Last updated: September 2026

Privacy Policy for the Honeyz Boulevard Online Shop

1. Definitions

Personal data is any information relating to an identified or identifiable natural person. This privacy policy informs you which data we process when you visit our online shop and when you place an order.

2. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Hanna Brake
Honeyz Boulevard
Bernhard-Nocht-Straße 1
20359 Hamburg

Phone: 0172 4103601
Email: support@honeyzboulevard.com

3. Server Log Files When Visiting the Website

This website is operated via IONOS. When you visit the website, the hosting provider automatically collects technical access data (server log files), for example your IP address, the date and time of access, the page accessed, and the browser and operating system used. This processing is based on Art. 6 (1)(f) GDPR (legitimate interest in the technically fault-free provision of the website).

4. Contact Form and Getting in Touch

If you contact us via a contact form, by email, or by phone, we process the data you provide (such as name, email address, message text) to handle your inquiry. The legal basis is Art. 6 (1)(b) GDPR where the inquiry is a pre-contractual request, or Art. 6 (1)(f) GDPR (legitimate interest in responding to inquiries).

5. Orders in the Online Shop

When you place an order in our online shop, we collect and process the data necessary to fulfil the contract: name, delivery address, billing address, email address, phone number where applicable, and details of the ordered item or service. The legal basis is Art. 6 (1)(b) GDPR (performance of a contract or pre-contractual measures).

To fulfil the contract, we share your data with the following recipients:

  • Shipping provider: Hermes Germany GmbH, to deliver your order
  • Payment service providers, depending on your chosen payment method: PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg; Klarna Bank AB (publ), Sweden; and Stripe Payments Europe, Limited, Ireland (for payment by credit card, Apple Pay, and Google Pay)
  • Tax advisor or accounting services, to comply with commercial and tax-law obligations

6. Gift Vouchers

When you purchase a gift voucher, we process the data necessary to issue and later redeem it (voucher number, purchase date, amount, purchaser details). The legal basis is likewise Art. 6 (1)(b) GDPR.

7. Cookies and Tracking

This website uses cookies. We use technically necessary cookies (for example, for the shopping cart) on the basis of Art. 6 (1)(f) GDPR. For all cookies that are not technically necessary, such as those used for analytics or marketing purposes, we obtain your consent in advance pursuant to Section 25 TDDDG. You can withdraw your consent at any time via the cookie settings.

8. Embedded Third-Party Services

We currently do not embed any third-party services such as Google Analytics, Google Tag Manager, Meta Pixel, YouTube or Instagram embeds, or WhatsApp Business. Should this change, we will update this privacy policy accordingly and, where required, obtain your prior consent pursuant to Art. 6 (1)(a) GDPR in conjunction with Section 25 TDDDG.

9. Retention Periods

We store order and invoice data for the duration of the statutory retention obligations: 6 years under commercial law pursuant to Section 257 HGB, and 10 years under tax law pursuant to Section 147 AO.

10. SSL Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https” prefix in your browser's address bar.

11. Your Rights as a Data Subject

Under the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, as well as a right to rectification, restriction, erasure, and data portability of this data (Art. 15 to 20 GDPR). You also have the right to object to the processing of your data based on legitimate interest (Art. 21 GDPR).

12. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). For Honeyz Boulevard, based in Hamburg, this is the Hamburg Commissioner for Data Protection and Freedom of Information.

13. Changes to This Privacy Policy

We reserve the right to amend this privacy policy so that it continues to meet current legal requirements or to reflect changes to our services.