Last updated: November 2026
This privacy policy explains which personal data we process on this website and in our shop.
Controller
AMBERPRESS
Chausseestr. 116
10115 Berlin
Germany
Owner: Malgorzata Karolina Warrink
Email: info@amberpress.eu
Hosting
Our website and our email mailbox are operated on our behalf by IONOS SE. Each time the website is accessed, the server processes access data: IP address, date and time, page requested, amount of data transferred, status code, previously visited page, browser and operating system. This is necessary to deliver the website and to protect it against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is secure and stable operation. The access data are anonymised when collected and deleted after eight weeks.
Protection against attacks
To protect the website, we use the security plugin Defender. In the event of suspicious access, it stores the IP address, browser identifier and time and can block the IP address. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protecting the website against attacks. The entries are deleted after 30 days.
Cookies
The following cookies are strictly necessary for the respective function; no consent is required for them (Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). The legal basis for the associated data processing is Art. 6(1)(b) GDPR insofar as the shopping cart and payment are concerned, and otherwise Art. 6(1)(f) GDPR; our legitimate interest is a functioning and secure website.
| Cookie | Purpose | Storage period |
|---|---|---|
| cookie-cracker_1, cookie-cracker_1_prefs | your choice in the cookie banner | 90 days |
| pll_language | selected language | 1 year |
| woocommerce_items_in_cart, woocommerce_cart_hash | shopping cart | end of browser session |
| wp_woocommerce_session_… | shopping cart | 2 days |
| __stripe_mid, __stripe_sid | fraud prevention for card payments (Stripe) | 1 year and 30 minutes respectively |
| __ssid | fraud prevention by WooPayments (Sift) | up to 4 years |
You can change your choice in the cookie banner at any time: Edit Cookies
Orders
For your order, we process the information from the order form, including name, address, email address, items ordered, shipping and payment method, in order to conclude and perform the contract, including payment, shipping, withdrawal and warranty. The legal basis is Art. 6(1)(b) GDPR and, for statutory retention obligations, Art. 6(1)(c) GDPR. Mandatory fields are marked; without this information we cannot process your order. For each order, we also store the IP address and browser identifier to protect against fraud (Art. 6(1)(f) GDPR).
If you withdraw from a contract using “withdraw from contract”, we process your order number, email address and name in order to process the withdrawal and confirm its receipt (Art. 6(1)(b) and (c) GDPR in conjunction with Section 356a of the German Civil Code, BGB).
For delivery, Deutsche Post receives your name and delivery address.
Payment
We process card payments via WooPayments, a service of WooCommerce Ireland Ltd.; the payments are processed by Stripe (Stripe Payments Europe, Limited). PayPal payments are handled by PayPal (Europe) S.à r.l. et Cie, S.C.A. The providers receive the order and payment data required for the payment and process it partly under their own responsibility (Art. 6(1)(b) GDPR). When the checkout page loads, Stripe and PayPal receive your IP address and browser information for technical reasons. Stripe uses this and other device and usage data for fraud prevention.
WooPayments also uses the Sift service of Sift Science, Inc. (USA) for fraud prevention. At checkout, a Sift script collects device and browser characteristics and your behaviour on the page; Sift processes this data under its own responsibility.
The legal basis for fraud prevention is Art. 6(1)(f) GDPR; the legitimate interest of us and the payment service providers is to prevent payment fraud.
Contact
If you contact us by email or phone, we process your information in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry concerns a contract, otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering your enquiry.
Facebook and Instagram
We maintain a Facebook page and an Instagram profile to provide information about our work and to get in touch with interested people (Art. 6(1)(f) GDPR). The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. We are jointly responsible with Meta for the statistics of our Facebook page (“Page Insights”) (Art. 26 GDPR). Meta has assumed primary responsibility for this, including for requests concerning your rights: Page Insights Controller Addendum. You can also exercise your rights against us. How Meta processes your data is described in the Meta Privacy Policy.
Transfers to third countries
Some services also process data in the USA. According to the providers, this is based on:
- Stripe: the European Commission’s adequacy decision for certified US companies (EU-US Data Privacy Framework), where applicable, and the European Commission’s standard contractual clauses
- WooPayments (WooCommerce Ireland Ltd.): standard contractual clauses
- Sift: standard contractual clauses
The European Commission’s standard contractual clauses are available at commission.europa.eu.
For deliveries to countries outside the EU and the EEA, the postal service in the country of destination receives your name and delivery address. This is necessary for the performance of the contract (Art. 49(1)(b) GDPR).
Storage period
We delete personal data as soon as it is no longer required for the respective purpose. The periods for access data, security logs and cookies are stated in the respective sections. We delete contact enquiries once they have been dealt with, unless we are required to retain them.
Data that we are required to retain under commercial and tax law is stored until these periods expire: invoices and other accounting records for eight years, commercial and business letters for six years, books and annual financial statements for ten years (Section 147 of the German Fiscal Code, AO; Section 257 of the German Commercial Code, HGB; Section 14b of the German VAT Act, UStG). We also retain contract data until the end of the regular limitation period of three years in order to be able to examine and defend against claims arising from the contract (Art. 6(1)(f) GDPR; Sections 195 and 199 BGB).
Your rights
You have the right to access the data we hold about you (Art. 15 GDPR) and the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). To exercise these rights, please contact us at the email address given above. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
Right to object
Where we process your data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21(1) GDPR).