Privacy policy

Controller within the meaning of the GDPR: Henco2 GmbH, Badweg 1, 83126 Flintsbach a. Inn, email info@henco2-gmbh.de, phone +49 175 223 9594.

When you visit the site we process technically necessary data: IP address, date and time, page requested, volume transferred, referrer, browser and operating system.

The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in secure and stable operation. Logs are deleted or truncated after 7 days at the latest.

To process an order we handle your name, delivery and billing address, email address and the product configuration you chose. The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

Payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Payment details go directly to Stripe; we never receive them. Stripe's privacy policy applies in addition: https://stripe.com/privacy

If you choose Klarna, Stripe passes your order and contact details to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna is an independent controller and runs a credit check for pay-later options: https://www.klarna.com/international/privacy-policy/

If you choose PayPal, you are redirected to PayPal and pay from your PayPal account. Stripe passes the order amount, currency and order reference to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg. PayPal is an independent controller for that payment; PayPal's privacy statement applies: https://www.paypal.com/en/legalhub/privacy-full

If you save your details with Stripe Link, Stripe creates an account with itself on the basis of your consent to Stripe. For iDEAL and Wero the respective provider's terms apply; this data also passes through Stripe only. Stripe may transfer data to Stripe, Inc. in the USA under the EU-US Data Privacy Framework and the EU standard contractual clauses.

An engraving text you enter is part of the order. It may contain personal data, such as a name, and is kept together with the order data.

Invoice-related data is retained for 10 years under German commercial and tax law.

Your cart and your current bracelet configuration are stored solely in your browser (localStorage, key “razelet.cart.v1”). This data only reaches our server once you start the checkout.

The language identifier in the address is technically necessary and does not require consent.

The contact form hands your message to your own email program; nothing is stored on our server. If you email us, we process your details to handle the request (Art. 6(1)(b) or (f) GDPR) and delete the message once it is dealt with, unless a retention obligation applies.

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Consent can be withdrawn at any time.

To exercise these rights, simply write to info@henco2-gmbh.de.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for our registered office is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

We use Vercel Web Analytics to count page views and checkout steps in aggregate. It sets no cookies and stores nothing on your device; it derives a short-lived hash from IP address and browser signature that expires after 24 hours. We only see aggregate numbers, never individuals. Legal basis is Art. 6(1)(f) GDPR — our legitimate interest in improving the shop.

We currently use no Google Analytics, Meta pixel, TikTok pixel or other services that would require consent. If they were added, they would load only after your active consent in the cookie dialog (§ 25 TDDDG, Art. 6(1)(a) GDPR).

You enter the prize draw “Gewinn a Wiesn” (razelet.com/wiesn26) through the WiesnCheck or the hit quiz in the Wiesn Survival App (app.razelet.com), or through a lead form in our ads on Facebook and Instagram. We process first and last name, mobile number and e-mail address; in the app also a random device id, a nickname of your choice with your score, and the days on which you received a ticket (at most one per day). The purpose is running the draw: assigning tickets, drawing, notifying winners and handing over prizes. Legal basis is Art. 6(1)(b) GDPR (terms of participation).

Lead forms: when you open the prize-draw form from an ad on Facebook or Instagram, the form is provided by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. Meta prefills it from your profile; you can change the details before sending. Only once you send it do we receive name, e-mail address and mobile number, plus the time and the ad you came from. Meta processes the form data on our behalf under its Lead Ads terms; for the use of Facebook and Instagram itself Meta is an independent controller (https://www.facebook.com/privacy/policy). Transfers to Meta Platforms, Inc. in the USA rely on the EU-US Data Privacy Framework.

We send news about offers and discounts by e-mail, text message or WhatsApp only if you gave separate consent in the form or the app (Art. 6(1)(a) GDPR). Taking part does not depend on it. You can withdraw consent at any time for the future, e.g. by e-mail or via the unsubscribe link.

Entry data from the app is stored in a database by Upstash, Inc. via Vercel in the EU region. We retrieve lead data from our Meta ad account and use it only for this draw and, with consent, for offers. We name winners publicly only with their express consent, e.g. at the prize handover with press. Entry data and tickets are deleted 30 days after the prize handover (by 9 November 2026 at the latest), winners' data once no statutory retention duty applies. If you consented to offers, we keep your name and contact details until you withdraw.