1. Controller

The controller responsible for processing personal data on this website is:

Armin Heining
GAY-TANTRA® International
Mehringdamm 32–34
10961 Berlin
Germany

Phone: +49 170 4975241
Email: info@gay-tantra.de

2. General Information about Data Processing

Personal data means any information relating to an identified or identifiable natural person.

We process personal data only to the extent necessary to operate this website, respond to enquiries, process orders or where you have given your consent.

Unless a different legal basis is specified below, personal data is processed in particular on the basis of Article 6(1)(b) GDPR for pre-contractual measures or the performance of a contract, Article 6(1)(c) GDPR for compliance with legal obligations, or Article 6(1)(f) GDPR for the purposes of our legitimate interests.

3. Hosting and Server Log Files

This website is hosted by Contabo. When you access the website, the web server automatically processes information in server log files. This information may include:

• the IP address of the accessing device,
• the date and time of access,
• the page or file accessed,
• the amount of data transferred,
• the browser type and version,
• the operating system used,
• the referrer URL and
• the requesting internet service provider.

This data is processed to provide the website technically, ensure its stability and security, and identify and prevent improper access. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in operating our online services securely and reliably.

Further information is available in Contabo’s privacy policy:
Contabo Privacy Policy

4. Cookies and Technically Necessary Functions

Our website uses cookies and comparable technologies. Cookies are small text files that may be stored on your device or used to access information stored on your device.

Technically necessary cookies are used to provide the essential functions of the webshop. These include the shopping basket, the ordering process, the selected language, payment processing, security functions and, where applicable, your cookie preferences.

The storage of or access to technically necessary information is based on Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Subsequent processing of personal data, where required to fulfil your order, is based on Article 6(1)(b) GDPR. In other cases, it is based on Article 6(1)(f) GDPR.

Where consent is required for the use of additional cookies or services, they are used only after you have given your consent in accordance with Section 25(1) TDDDG and Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

We currently do not use Google Analytics or any other website audience or visitor measurement service.

5. Age Verification

As parts of our offer are intended exclusively for adults, an age confirmation or proof of age may be required when visiting the website or purchasing appropriately marked products.

The data is processed to verify eligibility to access or purchase the relevant content and therefore for pre-contractual measures or the performance of a contract pursuant to Article 6(1)(b) GDPR, as well as for compliance with legal obligations pursuant to Article 6(1)(c) GDPR.

If an official document is submitted as proof of age, we use the data contained in it exclusively for age verification. Information that is not required may be redacted before the document is submitted. The proof will be deleted as soon as it is no longer required for verification and documentation and provided that no statutory retention obligations apply.

6. Contacting Us

If you contact us by email, telephone or through a contact form, we process the information you provide in order to respond to your enquiry.

This information may include your name, email address, telephone number and the content of your message.

If your enquiry concerns a contract or pre-contractual measures, processing is based on Article 6(1)(b) GDPR. In other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in responding appropriately to your enquiry.

The information will be deleted once your enquiry has been fully resolved, unless statutory retention obligations or other legitimate reasons require its continued storage.

7. Orders Placed through the Webshop

When you place an order, we process the data required to establish, perform and complete the contract. This may include:

• your name, billing address and, where applicable, delivery address,
• your email address and, where applicable, telephone number,
• the products ordered, prices and order information,
• the payment method and payment status,
• shipping and delivery information and
• information required under tax and commercial law.

The information marked as mandatory is required to conclude the contract. Without this information, the order cannot be completed.

Processing is based on Article 6(1)(b) GDPR. Where we are legally required to retain invoices and business records, continued processing is based on Article 6(1)(c) GDPR.

No customer account is created in our webshop. The information required for an order is processed in connection with the respective order.

For the performance of the contract, necessary information may be shared with payment providers, shipping providers, hosting and IT service providers, and providers of accounting and invoicing software.

8. Payment Processing through Stripe

We use Stripe to process credit and debit card payments and other payment methods displayed during checkout. For customers in the European Economic Area, the provider is generally Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

If you select a payment method offered through Stripe, the data required to process the payment is transferred to Stripe. This may include your contact details, billing information, order information, payment information, IP address and technical data.

Processing is carried out for the performance of the contract on the basis of Article 6(1)(b) GDPR. Where Stripe processes data to meet legal obligations, prevent fraud or safeguard its own legitimate interests, Stripe acts as an independent controller.

Further information is available in Stripe’s privacy policy:
Stripe Privacy Policy

9. Payments through Klarna

If Klarna is offered during checkout and you select it as your payment method, the data required to process the payment is transferred to Klarna. The provider is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

The transferred information may include your contact details, billing information, order information, payment information and technical data. Klarna may also process this information for identity and credit checks and for fraud prevention.

The data is transferred for the performance of the contract on the basis of Article 6(1)(b) GDPR. Klarna is independently responsible for any further processing.

Further information is available in Klarna’s privacy policy:
Klarna Privacy Policy

10. Shipping of Physical Goods

For the shipment of physical goods, we transfer the necessary information to Deutsche Post or to the shipping provider used for the respective delivery.

The transferred information includes in particular the recipient’s name, delivery address and, where required for delivery, additional contact details.

The information is transferred for the performance of the contract on the basis of Article 6(1)(b) GDPR.

Further information is available in the privacy policy of Deutsche Post:
Deutsche Post Privacy Policy

11. Invoicing and Accounting with Lexware Office

We use Lexware Office to create and manage invoices and to fulfil our obligations under tax and commercial law. For this purpose, the necessary customer, order and invoice information is processed.

Processing is carried out for the performance of the contract pursuant to Article 6(1)(b) GDPR and for compliance with statutory retention and documentation obligations pursuant to Article 6(1)(c) GDPR.

Further information is available in Lexware’s privacy information:
Lexware Privacy Information

12. Newsletter and Brevo

If you expressly subscribe to our newsletter, we process your email address and, where applicable, your name in order to send you the newsletter. You may subscribe through a registration form or by actively selecting the corresponding option during checkout.

Processing is based on your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future. You can use the unsubscribe link included in every newsletter or send us a message at info@gay-tantra.de.

We use Brevo to send and manage our newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. Brevo processes the information required for sending the newsletter on our behalf.

Further information is available in Brevo’s privacy policy:
Brevo Privacy Policy

13. Transactional Emails

We send transactional emails in connection with orders. These include order confirmations, payment information, invoice information and messages concerning the availability of downloads.

These emails are sent through the SMTP infrastructure configured by us. Your email address, name, order number and the order information required for the respective message may be processed for this purpose.

Processing is carried out for the performance of the contract on the basis of Article 6(1)(b) GDPR.

14. Website Security with Wordfence

We use Wordfence to protect this website against malware, unauthorised access and other security risks. The provider is Defiant, Inc., 800 5th Ave., Suite 4100, Seattle, WA 98104, USA.

Wordfence may process IP addresses, access times, accessed internet addresses and technical information relating to website access. This processing serves to identify, prevent and document attacks on our website.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the security and functionality of our website and the protection of the data processed by us.

Data may also be transferred to the USA. Such transfers take place only where a lawful basis for the international transfer exists.

Further information is available in Wordfence’s privacy policy:
Wordfence Privacy Policy

15. Recipients and International Data Transfers

We transfer personal data only where this is required for the performance of a contract, we are subject to a legal obligation, you have given your consent, or we have a legitimate interest in the transfer.

Service providers engaged by us receive only the information required to perform their respective tasks. Where service providers process personal data on our behalf, they are engaged on the basis of a data processing agreement pursuant to Article 28 GDPR.

Personal data is transferred to a country outside the European Union or the European Economic Area only where the applicable legal requirements are met. Such transfers may be based in particular on an adequacy decision by the European Commission, appropriate safeguards or standard contractual clauses approved by the European Commission.

16. Retention Periods

We retain personal data only for as long as necessary for the respective processing purpose.

Order and invoice data is retained in accordance with statutory tax and commercial retention periods. Depending on the type of document, these periods may be up to ten years.

Data relating to enquiries is deleted once the enquiry has been fully resolved, unless statutory retention obligations or other legitimate reasons require its continued storage.

Newsletter data is processed until you withdraw your consent or unsubscribe from the newsletter. Evidence of the consent originally given may subsequently be retained in accordance with the applicable statutory limitation periods.

17. Your Rights

Subject to the applicable legal requirements, you have in particular the following rights:

• the right of access pursuant to Article 15 GDPR,
• the right to rectification pursuant to Article 16 GDPR,
• the right to erasure pursuant to Article 17 GDPR,
• the right to restriction of processing pursuant to Article 18 GDPR,
• the right to data portability pursuant to Article 20 GDPR,
• the right to object pursuant to Article 21 GDPR and
• the right to withdraw consent pursuant to Article 7(3) GDPR.

Withdrawing your consent does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal.

18. Right to Object

Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object to this processing at any time pursuant to Article 21 GDPR.

Where personal data is processed for direct marketing purposes, you may object to this processing at any time. Following your objection, your personal data will no longer be used for these purposes.

19. Right to Lodge a Complaint

Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

The supervisory authority responsible for us is:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany

www.datenschutz-berlin.de

20. Updates to this Privacy Policy

We update this privacy policy whenever the services we use, our technical procedures or the applicable legal requirements change.

Last updated: August 2026