Privacy policy

We take the protection of personal data seriously and process it confidentially in accordance with applicable data protection law, including the GDPR.

The controller for this website is Tea & Vinyl, Berlin, Germany. Privacy requests can be sent to teaandvinyl@gmail.com.

When you visit the website, technically necessary server logs may be processed: IP address, time, requested URL, referrer, browser, operating system and response status. This is required for secure and reliable operation (Art. 6(1)(f) GDPR). Logs are not combined with other data sources and are retained only as long as operational security requires.

We use technically necessary cookies for Google sign-in, sessions and checkout. Your cart, language, colour theme and cookie choice may also be stored locally in your browser. These functions are required to provide services you request (Art. 6(1)(b) and (f) GDPR).

Optional analytics is enabled only after consent. You can reset your choice by removing tnv-cookie-consent from your browser’s local storage.

After you consent, we use Google Analytics (Google Ireland Limited) to understand website use in aggregate. Device and usage information and online identifiers may be processed, and cookies may be set. The legal basis is Art. 6(1)(a) GDPR. Without consent, the Analytics tag is not loaded.

You may withdraw consent for the future by deleting the stored cookie choice and then selecting Reject. Learn more from Google Analytics data safeguards and the Google Privacy Policy.

If you choose “Sign in with Google”, you are redirected to Google. After successful authentication, we receive profile information released by Google, typically your Google ID, name, email address and profile image. We use it to sign you in and synchronise your cart. The legal basis is your consent and performance of the requested service (Art. 6(1)(a) and (b) GDPR). Google sign-in is optional.

For orders and bookings, we process the data required to perform the contract: name, email address, products, quantities, event or service slot, price, order and payment status. A shipping address is processed only for orders that contain tea. For event tickets, we generate a signed QR code and store issuance and check-in status. The legal basis is Art. 6(1)(b) GDPR; legally required retention is based on Art. 6(1)(c) GDPR.

Payments are processed by SumUp. We transfer the order and contact information needed for checkout, reconciliation and payment confirmation. Card and bank details are processed by SumUp and are not stored on our servers. The SumUp Privacy Policy also applies.

Content, account references, carts, orders, inventory, slots and images are stored in a PostgreSQL database hosted by Neon. After a successful payment, limited order data may be sent to a private Telegram channel for internal fulfilment. We limit such data to what is needed to process the order.

The location map may load content from Google Maps. Google may receive technically necessary information, particularly your IP address. External services such as Instagram, Google Maps or payment pages are opened only when you actively use the relevant link or function. Their own privacy notices apply.

We retain personal data only for as long as needed for its purpose, performance of the contract or statutory retention. It is then deleted or anonymised.

Subject to the GDPR, you have rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. You may also lodge a complaint with a data protection authority. To exercise your rights, email teaandvinyl@gmail.com.