1. Data Controller Identity & Overview
This Privacy Policy outlines how personal data is collected, processed, and maintained by pocketsockbox when users interact with www.pocketsockbox.com.
For the purpose of applicable data protection legislation—including the European Union General Data Protection Regulation (GDPR), European regional privacy frameworks, and applicable United States state privacy statutes—the Data Controller responsible for personal data processing operations is pocketsockbox Operations, based in the Federal Republic of Germany.
- Data Controller Entity: pocketsockbox Operations
- Primary Jurisdiction: Federal Republic of Germany
- Official Domain: www.pocketsockbox.com
- Privacy Inquiries Email: organizer@pocketsockbox.com
2. Categories of Information Collected
During standard site navigation and transactional checkout procedures, specific personal data necessary for commercial execution is processed:
- Identity & Contact Information: Name, physical billing address, parcel delivery destination address, and primary email contact details.
- Transactional Records: Transaction reference indicators, ordered item selection, billing records, and standard commercial correspondence.
- Technical Operations Data: Internet Protocol (IP) address logs, browser classification, time zone preferences, and system diagnostic logs required for site connectivity.
3. Legal Grounds & Purposes of Processing
Personal data is processed strictly under lawful conditions established by European and US statutory frameworks:
- Contractual Fulfillment: Processing order placements, managing dispatch procedures, and delivering customer communications regarding active transactions.
- Legal & Tax Compliance: Adhering to statutory record-keeping regulations under German commercial law (Handelsgesetzbuch – HGB) and fiscal legislation (Abgabenordnung – AO).
- Legitimate Commercial Interests: Maintaining site operational integrity, addressing standard customer support inquiries, and protecting commercial systems.
4. Payment Processing Infrastructure
Financial transaction handling on www.pocketsockbox.com is conducted via specialized payment infrastructure provided by Stripe.
When completing a checkout transaction, payment information (such as credit or debit card identifiers) is transmitted directly to Stripe’s secure infrastructure. pocketsockbox does not collect, store, or retain full payment card details or sensitive account credentials on internal server infrastructure. Stripe processes financial information in accordance with international financial security criteria and PCI-DSS compliance requirements.
5. Statutory Data Retention Schedules
Personal information is retained only for periods strictly necessary to fulfill contractual obligations or comply with statutory retention laws:
- Commercial & Fiscal Records: Financial records, transaction receipts, and commercial correspondence are retained for up to 10 years in accordance with German commercial code requirements (Section 257 HGB and Section 147 AO).
- Customer Account & Support Logs: Standard support emails and service queries submitted to organizer@pocketsockbox.com are retained for up to 3 years following communication resolution to address follow-up inquiries.
- Technical Network Data: System server diagnostic logs and IP data are retained for technical review for up to 30 days, after which data is purged or anonymized.
6. Data Subject Rights & Geographic Limitations
In accordance with European data protection regulations (GDPR) and applicable US consumer privacy rights (including state-level privacy standards):
- Access & Correction: Data subjects may request confirmation of processed records or modification of inaccurate contact details.
- Erasure & Restriction: Individuals may request the deletion or restriction of personal data, provided retention is not required by statutory German tax or commercial retention mandates.
- Data Portability: Individuals may request structured export copies of personal information provided under contractual performance.
Geographic Scope Notice: Commercial operations and service delivery are strictly restricted to destination locations within the European Union, the United Kingdom, and the United States of America.
7. Administrative Contact
For inquiries regarding data protection policies, formal records requests, or privacy compliance rights, please submit written correspondence to our dedicated privacy contact at organizer@pocketsockbox.com.