- Data Controller Information
The entity responsible for processing personal data on this website in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws is:
Data Controller: Bio-Caps GmbH
Contact Email: support@quenchandcarry.com
Phone: +498611669866
Company: Bio-Caps GmbH
Address: Innerlohener Str. 4, 83355, Grabenstätt
- Collection and Processing of Personal Data
We collect and process personal data exclusively to the extent necessary to fulfill contracts, process customer orders, deliver drinkware products, and maintain official business correspondence.
Personal data collected during order processing or general communication includes:
Contact details (such as full name, shipping address, billing address, email address, telephone number).
Transactional records (such as ordered items, invoice details, order references).
Technical connection data (such as IP addresses, access timestamps, standard web browser logs collected for system stability and operational security).
Legal Basis: Data processing is conducted under Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(c) GDPR (compliance with statutory legal and tax obligations).
- Payment Processing via Stripe
To facilitate secure online transactions, payment processing services on are managed by our contracted payment service provider:
During checkout, payment credentials and financial details are transmitted directly to Stripe via encrypted protocols. We do not store, retain, or possess access to full credit card numbers or sensitive payment authentication codes on our servers.
Stripe processes transactional data in accordance with strict PCI-DSS standards and European data protection laws. For further information regarding Stripe’s data protection practices, please refer to Stripe’s official privacy documentation.
Legal Basis: Article 6(1)(b) GDPR (necessary for the execution of payment transaction contracts).
- Data Retention Periods
Personal data is retained only for as long as strictly necessary to fulfill the operational purpose for which it was collected, or as mandated by statutory law.
Tax and Commercial Retention (Germany): In accordance with Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO), order records, invoices, accounting documents, and commercial correspondence are retained for up to 10 years.
General Enquiries: General customer support correspondence not resulting in a commercial order is retained for as long as necessary to address the enquiry and erased once the matter is fully resolved, provided no legal retention duties apply.
Upon expiry of statutory retention periods, the corresponding data is routinely erased or anonymised in accordance with GDPR requirements.
- Data Security Measures
We deploy appropriate technical and organisational security controls to protect personal data against unauthorised access, alteration, disclosure, or destruction. Electronic data transmissions are encrypted using standard industry protocol technology (SSL/TLS).
Customers acknowledge that data transmission across the internet cannot be guaranteed against every potential risk, and electronic communications are conducted at the user’s discretion within standard internet operational parameters.
- Rights of Data Subjects
Under the GDPR, individuals residing within the European Union possess specific rights regarding their personal data processed by:
Right of Access (Art. 15 GDPR): Right to request confirmation as to whether personal data is being processed and obtain details of such processing.
Right to Rectification (Art. 16 GDPR): Right to request the correction of inaccurate or incomplete personal data.
Right to Erasure (Art. 17 GDPR): Right to request the deletion of personal data, provided statutory retention obligations do not apply.
Right to Restriction of Processing (Art. 18 GDPR): Right to request restriction of processing under legally defined conditions.
Right to Data Portability (Art. 20 GDPR): Right to receive personal data in a structured, commonly used machine-readable format.
Right to Object (Art. 21 GDPR): Right to object to data processing based on legitimate interests.
Right to Lodge a Complaint: Right to lodge a complaint with a competent supervisory authority in Germany or within the European Union.
To exercise any of these rights, please submit a written request to support@quenchandcarry.com.
- Updates to This Privacy Policy
We reserve the right to amend this Privacy Policy to reflect operational updates or changes in legal and regulatory frameworks. The current version published on shall govern all processing activities.