Data protection statement
1. Introduction
We, Substanz Team GmbH, are committed to protecting your personal data and respecting your privacy. This Data Protection Statement outlines how we handle your personal information in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
2. Data Controller
The data controller responsible for the processing of personal data on this website is:
Substanz Team GmbH
Email: info@substanz.team
3. Collection and Processing of Personal Data
We collect and process personal data when you use our ecommerce shop, register on our website, make a purchase, or contact us. The types of data we collect include:
Contact Information: Name, address, email address, phone number
Account Information: Username, password
Order Information: Payment details, billing address, order history
Usage Data: IP address, browser type, access times, referring URL
4. Analytics
We use Google Analytics, a web analytics service provided by Google Ireland Limited, to understand how visitors use our website. Google Analytics uses cookies to collect information such as pages visited, time spent on the site, and general location. This data is processed on the legal basis of your consent (Art. 6(1)(a) GDPR), given via our cookie banner. You can withdraw your consent at any time through our Cookie Preferences settings.
5. Cookies
Our website uses cookies to ensure basic functionality and to improve your browsing experience. Cookies are small text files stored on your device.
We use the following categories of cookies:
Necessary Cookies: Required for the website to function properly (e.g. remembering your cookie preferences). These cannot be disabled.
Analytics Cookies: Used to understand how visitors interact with our website (see "Analytics" section above). These are only set with your consent.
Marketing Cookies: Used to deliver relevant content and track engagement across our channels. These are only set with your consent.
You can manage or withdraw your consent at any time via the "Cookie Preferences" link in our website footer.
6. Legal Basis for Processing
We process your personal data based on the following legal grounds:
Performance of a Contract (Art. 6(1)(b) GDPR): Processing is necessary for the performance of a contract to which you are a party.
Consent (Art. 6(1)(a) GDPR): You have given consent to the processing of your personal data for specific purposes.
Legitimate Interests (Art. 6(1)(f) GDPR): Processing is necessary for the purposes of our legitimate interests, provided these are not overridden by your interests or fundamental rights.
Legal Obligation (Art. 6(1)(c) GDPR): Processing is necessary for compliance with a legal obligation to which we are subject.
7. Use of Personal Data
We use your personal data for the following purposes:
Processing and fulfilling orders
Managing your account
Providing customer support
Sending order confirmations and updates
Improving our website and services
Marketing and promotional communications (with your consent
8. Newsletter
If you subscribe to our newsletter, we process your email address to send you updates about new materials, suppliers, and Substanz news. Processing is based on your consent (Art. 6(1)(a) GDPR), given by ticking the consent checkbox on our subscription form.
We use a double opt-in process: after signing up, you will receive a confirmation email and must confirm your subscription before you begin receiving newsletters. You can unsubscribe at any time using the link included in every newsletter email, or by contacting us at info@substanz.team.
9. Data Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal data to third parties, except in the following cases:
Service Providers: We may share your data with third-party service providers who assist us in operating our website, conducting our business, or servicing you, provided they agree to keep your data confidential.
Legal Requirements: We may disclose your data if required by law or in response to valid requests by public authorities.
10. International Data Transfers
Our website is hosted by Squarespace, Inc., based in the United States. Where personal data is transferred to the US, this transfer is based on the EU-US Data Privacy Framework, under which Squarespace is certified, ensuring an adequate level of data protection as recognized by the European Commission.
11. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal requirements. After that period, we will delete or anonymize your data.
12. Your Rights
You have the following rights regarding your personal data:
Access (Art. 15 GDPR): You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and information.
Rectification (Art. 16 GDPR): You have the right to obtain the rectification of inaccurate personal data concerning you.
Erasure (Art. 17 GDPR): You have the right to obtain the erasure of personal data concerning you.
Restriction of Processing (Art. 18 GDPR): You have the right to obtain the restriction of processing of your personal data.
Data Portability (Art. 20 GDPR): You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.
Objection (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you.
Withdrawal of Consent: You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes applicable data protection law. You may contact the supervisory authority in your place of residence, place of work, or the place of the alleged infringement.
To exercise these rights, please contact us at info@substanz.team.
13. Changes to This Data Protection Statement
We may update this Data Protection Statement from time to time. We will notify you of any changes by posting the new Data Protection Statement on our website. You are advised to review this Data Protection Statement periodically for any changes.
14. Contact Information
If you have any questions about this Data Protection Statement or our data protection practices, please contact us at:
Substanz Team GmbH
Email: info@substanz.team
Last updated: August, 2026