Privacy policy

In this privacy notice we explain what personal data we collect when you use our shop, how we use it to process your orders and improve our service, and which rights and choices you have.

You can review and change your cookie preferences at any time using the cookie settings button below.

Cookie settings

For any questions or to request your data to be deleted, write us at: privacy@wallpaperfromthe70s.com.

On this page

What we log when you visit our site

You may visit our website without actively providing personal information. Please note that however, technical data will be processed automatically: with every visit on the website, our web server stores a so-called server log file which contains e.g. the name of the requested file, your IP address, the date and time of the request, volume of data transferred and the requesting provider.

These access data are analysed exclusively for the purpose of ensuring the smooth operation of the website as well as security, troubleshooting and fraud prevention. The legal basis is article 6(1)(f) GDPR, since the processing is necessary to operate, safeguard and monitor our website. Access data are deleted or anonymised after no more than seven days, unless a longer storage is required in an individual case for the clarification of security incidents.

Website hosting and operation

We use specialised service providers to host this website and make it available to you online. These providers process personal data on our behalf (for example access data and form data) solely in accordance with our instructions and on the basis of a data processing agreement in line with article 28 GDPR.

As a rule, processing for the technical provision of this website takes place on servers within the EU or EEA. Where our content delivery network or similar providers use global infrastructure, personal data may be processed outside the EU or EEA. In such cases we apply appropriate safeguards as described in the relevant sections.

Content delivery via Bunny.net

We use the content delivery network bunny.net, operated by BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia (“bunny.net”). Bunny.net operates a globally distributed server network that helps us deliver our website quickly and reliably.

When you access our website, certain technical data (in particular your IP address, requested content, date and time of access, amount of data transferred and, where applicable, information about your browser and operating system) are transmitted to bunny.net to enable the secure delivery of our content.

The use of bunny.net CDN is based on article 6(1)(f) GDPR. Our legitimate interest is the fast, secure and technically reliable provision of our online offer. Bunny.net acts as our processor within the meaning of article 28 GDPR.

Because bunny.net uses a global network, data may be processed on servers outside the EU or EEA. In these cases, appropriate safeguards under article 46 GDPR apply, in particular the EU Standard Contractual Clauses. In addition, bunny.net provides privacy features such as IP anonymisation of logs. Further information is available in bunny.net’s privacy policy (bunny.net/privacy) and GDPR information: bunny.net/gdpr.

How we use your data for orders and accounts

We process the personal data that you provide when you place an order, contact us (for example via contact form or email), or create a new customer account. Mandatory fields are marked as such, because we need these details to process your request or perform the contract. Without them, we cannot complete your order, handle your enquiry or set up your account. It is apparent from each form which data are collected.

We store contract and invoice data for the duration of the contractual relationship and, thereafter, for the statutory retention periods according to the law. Customer account data are stored until you delete your account. Enquiry data are stored for as long as necessary to process your request and for a limited subsequent period where this is necessary to document proper handling or defend legal claims.

We use the data that you disclose to us according to article 6(1)(b) GDPR. For general enquiries, we process your data on the basis of our legitimate interest in handling your request (article 6(1)(f) GDPR).

You can delete your customer account at any time using the corresponding function in your account or by contacting us at privacy@wallpaperfromthe70s.com.

How we share data for shipping and payments

To deliver your orders, we share the necessary address and contact details with the selected shipping provider so that they can deliver the goods. The legal basis is article 6(1)(b) GDPR.

For payment processing, we transmit the required payment information to the bank instructed to process the payment and, where applicable, to the payment service provider you have selected. The legal basis is article 6(1)(b) GDPR. We currently support the following providers:

  • Stripe, provided for EEA users by Stripe Payments Europe Limited and Stripe Technology Europe Limited, both based in Ireland, is used to process credit and debit card payments. Stripe may transfer data within its group, including outside the EEA. Such transfers are safeguarded as described in Stripe’s privacy and data transfer materials.
  • PayPal, operated for EEA users by PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. PayPal may transfer data outside the EEA as set out in its privacy notice.
  • Apple Pay, provided in the EEA by Apple Distribution International Ltd. in Ireland together with your card issuer. Processing is carried out under their own privacy terms.
  • Google Pay, provided in the EEA by Google Ireland Limited. Google processes data under its own privacy notice.
  • PagBrasil, provided by PagBrasil Pagamentos Eletrônicos Ltda., is used to process local payments. PagBrasil processes your payment data under its own responsibility in line with its privacy notice.

Depending on the payment method, you may be redirected to the provider’s website or app to complete the payment. Where processing involves transfers outside the EU or EEA, recognised transfer mechanisms under article 46 GDPR, like the European Commission’s Standard Contractual Clauses, or a Commission adequacy decision, apply.

Optional delivery notifications by carriers

If, when or after placing your order, you give us your separate consent, we will transmit your email address and/or phone number to the selected shipping provider so that they can inform you about the shipment status or agree delivery details with you. The legal basis is your consent (article 6(1)(a) GDPR).

You can withdraw this consent at any time with effect for the future, for example by contacting us at privacy@wallpaperfromthe70s.com or by informing the shipping provider using the contact details provided in the shipment notification. If you withdraw your consent, we will no longer transmit your contact details for this purpose. This does not affect the lawfulness of processing prior to withdrawal or the use of your address data that are necessary for delivery.

How your order emails are sent with Postmark

For the delivery of important transactional emails, for example order confirmations and invoices, we use the email service “Postmark”, operated by ActiveCampaign, LLC in the United States. To deliver these emails reliably and diagnose delivery issues, Postmark processes the necessary information, including your email address, the email content and technical delivery metadata. Postmark also records message activity such as deliveries, opens, clicks and bounces to help us verify sending, ensure deliverability and prevent abuse. We retain message content and activity data for 60 days.

Postmark acts as our processor and processes this data only on our instructions. The legal basis is article 6(1)(b) GDPR, as sending these transactional emails is necessary for the performance of our contract with you. The measurement of essential delivery and performance signals, for example open and link tracking on transactional messages, is carried out on the basis of our legitimate interests in operating and safeguarding our service, article 6(1)(f) GDPR. We do not use this tracking for marketing. Because processing can take place in the United States, we apply appropriate safeguards for international transfers in accordance with article 46 GDPR.

Our newsletter and email updates

If you subscribe to our email updates, we send you our newsletter after you confirm your subscription via double opt-in. The legal basis is article 6(1)(a) GDPR, your consent. You can withdraw your consent at any time with effect for the future by using the unsubscribe link in any newsletter or by contacting us at privacy@wallpaperfromthe70s.com. If you unsubscribe, we remove your address from the active mailing list. We may keep it in a suppression list to ensure you do not receive further emails, which we do on the basis of our legitimate interests, article 6(1)(f) GDPR.

To document consent we store the time, IP address and source of your sign up and the confirmation of your subscription. We keep this proof of consent for up to three years after your last newsletter or your withdrawal, based on our legitimate interests in demonstrating compliance and defending legal claims, article 6(1)(f) GDPR.

We use an email delivery provider that acts as our processor within the meaning of article 28 GDPR and sends the newsletter on our behalf. The provider processes your email address and the content necessary for delivery in accordance with our instructions. Where processing involves transfers outside the EU or EEA, approved GDPR safeguards apply, for example the European Commission’s Standard Contractual Clauses under article 46 GDPR, or an adequacy decision where available.

If we use measurement features in newsletters, we will only enable these with your consent in accordance with the TTDSG. You can change your tracking preference at any time using the relevant link in the footer of each newsletter or by contacting us at the email address above.

Cookies and device access

We use cookies and similar technologies to operate our website and, with your consent, to analyse use and personalise content.

Strictly necessary technologies

Technologies that are technically required to provide our site and its functions are used without consent under the applicable EU ePrivacy framework as implemented in member states, including § 25(2) TTDSG in Germany. The related processing of personal data is based on our legitimate interests in operating, safeguarding and monitoring our service, article 6(1)(f) GDPR. These include, for example, items that keep you logged in, remember your basket, ensure security and load balancing, or manage your privacy choices.

Analytics, measurement and personalisation

Any access to or storage of information on your device for non-essential purposes, for example measuring reach or tailoring content, takes place only with your prior consent in accordance with § 25(1) TTDSG. The subsequent processing of personal data is based on your consent, article 6(1)(a) GDPR. You can give or refuse consent per category via our cookie banner and you can change your choices at any time in the link Cookie settings (at the top of the page).

How to manage your choices

You can review and adjust your preferences at any time via the Cookie settings option. Withdrawal applies to the future and does not affect the lawfulness of processing before withdrawal.

Categories and retention

In the Cookie settings panel you can enable or disable non-essential categories such as statistics and marketing. Session cookies are deleted when you close your browser; persistent cookies remain until they expire or you delete them. Blocking non-essential categories may affect certain comfort features.

Browser controls

You can also delete cookies or block them in your browser settings. These options are additional and do not replace consent requirements for non-essential technologies under applicable ePrivacy laws, including Germany’s TTDSG legislation.

Analytics and measurement tools

We use analytics only with your prior consent. Any access to or storage of information on your device for analytics takes place in accordance with the ePrivacy rules (§ 25 TTDSG for EU users), and the related processing of personal data is based on article 6(1)(a) GDPR. You can give or refuse consent in Cookie settings and change it at any time. Withdrawing consent applies to the future and does not affect processing that already took place.

Matomo analytics

We use Matomo to understand how our website is used and to improve our content. Analytics only runs after you give consent in Cookie settings. Matomo may place cookies or use similar technologies and process usage data such as pages viewed, actions taken, approximate location, device information and a truncated IP address. You can withdraw consent at any time by deselecting it in our Cookie settings.

Google Analytics 4

If you consent to analytics, we use Google Analytics 4 to measure how the website is used. GA4 may use identifiers, cookies or similar technologies to collect events such as page views, clicks and basic device information. GA4 only runs after you enable analytics in Cookie preferences, and you can change this at any time. Google acts as our processor under the Google data processing terms. Because Google operates globally, data may be processed outside the EU or EEA, in which case approved GDPR transfer safeguards apply, for example the European Commission’s Standard Contractual Clauses or, where available, an adequacy decision.

We do not enable Google Signals or advertising features unless you also consent to marketing.

Google Tag Manager

We use Google Tag Manager to load and manage tags on our site. Tag Manager itself does not set cookies for its own purposes. We configure it so that tags in the statistics and marketing categories are only loaded after you have given consent in Cookie settings. Before consent, only strictly necessary tags are allowed to run.

When Tag Manager is used, Google receives technical information required to provide the service, for example IP address and browser details in HTTP requests. Under Google’s Tag Manager terms, Google may collect information about how the service is used and which tags are deployed, to maintain and improve the service, and states it will not combine this data with other Google products without your consent.

Tags deployed via Tag Manager send data only to the respective providers you have consented to. Google Ireland Limited provides Tag Manager in the EEA. Because Google operates a global infrastructure, personal data may be processed outside the EU or EEA. In such cases, approved GDPR safeguards apply, for example the European Commission’s Standard Contractual Clauses or, where applicable, an adequacy decision.

Marketing and advertising tools

Measures advertising reach and conversions. Optional, only active with your consent.

Google Ads

We use Google Ads tags to measure advertising reach and conversions. These tags are deployed through Google Tag Manager and activate only after you enable the marketing category in Cookie settings. Under Germany’s ePrivacy rules, including section 25(1) TTDSG, any non-essential storage on or access to your device requires prior consent. The related processing of personal data is based on article 6(1)(a) GDPR.

When active, Google Ads may set or read identifiers and cookies for attribution, which typically persist for up to about 90 days depending on configuration. You can change your choice at any time in Cookie settings.

Google Ireland Limited provides Google Ads for users in the EEA and processes data as an independent controller for these advertising services under Google’s controller terms. Because Google operates a global infrastructure, data may be processed outside the EEA. For such transfers, Google relies on approved safeguards, for example the EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

Pinterest tag

If you consent to marketing, we use the Pinterest tag on our website to measure and optimise our Pinterest advertising. The tag records actions that you take on our site after interacting with our Pinterest ads so that we can attribute conversions to campaigns and build audiences for Pinterest ads. When active, the Pinterest tag sends event data from your browser to Pinterest and may set or read identifiers and cookies used for ad measurement and audience building, which can persist for up to around 12 months depending on configuration.

For users in the EEA, Pinterest Europe Ltd, 3rd Floor, Waterloo Exchange, Waterloo Road, Dublin 4, Ireland, is responsible for providing the Pinterest advertising services. Under Pinterest’s Joint Controller Addendum, we and Pinterest Europe act as joint controllers for the collection and transmission of activity data via the Pinterest tag, while Pinterest is an independent controller for subsequent processing under its own privacy policy.

Device access and storage for the Pinterest tag take place only with your prior consent in accordance with the ePrivacy rules, for EU users in particular § 25(1) TTDSG. The related processing of personal data on our side is based on article 6(1)(a) GDPR. Pinterest may process data in countries outside the EU/EEA, including the United States, and uses safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework, as described in Pinterest’s privacy documentation.

You can change your choice regarding the Pinterest tag at any time in Cookie settings. You can also manage interest-based advertising directly in your Pinterest account settings or via the options described in Pinterest’s privacy policy.

Do not track compliance

We support the Do Not Track (DNT) browser setting. If Do Not Track is enabled, we treat this as a signal that you do not wish to be tracked for analytics or marketing and do not activate these non-essential technologies. Do Not Track is a browser preference that you can turn on or off in the privacy or settings section of your web browser.

Your data protection rights and how to contact us

Under the GDPR you can request access to your personal data, rectification, erasure, restriction of processing, data portability, and you may object to processing based on our legitimate interests. Where we rely on consent, you can withdraw it at any time without affecting prior processing. You may lodge a complaint with a supervisory authority, in particular in your EU member state of residence or work. We will respond to requests within one month as required by article 12 GDPR, and we may ask for information to verify your identity.

Should you have any questions or requests regarding our privacy practices, please contact us as follows:

Email
privacy@wallpaperfromthe70s.com

Post
Tapeten der 70er
Naitschau 42
07957 Langenwetzendorf
Germany