Privacy Policy
Last updated: August 10, 2026
At TAPORCU, we take the protection of your personal data seriously. This Privacy Policy explains how we collect, use, store and protect personal data when you visit or use our online store at taporcu.store, place an order, contact us or otherwise interact with our services.
The processing of personal data is carried out in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR/DSGVO), applicable German data protection laws and, where applicable, the Telecommunications-Digital Services Data Protection Act (TDDDG).
1. Data Controller
The controller responsible for the processing of personal data on this website is:
TAPORCU
Schwanseestraße 69A
81549 München-Obergiesing-Fasangarten
Germany
Phone: +49 178 3481689
Email: aboutus@taporcu.store
Website: taporcu.store
For questions concerning the processing of your personal data or the exercise of your data protection rights, please contact us using the email address above.
2. Personal Data We Collect
Depending on how you use our website, we may process the following categories of personal data:
2.1 Information you provide to us
This may include:
- First and last name
- Billing and delivery address
- Email address
- Telephone number
- Account login information
- Order and transaction information
- Information provided when contacting customer service
- Information included in messages, inquiries or requests
- Information you voluntarily provide when subscribing to communications
We only collect information that is reasonably necessary for the relevant purpose.
2.2 Information collected automatically
When you visit our website, certain technical information may be automatically processed, including:
- IP address
- Date and time of access
- Browser type and version
- Operating system
- Device information
- Referring website
- Pages visited
- Date and duration of your visit
- Technical information necessary to maintain website security and functionality
This information may be recorded in server logs or similar technical systems.
3. Purposes of Processing
We may process personal data for the following purposes:
- Providing and operating our online store
- Processing and fulfilling orders
- Processing payments
- Arranging delivery of purchased products
- Communicating with customers
- Responding to customer inquiries
- Providing customer support
- Managing customer accounts
- Preventing fraud and misuse
- Maintaining website security
- Improving website functionality and user experience
- Complying with legal and regulatory obligations
- Establishing, exercising or defending legal claims
- Sending marketing communications where legally permitted and, where required, based on your consent
- Performing website statistics and analysis where permitted by law and applicable consent requirements
We do not use personal data for purposes incompatible with the purposes described in this Privacy Policy unless permitted or required by applicable law.
4. Legal Bases for Processing
Depending on the circumstances, we rely on one or more of the following legal bases under Article 6 GDPR:
4.1 Contractual necessity – Article 6(1)(b) GDPR
We process personal data where this is necessary to perform a contract with you or to take steps at your request before entering into a contract.
This may include:
- Processing orders
- Processing payments
- Arranging delivery
- Managing customer accounts
- Providing customer service related to an order
4.2 Legal obligations – Article 6(1)(c) GDPR
We may process personal data where processing is necessary to comply with a legal obligation.
This may include accounting, tax, commercial and statutory record-keeping requirements.
4.3 Legitimate interests – Article 6(1)(f) GDPR
Where appropriate, we may process personal data based on our legitimate interests, provided that those interests are not overridden by your fundamental rights and freedoms.
Such interests may include:
- Protecting our website and systems
- Preventing fraud
- Maintaining IT security
- Improving our services
- Handling customer disputes
- Establishing or defending legal claims
- Ensuring the proper operation of our business
4.4 Consent – Article 6(1)(a) GDPR
Where required by law, we process personal data on the basis of your consent.
You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
5. Visiting Our Website
When you access taporcu.store, our hosting and technical infrastructure may process certain technical information in order to deliver the website securely and reliably.
This may include your IP address, access time, browser information, operating system and other technical information.
The processing may be necessary for:
- Delivering website content
- Maintaining website availability
- Protecting against attacks and misuse
- Detecting technical problems
- Ensuring the security and stability of our systems
Where processing is based on legitimate interests, our legitimate interest is the secure and reliable operation of our website.
6. Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Cookies are small files or information stored on or accessed from your device.
We distinguish between:
6.1 Necessary cookies
Necessary cookies are used where they are technically required to provide services you have requested or to operate essential website functions.
These may include cookies necessary for:
- Shopping cart functionality
- Login sessions
- Checkout processes
- Security
- Language or region settings
- Consent management
- Website functionality
Where legally permitted, these technologies may be used without separate consent because they are strictly necessary for the requested service.
6.2 Analytics and statistics cookies
Where we use analytics technologies that are not strictly necessary, these technologies will only be activated where the applicable legal requirements for consent have been satisfied.
Analytics may help us understand:
- Which pages visitors use
- How visitors navigate the website
- Which products or content are viewed
- How the website performs
6.3 Marketing and advertising technologies
If we use advertising or marketing technologies that require consent, they will only be activated after the legally required consent has been obtained.
You can manage or withdraw your consent through our cookie/consent management interface where available.
Under German law, the storage of information on or access to information already stored on a user’s device generally requires consent unless an applicable statutory exception applies, including where the technology is strictly necessary for a service expressly requested by the user.
7. Cookie Consent Management
Where consent is required, we use a consent management mechanism to allow visitors to make informed choices regarding optional cookies and similar technologies.
Depending on the technologies actually used on the website, you may be able to:
- Accept optional technologies
- Reject optional technologies
- Select individual categories
- Change your preferences later
- Withdraw previously given consent
Your consent choices may be stored so that we can remember your preferences.
8. Orders and Customer Accounts
When you place an order through our online store, we process the personal data necessary to complete the transaction.
This may include:
- Name
- Billing address
- Delivery address
- Email address
- Telephone number
- Order details
- Payment-related information
- Shipping information
We use this information to:
- Process your order
- Confirm your purchase
- Arrange payment
- Prepare and ship your products
- Provide delivery updates
- Handle returns and refunds
- Communicate with you regarding your order
Where you create a customer account, we may additionally process account-related information to provide and maintain the account.
9. Payment Processing
Depending on the payment methods available on our website, payments may be processed by external payment service providers.
When you select a payment method, relevant information may be transferred to the applicable payment provider to process the transaction, prevent fraud and comply with legal requirements.
Payment providers may process personal data under their own privacy policies and may act as independent controllers or processors depending on the service and applicable legal arrangement.
We do not generally store complete payment card details on our own systems when payment processing is handled directly by an external payment provider.
The specific payment providers available on the website may vary over time.
10. Shipping and Delivery
To deliver your order, we may provide the necessary personal information to shipping and logistics service providers.
This may include:
- Name
- Delivery address
- Email address
- Telephone number
- Order or shipment reference
The information is used solely as necessary to arrange and complete delivery and related logistics services.
11. Customer Service and Contact
If you contact us by email, telephone or through a contact form, we process the information you provide to respond to your request.
Depending on the nature of your inquiry, this may include:
- Name
- Email address
- Telephone number
- Order number
- Address
- Contents of your message
- Other information voluntarily provided by you
The legal basis may be Article 6(1)(b) GDPR where your request relates to a contract, Article 6(1)(f) GDPR where we have a legitimate interest in handling your inquiry, or Article 6(1)(a) GDPR where consent is required.
12. Marketing Communications
Where permitted by applicable law, we may send information about our products, services, promotions or news.
Where consent is legally required, we will only send marketing communications after obtaining your consent.
You can unsubscribe from marketing communications at any time by:
- Using the unsubscribe function included in the relevant communication; or
- Contacting us at aboutus@taporcu.store.
Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.
13. Data Sharing with Service Providers
We may work with external service providers that process personal data on our behalf.
These may include providers for:
- Website hosting
- IT services
- Payment processing
- Shipping and logistics
- Customer support
- Email communication
- Security
- Analytics
- Cookie and consent management
- Website maintenance
Where required by GDPR, we enter into appropriate data processing agreements with processors and take reasonable measures to ensure that personal data is processed lawfully and securely.
We only provide service providers with the information reasonably necessary for their respective services.
14. International Data Transfers
Some service providers may process personal data outside Germany or the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we take appropriate measures required under applicable data protection law.
Depending on the circumstances, this may include:
- An adequacy decision issued by the European Commission;
- Standard Contractual Clauses approved by the European Commission;
- Appropriate supplementary safeguards; or
- Another legally recognized transfer mechanism.
Where relevant, additional information regarding international transfers can be requested from us.
15. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected.
The retention period depends on the type and purpose of the data.
For example, transaction and accounting records may need to be retained for longer periods because of statutory retention obligations under German commercial and tax law.
After the applicable retention period expires, the relevant personal data will be deleted or anonymized unless further processing is legally permitted or required.
16. Data Security
We take appropriate technical and organizational measures to protect personal data against:
- Unauthorized access
- Accidental loss
- Destruction
- Alteration
- Unauthorized disclosure
- Other unlawful processing
Security measures may include access controls, authentication procedures, encryption, secure hosting and other technical safeguards appropriate to the risks involved.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
German law also requires digital service providers to take appropriate technical and organizational measures to protect their services against unauthorized access and disruptions.
17. Your Data Protection Rights
Under the GDPR, you may have the following rights:
Right of access
You may request confirmation as to whether we process personal data concerning you and, where applicable, request access to that data.
Right to rectification
You may request correction of inaccurate or incomplete personal data.
Right to erasure
You may request deletion of your personal data where the legal requirements are met.
Right to restriction of processing
You may request restriction of processing where the legal requirements are met.
Right to data portability
Where applicable, you may request to receive personal data concerning you in a structured, commonly used and machine-readable format or request its transmission to another controller.
Right to object
You may object to processing based on legitimate interests for reasons arising from your particular situation.
You may also object at any time to the processing of personal data for direct marketing purposes.
Right to withdraw consent
Where processing is based on consent, you may withdraw your consent at any time.
The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
18. How to Exercise Your Rights
To exercise any of your data protection rights, please contact:
TAPORCU
Schwanseestraße 69A
81549 München-Obergiesing-Fasangarten
Germany
Email: aboutus@taporcu.store
Phone: +49 178 3481689
We may need to verify your identity before fulfilling certain requests in order to protect your personal data from unauthorized disclosure.
19. Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority.
You may contact the supervisory authority responsible for your place of residence, place of work, or the place where the alleged infringement occurred.
For a business established in Bavaria, the competent supervisory authority may depend on the nature of the business and the processing activities.
Further information concerning German data protection supervisory authorities can be obtained from the relevant German data protection authorities.
20. Children’s Privacy
Our website is not intentionally directed at children.
We do not knowingly collect personal data from children where such collection is prohibited by applicable law.
If you believe that a child has provided us with personal data without the necessary legal basis or authorization, please contact us so that we can review and, where appropriate, delete the information.
21. Links to Third-Party Websites
Our website may contain links to third-party websites, services or platforms.
We are not responsible for the privacy practices or content of third-party websites.
When you leave our website, we recommend reviewing the privacy policy of the relevant third party.
22. Automated Decision-Making and Profiling
Unless otherwise stated for a particular service, we do not intend to use personal data collected through our website for automated decision-making that produces legal effects or similarly significantly affects you.
If we introduce such processing in the future, we will provide the information required by applicable data protection law.
23. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes to our services
- Changes to the technologies used on our website
- Changes to applicable laws
- Changes to our data processing activities
The updated version will be published on this page with an updated “Last updated” date.
We recommend reviewing this Privacy Policy periodically.
24. Contact Information
If you have questions regarding this Privacy Policy or our handling of personal data, please contact us:
TAPORCU
Schwanseestraße 69A
81549 München-Obergiesing-Fasangarten
Germany
Email: aboutus@taporcu.store
Phone: +49 178 3481689
Website: taporcu.store