Effective Date: 2026-07-01
1. Overview of Data Protection
The following information provides an overview of what happens to your personal data when you visit our shop website at shop.mixxx.org. Personal data is any data by which you can be personally identified. We treat your personal data confidentially and in accordance with legal data protection regulations as well as this privacy policy. This privacy policy explains what data we collect and how we use it.
2. Who We Are (Data Controller)
The data controller responsible for data processing on this website under the GDPR is:
Mixxx e.V.
Am Reisenbrook 49d
22359 Hamburg
Germany
sales@mixxx.org
Registration Court:
Vereinsregister des Amtsgerichts Hamburg
Association Register Number: VR 25977
3. What Data We Collect
3.1 Server Log Files
You can visit our websites without giving any personal information. We only store access data in so-called server log files, such as the name of the requested file, the date and time of the retrieval, the amount of data transferred and the requesting provider. These data are evaluated solely to ensure trouble-free operation of the site and to improve our offer and do not allow us to conclude on your person. These are:
• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address
3.2 Cookies
Our website uses cookies to enable the use of certain functions like the Cart. Cookies are small text files that are stored on your device by your browser. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies).
You can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for certain cases or in general. Without accepting cookies the checkout process is not possible.
3.3 Contact Form and E-Mails
If you contact us via the contact form or email, your information (e.g., name, email address, message) will be stored to process your inquiry. We do not share this data without your consent.
3.4. Data Processing During Checkout
When you place an order in our shop, we collect the following personal data:
• Name
• Address
• Email address
• Phone number (for the case of customs or delivery issues)
• Payment details
3.5 Payment Data
We work with the external payment service provider Stripe. Your payment data will be processed directly by them. Please refer to the privacy policies of Stripe for more information.
https://stripe.com/privacy
4. How We Use Your Data
These data are used solely for the purpose of fulfilling your order. The legal basis is Article 6(1)(b) GDPR (fulfillment of a contract), article 6(1)(C) GDPR (compliance with commercial/tax laws) and article 6(1)(f) GDPR (IT security and anti-fraud measures)
Data is shared with service providers (shipping, payment, hosting) under Data Processing Agreements (DPA) to ensure security. Third-country transfers only occur if adequate protection is guaranteed.
5. How We Store Your Data
Data is stored securely via our hosting provider OVHcloud (Data Processor).
It is stored on GDPR-compliant servers located in Gravelines, France (EU) certified according to international security standards ISO 27001 / ISO 27018. For more details please refer to the Data Processing Agreement: https://us.ovhcloud.com/legal/data-processing-agreement/
We retain your personal data only for as long as necessary to fulfill the purposes for which they were collected or as required by law.
6. Your Rights
Under applicable law, you have the following rights regarding your personal data:
• Right of access to your stored personal data, their origin and recipients, and the purpose of data processing (article 15 GDPR).
• Right to rectification (article 16 GDPR).
• Right to erasure / Right to be Forgotten (article 17 GDPR). Note: Account data is deleted immediately, but statutory German tax laws require us to keep invoice data for 10 years.
• Right to restriction of processing (article 18 GDPR).
• Right to data portability, where technically feasible. (article 19 GDPR)
• Right to object to the processing of your data (article 20 GDPR).
Requests will be answered within the legal statutory time frame of one month.
You also have the right to lodge a complaint with a supervisory authority. If you believe that your personal data has been handled unlawfully by us, you may contact our localized regulatory supervisory authority:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI)
Ludwig-Erhard-Straße 22,
20459 Hamburg
https://datenschutz-hamburg.de
7. Changes to This Privacy Policy
We reserve the right to update this privacy policy to reflect changes in legal requirements or new technologies.