European Economic Area (EEA).

If personal data is transferred to a country outside the EEA, Orderlydesk will, where necessary, employ applicable transfer mechanisms recognized under the GDPR, such as an “adequacy decision” or appropriate contractual safeguards.

Stripe indicates that international transfers may involve mechanisms such as EU Standard Contractual Clauses (SCCs) and (where applicable) recognized data transfer frameworks.

  1. Data Retention

Orderlydesk retains personal data only for as long as necessary to achieve the relevant purposes, unless a longer retention period is required or permitted by law.

Consequently, different categories of information may be subject to different retention periods.

Order and Transaction Records

Records related to purchases, invoices, accounting, and taxation are retained for the periods required by applicable German law.

Under current German regulations, certain accounting and business records are subject to a statutory retention period of up to 10 years, while other categories of records are subject to retention periods of 8 or 6 years, depending on their type.

Under current German VAT rules, invoices are generally subject to an 8-year retention period.

Applicable retention periods generally commence at the end of the relevant calendar year, in accordance with the relevant statutory provisions.

Customer Communication

Customer correspondence and records of inquiries are retained for the time reasonably necessary to handle inquiries, maintain appropriate business records, and meet any applicable legal or contractual requirements.

If correspondence forms part of business records or is necessary for the establishment, exercise, or defense of legal claims, it may be retained for the corresponding statutory or regulatory periods. Website and Technical Records

Website access logs and related records are retained for the period necessary to fulfill the relevant operational, legal, and administrative purposes. When a record is no longer required, we will delete it or otherwise cease using it for day-to-day business activities, in accordance with applicable requirements.

  1. Your Data Protection Rights

Subject to the conditions and limitations set forth in applicable laws, individuals may have the following rights under the General Data Protection Regulation (GDPR):

The right to request access to personal data;
The right to request the correction of inaccurate or incomplete personal data;
The right to request the deletion of personal data, subject to applicable legal requirements;
The right to request the restriction of personal data processing, where applicable;
The right to object to specific processing activities;
The right to data portability, subject to legal requirements;
The right to withdraw consent, where processing is based on consent.

Requests regarding personal data may be submitted to:

Email: rack@orderlydesk.com

Before processing a request, Orderlydesk may require information reasonably necessary to verify the requester’s identity.

  1. Right to Lodge a Complaint

If an individual believes that the processing of their personal data violates applicable data protection laws, they have the right to lodge a complaint with the competent supervisory authority.

As Orderlydesk is based in Germany, the relevant regional supervisory authority is the German data protection authority for Lower Saxony (Landesbeauftragter für den Datenschutz Niedersachsen, or LfD Niedersachsen). This authority handles complaints regarding alleged violations of the General Data Protection Regulation (GDPR).

  1. Cookies and Similar Technologies

Our website may use cookies and similar technologies that are necessary for website operation, customer sessions, preference settings, and other functions.

Where applicable law requires consent for the use of non-essential cookies or similar technologies, we will obtain such consent via the website.

Further information regarding the cookies used on this website, their purposes, and relevant options is available via our cookie information page or consent interface.

  1. Data Protection and Website Management

Orderlydesk implements appropriate organizational and technical measures to manage personal data and restricts access to data to authorized purposes.

The processing of personal data is carried out in accordance with the purposes described in this Privacy Policy and the requirements of applicable law.

  1. Changes to This Privacy Policy

Orderlydesk may update this Privacy Policy as necessary to reflect changes in applicable laws, website functionality, business processes, or data processing activities.

The latest version and its effective date will be published on this page.

  1. Contact Information

For questions regarding privacy or requests concerning personal data, please contact:

Phone: +49 51369712537
Email: rack@orderlydesk.com