// Privacy

Privacy

Last updated: May 2026. The legal master version is the German one — this translation is provided for international visitors.

1. Data controller

The controller under the General Data Protection Regulation (GDPR) is:
Max Johann Hubert Hasenohr
OREN Fragments
Rheinsberger Straße 43, 10435 Berlin
Phone: +49 176 24315356
Email: johannhubert@orenfragments.com

2. General data processing

We process personal data only to the extent necessary to provide a functional website and our services. Processing takes place only with user consent or on a legal basis (Art. 6 (1) GDPR).

3. Website access and server log files

Each time the website is accessed, our system automatically collects data from the accessing computer (IP address, date/time, browser type, operating system, referrer URL). Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in technical operation).

4. Shopify as hosting provider

This website is hosted by Shopify International Ltd., Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes data on our behalf as required to operate the online shop (data processing agreement under Art. 28 GDPR).

More information: https://www.shopify.com/legal/privacy

5. Cookies

This website uses cookies. Cookies are small text files stored on your device.

Technically necessary cookies (cart, login status, language) are set on the basis of Art. 6 (1)(f) GDPR. Without them the website is not functional.

Optional cookies (analytics, marketing) are set only with your consent (Art. 6 (1)(a) GDPR). You may withdraw this consent at any time.

6. Order processing

When you place an order, we process the data you provide (name, delivery address, email, payment data) to fulfil the contract under Art. 6 (1)(b) GDPR. Data is shared only with shipping carriers and payment providers as needed for delivery and billing.

7. Payment

Payment is processed via Shopify Payments and any external payment providers you choose (e.g. PayPal, Klarna). The privacy notices of those providers apply in addition.

8. Newsletter

We use the double opt-in procedure. After signing up you receive an email with a confirmation link. You are added to our list only after confirmation. You may withdraw your consent at any time.

9. Your rights

You have the right to:

  • Access to your stored data (Art. 15 GDPR)
  • Rectification of incorrect data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Complaint to a supervisory authority (Art. 77 GDPR)

Competent supervisory authority for Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstraße 219, 10969 Berlin.

10. Changes to this privacy policy

We may update this privacy policy to keep it aligned with current legal requirements. The version in force is the one shown when you access the site.