Privacy policy of Bricks And Stories GmbH
1.
Data protection at a glance
The protection of your personal data is very important to us. Below, we provide information about what data is processed when you use our website and for what purposes.
Personal data is any data that can be used to identify you personally.
2.
Responsible party
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Bricks And Stories GmbH
Herzog-Rudolf-Straße 9
80539 Munich
Germany
Telephone: 0172-6001813
Email: hello@bricksandstories.com
3.
Hosting
Our website is hosted by the following provider:
STRATO AG
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
When you visit our website, STRATO processes personal data on our behalf that is generated during the use of this website (e.g. IP address in server log files). Processing is carried out on the basis of Art. 6 (1) lit. f GDPR (legitimate interest in the secure and stable operation of the website).
A contract for order processing has been concluded with STRATO in accordance with Art. 28 GDPR.
4.
Access data / server log files
When you visit our website, the hosting provider automatically collects and stores information in so-called server log files. This information may include, in particular:
* IP address (in abbreviated form, if applicable)
* Date and time of the request
* Page/file accessed
* Amount of data transferred
* Browser type and browser version
* Operating system
* Referrer URL
* Host name of the accessing computer
This data is processed to ensure the smooth operation of the website, to improve our offering and to prevent misuse (e.g. attacks on the server infrastructure).
The legal basis is Art. 6 (1) lit. f GDPR.
5.
Contacting us by e-mail
If you contact us by e-mail, the personal data you provide (e.g. name, e-mail address, content of the message) will be processed in order to process your enquiry.
Depending on the content of the enquiry, processing is based on:
* Art. 6 (1) (b) GDPR (contract/pre-contractual measures), or
* Art. 6 (1) (f) GDPR (legitimate interest in processing enquiries)
We only store the data for as long as is necessary to process your enquiry or as required by statutory retention obligations.
6.
Web analysis with Wix Analytics
We use ‘Wix Analytics’, a web analysis service provided by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel, on our website.
Wix Analytics enables us to analyse user behaviour on our website in order to optimise our offering in terms of technology and content. Among other things, the following data is processed:
- IP address (truncated or anonymised, as far as technically possible)
- Information about the device used
- Browser type and version
- Pages visited
- Duration of visit
- Referrer URL
- Date and time of access
Wix uses cookies for analysis, which enable user recognition.
Legal basis:
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
You can revoke your consent at any time via our cookie consent tool.
Data transfer:
Wix may store data on servers outside the European Union. Wix is a company based in Israel. The European Commission has issued an adequacy decision for Israel in accordance with Art. 45 GDPR.
If data is transferred to third countries (e.g. the USA), this is done on the basis of appropriate safeguards in accordance with Art. 46 GDPR.
Storage period:
The data is only stored for as long as is necessary for analysis purposes or for as long as there are legal retention periods.
Translated with DeepL.com (free version)
7.
Integration of Google Maps
A map section from Google Maps is integrated into our website to show you our location and make it easier for you to find us.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
When you visit the page on which Google Maps is integrated, personal data (in particular your IP address and, if applicable, location data) may be transferred to Google. Data may also be processed on Google servers in the USA.
Google Maps is used in the interest of an appealing presentation of our online offering and to make it easy to find our location.
The legal basis is Art. 6 (1) lit. f GDPR.
Further information on data processing by Google can be found in Google's privacy policy.
8.
SSL or TLS encryption (do we have this?)
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the fact that the address line of the browser begins with ‘https://’.
9.
Storage period
Unless a more specific storage period is specified in this privacy policy, we only process and store personal data for as long as is necessary to achieve the respective purpose.
The data is then deleted, provided that there are no legal retention obligations to the contrary.
10.
Your rights as a data subject
You have the right at any time:
* to information in accordance with Art. 15 GDPR
* to rectification in accordance with Art. 16 GDPR
* to erasure in accordance with Art. 17 GDPR
* to restriction of processing pursuant to Art. 18 GDPR
* to data portability pursuant to Art. 20 GDPR
* to object to processing pursuant to Art. 21 GDPR
If you have given your consent, you can revoke it at any time with effect for the future (Art. 7(3) GDPR).
11.
Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.
The authority responsible for companies based in Munich is usually:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
12.
Changes to this privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy.
Status: 02/2026