Privacy policy

Last updated: 4 October 2026

Here you can read which personal data we process when you visit our website and place an order with us.

1. Controller

Fink & Bruckmair Handels GbR, Closenanger 10, 84307 Eggenfelden, hello@kulston.com. We are not required to appoint a data protection officer.

2. Visiting the website

When you open the site we process technically necessary data such as IP address, date, time and browser (server log files). Legal basis: Art. 6 (1) (f) GDPR. The website is hosted by Hostinger International Ltd., which processes this data on our behalf.

3. Orders and customer account

To process your order we handle your name, address, email address and order details. Legal basis: Art. 6 (1) (b) GDPR. If you create a customer account we store this data until you delete it.

4. Payment providers

Payments are processed by Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands. Depending on the method you choose (PayPal, card, Klarna, Apple Pay) your payment data is passed to Mollie and to the respective provider. The card input fields are loaded directly from Mollie during checkout, which transmits your IP address to Mollie. Legal basis: Art. 6 (1) (b) GDPR.

5. Shipping providers

For delivery we pass your name and delivery address to the carrier we have commissioned. Legal basis: Art. 6 (1) (b) GDPR. You will only receive shipping notifications by email if you have consented to them.

6. Newsletter

We only send the newsletter with your consent (double opt-in). You can withdraw it at any time, for example via the unsubscribe link in every email. We use MailPoet for sending and managing it. Legal basis: Art. 6 (1) (a) GDPR.

7. Cookies and tracking

We only use technically necessary cookies: for the cart, for signing in and for the session during checkout. These do not require consent (section 25 (2) TDDDG). We do not use analytics or marketing services, which is why there is no consent banner.

8. Retention

We only store data for as long as it is needed for the purpose or for as long as statutory retention obligations apply (for example 8 or 10 years for tax-relevant records).

9. Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a data protection supervisory authority.