Privacy Policy.

The controller responsible for data processing on this site is:

ATMAN Solutions UG (haftungsbeschränkt) Mahkornstr. 7 94315 Straubing Germany Zaid Aljbour, Managing Director Email: info@squatrat.de

When you visit this site, our server automatically records access data (server log files): IP address, date and time of access, pages visited, browser type and version, operating system, and referrer URL. This is used solely for the technical operation and security of the site and is not linked to any individual.

When you place an order, we process the name, delivery address, and email address needed to fulfil and invoice it, along with the contents of the order. Card details are never collected or stored by us — see “Payments” below.

When you use the electronic withdrawal function, we store your name, order reference, order and confirmation email addresses, the contract or order lines covered by the declaration, and the exact date and time received. This is necessary to receive, document, and confirm your statutory withdrawal.

When you create an account, we store your name, email address, delivery address, and any size preferences or saved products you choose to keep. When you sign up to the newsletter, we store your email address to send you launch updates and product news.

Payments are processed by Mollie B.V. Payment details are entered on Mollie's hosted checkout and go directly to Mollie — they never pass through or rest on our servers. We send Mollie the amount, order lines, contact details, and billing and delivery address needed to process the selected payment method and prevent fraud, and receive the payment status and method used.

Mollie handles payment data under its own privacy terms. See https://www.mollie.com/privacy for details.

Processing of server log data is based on Art. 6 (1)(f) GDPR (legitimate interests in the secure operation of the site).

Processing of order, delivery, and payment data is based on Art. 6 (1)(b) GDPR (performance of a contract), and — for the retention of invoices — Art. 6 (1)(c) GDPR (compliance with a legal obligation).

Processing and retention of an electronic withdrawal declaration is based on Art. 6 (1)(b) and (c) GDPR to administer the contract and comply with the statutory receipt and confirmation duties.

Processing of your email address for the newsletter is based on Art. 6 (1)(a) GDPR (consent), which you may withdraw at any time.

Server log files are deleted after 7 days. Invoices, withdrawal declarations, and related contract and booking records are retained for the applicable statutory period under German commercial, tax, and civil law — generally eight years for booking records, and longer where another obligation, limitation period, or unresolved matter requires it. Account data is kept until you close your account unless transaction records must be retained. Newsletter addresses are kept until you withdraw consent.

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing of your personal data. You may also withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, contact us at info@squatrat.de. You also have the right to lodge a complaint with a supervisory authority.

Your cart and wishlist are remembered in your browser's local storage. If you log in, we set one strictly necessary, httpOnly session cookie. None of these are used for tracking or advertising, and no optional analytics or marketing cookies are currently loaded.

Fonts are self-hosted, so no request is made to Google Fonts or any other font provider when you visit this site.

We use Mollie for payment, Sendcloud and its carriers for fulfilment, tracking, and return labels, Resend for transactional and consented marketing email, a managed Postgres provider for shop records, persistent media storage, and Cloudflare for DNS, transport security, and abuse protection. Each provider receives only the data needed for its role and must be covered by the appropriate data-processing terms before launch.

This site links to external services including Instagram and TikTok. We have no control over the content or privacy practices of those sites — please refer to their own policies.

We may update this policy as the shop changes. The current version is always the one on this page.