Data Protection

Privacy Policy

Last updated: 26 June 2026 . GDPR (EU) 2016/679 . German jurisdiction

DangerousStreet respects your data. This notice explains what personal data we process, why we process it, on what legal basis, and the rights you hold under the General Data Protection Regulation (GDPR).

Controller

The controller responsible for processing your personal data on this store is:

Company: LCJ Group GbR
trading as DangerousStreet
Represented by the partners: Claudio Dafin'nin da Costa
José Carlos Gonçalves Vaz
Leibonísio Sarr Correia Landim
Registered address: Bahnhofstr. 12
69493 Hirschberg an der Bergstraße
Germany
Contact: Telephone: +49 176 84194674
Email: support@dsneun.de
VAT identification number: DE453005062

For any data-protection enquiry, please write to support@dsneun.de. As a small GbR we are not legally required to appoint a Data Protection Officer, and none has been appointed; all enquiries are handled by the contact above.

Principles and legal bases

We process personal data lawfully, fairly and transparently, and only to the extent necessary for clearly defined purposes. Depending on the activity, we rely on one or more of the legal bases set out in Art. 6(1) GDPR:

Art. 6(1)(b): performance of a contract. To create your account, take and fulfil your order, arrange delivery, handle returns and provide customer support.
Art. 6(1)(a): consent. For optional activities such as our newsletter and non-essential cookies. Consent is voluntary and can be withdrawn at any time with effect for the future.
Art. 6(1)(c): legal obligation. To meet German tax, accounting and commercial retention duties, for example the storage of invoices.
Art. 6(1)(f): legitimate interests. To keep the store secure, prevent and detect fraud, and improve our services. We balance these interests against your rights and freedoms.

Data we collect

The table below summarises the personal data we process, grouped by context, together with the purpose and the legal basis for each.

Context	Data	Purpose	Legal basis
Account registration	Name, email address, password (stored hashed)	Create and manage your customer account	Art. 6(1)(b)
Orders and checkout	Name, billing address, items ordered, order history	Conclude and fulfil the purchase contract	Art. 6(1)(b)
Payment	Payment method, transaction reference, billing details	Process payment for your order	Art. 6(1)(b), Art. 6(1)(c)
Shipping	Name, delivery address, contact details	Deliver your order and provide tracking	Art. 6(1)(b)
Contact form	Name, email address, message content	Respond to your enquiry	Art. 6(1)(b), Art. 6(1)(f)
Newsletter	Email address, opt-in record	Send marketing updates you asked to receive	Art. 6(1)(a)
Browsing and device data	IP address, browser type, pages viewed, server logs, consented analytics	Operate, secure and improve the store	Art. 6(1)(f), Art. 6(1)(a)

Cookies and analytics

Strictly necessary cookies that make the store work, for example keeping your cart and session, run on the basis that they are essential to provide the service you requested (§ 25(2) TDDDG). Analytics and marketing cookies are only set after you give consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG).

Your choices are recorded so we can demonstrate consent, and you can change or withdraw them at any time using the Manage Cookie Preferences button on our Cookie Policy page, where the full list of cookies and their purposes is also set out.

Payment processing

Payments are handled by external payment service providers, for example card acquirers, PayPal and Klarna, who process the data needed to take payment. Depending on the method you choose, these providers act either as independent controllers in their own right or as our processors. We share only the data necessary to complete the transaction, and we do not store full card numbers on our systems. Each provider's own privacy notice applies to the processing they carry out as a controller.

Shipping and fulfilment

We share the delivery information required to fulfil your order with the shipping carrier selected for that shipment. This is your name and delivery address, and where you have given consent, your contact details so the carrier can send delivery notifications such as estimated time slots and tracking updates. The carrier processes this data to perform the delivery. We will name the carrier here once the carrier contract is in place.

If you subscribe to our newsletter we use a double opt-in process: after you sign up we send a confirmation email, and we only add you to the list once you confirm. This processing is based on your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time using the unsubscribe link in every newsletter or by emailing support@dsneun.de. Withdrawal does not affect the lawfulness of processing carried out before it.

Contact and support

When you reach out through our contact form, by email, or via the on-site chat, we process the data you send only to handle and answer your enquiry. Depending on the nature of your request this is based on Art. 6(1)(b) GDPR, where it relates to a contract, or Art. 6(1)(f) GDPR, where it is in our mutual interest to respond.

Retention

We keep personal data only as long as necessary for the purpose for which it was collected. Order and invoice data is retained to meet German commercial and tax retention periods, which can run up to 10 years under § 257 HGB and § 147 AO. Data processed on the basis of your consent is deleted once you withdraw that consent, unless another legal basis requires us to keep it. When a purpose ends and no retention duty applies, the relevant data is erased or anonymised.

Recipients and processors

We share personal data only where necessary, with the following categories of recipient:

Payment providers, to take and reconcile payment.
Shipping carriers, to deliver your order.
IT and hosting providers, who operate the technical infrastructure of the store.
Email and newsletter tools, to send transactional and, with consent, marketing messages.
Analytics providers, where you have given consent.

Where a recipient processes data on our behalf, they act as a processor and are bound by a data-processing agreement under Art. 28 GDPR that restricts them to processing the data only on our documented instructions.

International transfers

We aim to keep processing within the European Union and the European Economic Area. Where a recipient is located outside the EU or EEA, any transfer is safeguarded either by a European Commission adequacy decision or by EU Standard Contractual Clauses, together with any additional measures required in line with Art. 44 to 49 GDPR. You can request a copy of the relevant safeguards by contacting us.

Your rights

Subject to the conditions in the GDPR, you have the following rights regarding your personal data:

Right of access to the data we hold about you (Art. 15).
Right to rectification of inaccurate or incomplete data (Art. 16).
Right to erasure, the right to be forgotten (Art. 17).
Right to restriction of processing (Art. 18).
Right to data portability (Art. 20).
Right to object to processing (Art. 21).
Right to withdraw consent at any time, without affecting prior lawful processing (Art. 7(3)).

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:

Supervisory authority: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW)
Königstraße 10a
70173 Stuttgart
Germany

Right to object (Art. 21)

Where we process your data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. If you object, we will stop the processing unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or that the processing serves to establish, exercise or defend legal claims.

Direct marketing

You can object to processing for direct marketing at any time, with no need to give a reason. Once you object, we will stop processing your data for marketing purposes immediately.

Data security

We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. These include TLS encryption of data in transit, access controls that limit who can reach personal data, and ongoing review of our security measures to keep pace with the state of the art.

Changes to this notice

We may update this privacy notice from time to time, for example when our processing or the legal framework changes. The current version published here always applies, and the date of the latest revision is shown beneath the title above. Where a change is significant we will take reasonable steps to bring it to your attention.