Privacy Policy
1. Data Controller
The controller responsible for the processing of personal data on this website is:
Boox Store
Owner: Dipl.-Ing. Waldemar Luft
Selbecker Str. 83
32825 Blomberg
Germany
Email: support@boox.store
2. General Information on Data Processing
We process personal data only to the extent necessary to operate our online store, process orders and enquiries, perform contracts or comply with legal obligations.
The legal bases include in particular Article 6(1)(b) GDPR for pre-contractual measures and performance of contracts, Article 6(1)(c) GDPR for compliance with legal obligations and Article 6(1)(f) GDPR for legitimate interests. Where consent is required, processing is based on Article 6(1)(a) GDPR.
3. Website Access and Server Log Data
When you access our website, technically necessary data may be processed. This may include your IP address, date and time of access, requested page or file, browser type, operating system and technical connection information.
This processing is used for the secure and reliable operation of the website, troubleshooting and protection against misuse and attacks. The legal basis is Article 6(1)(f) GDPR.
4. Customer Accounts and Orders
When you place an order or create a customer account, we process the information you provide. This includes in particular your name, billing and delivery address, email address, where applicable your telephone number, and information relating to your order, payment and shipment.
The data is used to process and fulfil your order, communicate with you about your order and handle warranty, return and service cases. The legal basis is Article 6(1)(b) GDPR.
5. Contacting Us
If you contact us by email or through a contact form, we process the information you provide in order to deal with your enquiry.
Where your enquiry relates to a contract or an order, processing is based on Article 6(1)(b) GDPR. In other cases, processing is based on our legitimate interest in responding to customer enquiries pursuant to Article 6(1)(f) GDPR.
6. Payment Processing
Depending on the payment method selected, information required to process the payment may be transferred to the relevant payment service provider.
Bank Transfer
When paying by bank transfer, payment processing takes place between the financial institutions involved. We process payment information required to identify and allocate your payment.
PayPal
If you choose PayPal as your payment method, information required to process the payment is transferred to PayPal. PayPal processes personal data in accordance with its own privacy policies.
Further information can be found in PayPal's privacy policy.
Stripe / Credit and Debit Cards
Credit and debit card payments may be processed through Stripe. Information required to process the payment is transferred to Stripe or processed directly by Stripe.
We do not store complete credit card details ourselves. Further information about the processing of personal data can be found in Stripe's privacy policy.
7. Shipping Providers
To deliver your order, we provide the shipping company used for the shipment with the information required for delivery, in particular your name and delivery address and, where necessary for shipment processing, additional contact information.
We use shipping providers including DHL and UPS. The transfer of data is necessary for the performance of the purchase contract pursuant to Article 6(1)(b) GDPR.
8. Storage and Retention
We retain personal data only for as long as necessary for the relevant processing purpose or as required by statutory retention obligations.
Order, invoice and payment information may in particular be retained for longer periods due to applicable commercial and tax law requirements.
After the applicable retention periods have expired, the data will be deleted unless another legal basis requires or permits continued storage.
9. Disclosure of Personal Data
Personal data is disclosed only where necessary for the performance of a contract, where required by law, where you have given consent or where another legal basis permits the disclosure.
Recipients may include payment service providers, shipping companies, IT and hosting providers, tax advisers and public authorities where required by law.
10. Cookies and Technically Necessary Storage
Our online store uses technically necessary cookies and comparable technologies where required for the operation of the store, shopping cart, checkout process, customer login or security functions.
If we use non-essential cookies or services in the future that require consent, they will only be activated after the required consent has been obtained.
11. Your Rights
Subject to the applicable statutory requirements, you have rights including access to your personal data, correction of inaccurate data, erasure, restriction of processing, data portability and objection to certain processing activities.
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
12. Data Security
We use appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or unauthorised disclosure. Data transmitted through our website is encrypted using HTTPS.
13. Changes to this Privacy Policy
We may update this Privacy Policy where our services, systems or applicable legal requirements change.
Last updated: September 2026