PRIVACY POLICY
Last updated: 4 September 2026
Controller
The controller responsible for processing personal data on this website is:
VINTAGEALLCO
Birknerstr. 2b
85462 Eitting
Germany
Email: info@vintageallco.com
General information
We process personal data only when necessary to operate this website, respond to enquiries, process orders, fulfil contractual obligations, and send our newsletter where consent has been provided.
The applicable legal bases include Article 6(1)(a), (b), (c), and (f) of the General Data Protection Regulation (GDPR).
Website hosting
This website is hosted by Hostinger. When you visit the website, technical information may be processed, including your IP address, browser type, operating system, referring page, date and time of access, and requested pages.
This processing is necessary to provide the website securely and reliably. The legal basis is Article 6(1)(f) GDPR.
Further information is available in the Hostinger Privacy Policy:
https://www.hostinger.com/legal/privacy-policy
Contact enquiries
When you contact us through our contact form or by email, we process the information you provide, such as your name, email address, telephone number, and message, to respond to your enquiry.
The legal basis is Article 6(1)(b) GDPR when your enquiry concerns a possible or existing contract, and Article 6(1)(f) GDPR for other enquiries.
Email communications are processed using Microsoft 365. Information may therefore be processed by Microsoft in accordance with its applicable data-protection terms.
Orders and customer accounts
When you place an order or create a customer account, we process information required to complete the transaction. This may include:
• Name
• Billing and shipping address
• Email address and telephone number
• Products ordered
• Order and payment status
• Customer notes and communications
The legal basis is Article 6(1)(b) GDPR. Information required for accounting, tax, or other legal obligations is processed under Article 6(1)(c) GDPR.
Payments
Payments are processed using the payment methods displayed during checkout.
The relevant payment provider receives the information necessary to process the payment. We do not store complete credit-card information on our website.
Shipping
To deliver your order, we may provide the necessary name, delivery address, and contact information to the selected shipping provider.
The legal basis is Article 6(1)(b) GDPR.
Newsletter and Mailchimp
You may voluntarily subscribe to the VINTAGEALLCO newsletter. We process your email address, first name if provided, consent information, IP address, and subscription time for this purpose.
Our newsletter is managed using Mailchimp, a service provided by The Rocket Science Group LLC, an Intuit company. Information may be processed in the United States. Mailchimp states that it uses recognised transfer safeguards, including the EU–US Data Privacy Framework and Standard Contractual Clauses where applicable.
We use a double-opt-in procedure. After registering, you must confirm your subscription using the link in the confirmation email. The legal basis is your consent under Article 6(1)(a) GDPR.
You may withdraw your consent at any time by using the unsubscribe link included in every newsletter. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Mailchimp privacy information:
https://www.intuit.com/privacy/statement/
Cookies
This website uses cookies and similar technologies that are necessary for essential website, shopping-cart, security, and account functions.
Optional technologies used for analytics, advertising, maps, or external media will only be activated after consent where legally required.
You can withdraw or change your cookie choices through the cookie settings available on the website.
Retention
Personal data is retained only for as long as necessary for the relevant purpose. Order and accounting records may be retained for the periods required by German commercial and tax law.
Contact enquiries are deleted when they are no longer required, unless legal retention obligations apply. Newsletter information is retained until you unsubscribe or withdraw your consent, subject to any necessary record of consent.
Your rights
Subject to the applicable legal requirements, you have the right to:
• Request access to your personal data
• Request correction of inaccurate information
• Request deletion of your information
• Request restriction of processing
• Receive your information in a portable format
• Object to processing based on legitimate interests
• Withdraw consent at any time
• Lodge a complaint with a data-protection authority
To exercise your rights, contact info@vintageallco.com.
Supervisory authority
You may lodge a complaint with:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Changes to this Privacy Policy
We may update this Privacy Policy when our website, services, or legal requirements change. The current version will always be available on this page.