Skip to main content Skip to search Skip to navigation

Privacy Policy

Last updated: 21/10/2026

The protection of your personal data is important to us. The following informs you about which personal data we process when using our online shop at www.solarcosa.de, for what purposes this is done, on what legal basis the processing is based, to whom data is transmitted, and what rights you have.

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

Dr. Stefan Rauscher – Owner of SolarCosa
Rigaer Str. 3
10247 Berlin
Germany

Phone: 030 42802070
Email: service@solarcosa.de

2. General Information on Data Processing

We process personal data in accordance with applicable data protection regulations.

Personal data is any information that relates to an identified or identifiable natural person.

Processing is carried out in particular on the basis of the following legal grounds:

  • Art. 6(1)(a) GDPR, where you have consented to processing.

  • Art. 6(1)(b) GDPR, where processing is necessary for the performance of a contract or pre-contractual measures.

  • Art. 6(1)(c) GDPR, where we are legally obliged to process.

  • Art. 6(1)(f) GDPR, where processing is necessary for the safeguarding of our legitimate interests and no overriding interests or fundamental rights of the data subject prevail.

Where processing is based on your consent, you may revoke it at any time with effect for the future.

3. Access to Our Website and Server Log Files

You can visit our website in principle without providing any personal information.

Each time our website is accessed, your browser transmits technical information to our web server or our hosting/IT service provider. This information may be stored in server log files.

These include in particular:

  • IP address of the requesting device

  • Date and time of access

  • Requested page or file

  • Amount of data transferred

  • HTTP status code

  • Browser type and browser version

  • Operating system

  • Referrer URL

  • Possibly further technical connection data

The processing serves to ensure the secure and trouble-free operation of our website, error analysis, as well as the detection and prevention of attacks and abuse.

Legal basis: Art. 6(1)(f) GDPR.

Our legitimate interest lies in the secure and reliable operation of our online shop.

The data will be deleted as soon as it is no longer necessary for the purposes mentioned, unless statutory retention obligations or other legal reasons preclude deletion.

4. Hosting and Technical Service Providers

Our website is technically provided and maintained. In this context, IP addresses, access times, connection data, server log data, and other technical information necessary for operation may be processed.

Where a hosting or IT service provider processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

The processing serves the secure, stable, and functional operation of our online shop.

Legal basis: Art. 6(1)(f) GDPR.

Our legitimate interest consists in the reliable technical provision of our service.

Our website is hosted and technically maintained on the servers of our hosting/IT service provider:

TECHNEO GmbH
Kolonnenstr. 8
10827 Berlin
Germany

5. Contact by Email

If you contact us by email, we process the data you provide, in particular your email address, your name, the content of your message, and any other information you voluntarily provide.

The processing serves the handling and answering of your inquiry.

If your inquiry relates to the conclusion of a contract or pre-contractual measures, the processing is based on Art. 6(1)(b) GDPR.

In other cases, the processing is based on our legitimate interest in handling incoming inquiries pursuant to Art. 6(1)(f) GDPR.

The data will be deleted once the inquiry has been finally processed and no statutory retention obligations or other legal reasons for further storage exist.

6. Contact Form

If you use our contact form, we process the data you enter, in particular your name, your email address, the content of your message, and any other information you voluntarily provide.

The processing serves the handling of your inquiry and the answering of any follow-up questions.

For inquiries related to a contract or pre-contractual measures, the processing is based on Art. 6(1)(b) GDPR.

For other inquiries, it is based on Art. 6(1)(f) GDPR.

If Google reCAPTCHA is used to protect the contact form, the additional information in Section 13 applies.

7. Customer Account

You can create a customer account in our online shop.

When setting up and using the customer account, we process the data required for this purpose, in particular your contact details, login credentials, and order information.

The processing is carried out on the basis of Art. 6(1)(b) GDPR to the extent it is necessary for the provision and use of the customer account.

You may request the deletion of your customer account. Deletion of the customer account does not automatically result in the deletion of data that we must continue to store due to statutory retention obligations or for the assertion, exercise, or defense of legal claims.

8. Orders and Contract Fulfillment

When you place an order in our online shop, we process the personal data necessary for the performance and fulfillment of the purchase contract.

These include in particular:

  • First and last name

  • Billing and delivery address

  • Email address

  • Phone number, where required

  • Ordered goods

  • Order and contract data

  • Invoice and payment information

  • Shipping and delivery information

The processing is based on Art. 6(1)(b) GDPR.

The provision of data required for contract fulfillment is necessary for the conclusion and performance of the contract. Without this data, we may not be able to process your order.

We transmit data only to the extent necessary for contract fulfillment, for example to payment service providers, shipping companies, inventory management systems, and other order fulfillment service providers.

To the extent we are subject to statutory retention obligations, storage is additionally based on Art. 6(1)(c) GDPR.

9. JTL-Shop and Inventory Management

Our online shop is based on JTL-Shop. For inventory management and order fulfillment, we use JTL systems.

Within these systems, customer, order, address, communication, and contract data may in particular be processed.

To the extent JTL processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

JTL-Shop may use technically necessary session cookies, for example for session management, the shopping cart function, and login.

10. Shipping Service Providers

To carry out deliveries, we transmit the data required for shipping to the shipping service provider used.

These include in particular name, delivery address, and order and shipment information. Where required and permissible, further contact details may be transmitted.

The transmission is carried out for the fulfillment of the purchase contract on the basis of Art. 6(1)(b) GDPR.

If you explicitly wish an additional service for electronic information about the shipping status, the transmission of your email address to the shipping service provider may be required. You may revoke any consent obtained for this purpose at any time with effect for the future.

11. Payment Service Providers

11.1 Klarna

If you select a payment method offered by Klarna, the data required for payment processing is transmitted to the relevant entity within the Klarna Group.

These may in particular include name, address, contact details, order information, and payment-related data.

The processing is carried out for the performance of the contract pursuant to Art. 6(1)(b) GDPR.

Depending on the payment method, Klarna may process additional data for fraud prevention, identity verification, or creditworthiness checks. For this processing, the data protection information of the respective Klarna service applies supplementarily.

11.2 PayPal and Invoice Purchase

If you select PayPal or an invoice purchase offered through PayPal, the data required for payment processing is transmitted to the involved payment service providers, namely PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

Depending on the payment method, these may be PayPal and a further service provider responsible for invoice processing or creditworthiness checks.

The processing is carried out for the execution of the payment transaction and for contract fulfillment on the basis of Art. 6(1)(b) GDPR.

For separate processing for creditworthiness checks or fraud prevention, the data protection information of the respective providers applies; where required, a separate consent is obtained.

12. Newsletter

If you explicitly subscribe to our newsletter, we use your email address for sending the newsletter.

The processing is based on your consent pursuant to Art. 6(1)(a) GDPR.

Registration is in principle carried out through a confirmation procedure (double opt-in). After registration, a confirmation message is sent to the specified email address. Only after confirmation is the address activated for newsletter sending.

To evidence a proper registration, the time of registration and confirmation as well as technical information may be stored.

You may revoke your consent at any time with effect for the future. To do so, you can use the unsubscribe link in the newsletter or send us a corresponding message.

After unsubscribing, your email address is removed from the active newsletter distribution list. Evidence data may be retained to the extent necessary to evidence consent or to safeguard legal claims.

13. Google reCAPTCHA

If Google reCAPTCHA is used on our website, the service is designed to detect and prevent automated inputs, spam, and abusive requests.

Upon activation of the service, technical information such as IP address, browser and device information, and information about interactions with the website may be processed and transmitted to Google.

To the extent access to information on the end device is required for use and no exemption applies, this is done on the basis of your prior consent pursuant to § 25(1) TDDDG (German Telecommunications and Telemedia Data Protection Act).

The subsequent processing of personal data is based on Art. 6(1)(a) GDPR, where the processing is based on your consent.

The consent may be revoked at any time through the privacy settings on our website with effect for the future.

If reCAPTCHA is not activated, the use of certain protected forms may be limited. You can alternatively contact us by email or by phone.

14. YouTube

If videos from YouTube are embedded on our website, the embedding is done through a service of the Google Group.

To the extent the enhanced privacy mode is used, it may limit certain data processing. However, it is not a guarantee that no data transmission takes place prior to consent.

Therefore, consent-required embeddings are blocked through our consent management until the required consent has been given.

After activation, in particular IP address, browser and device information, and information about video usage may be transmitted to Google or YouTube.

To the extent access to information on the end device requires consent, this is done on the basis of § 25(1) TDDDG.

The subsequent processing of personal data is based on Art. 6(1)(a) GDPR, where consent is the legal basis.

A transmission to the USA cannot be excluded. To the extent the transmission is based on the EU-U.S. Data Privacy Framework, the respective recipient must fall within its scope.

You may revoke your consent at any time through the privacy settings.

15. Vimeo

If videos from Vimeo are embedded on our website, a connection to Vimeo's servers may be established when loading or playing a video.

In this case, in particular IP address, browser and device information, and information about video usage may be processed.

Consent-required embeddings are blocked through our consent management until the required consent has been given.

To the extent access to information on the end device requires consent, this is done on the basis of § 25(1) TDDDG.

The subsequent processing of personal data is based on Art. 6(1)(a) GDPR, where consent is the legal basis.

You may revoke your consent at any time through the privacy settings.

16. Google Fonts

To the extent our website loads fonts from Google Fonts directly from Google servers, a connection to Google is established when accessing the relevant pages.

In this case, in particular your IP address, browser information, and technical connection data may be processed.

The external embedding is only activated when the required consent is present.

To the extent access to information on the end device within the meaning of § 25 TDDDG takes place and no statutory exemption applies, this is done on the basis of § 25(1) TDDDG.

The subsequent processing of personal data is based on Art. 6(1)(a) GDPR, where consent is the legal basis.

You may revoke your consent at any time through the privacy settings.

If fonts are stored locally on our own server and served from there, no corresponding connection to Google takes place for the retrieval of these fonts.

17. Google Ads Conversion Tracking

We use Google Ads for the placement and evaluation of online advertising. Within this service, we use Google Ads Conversion Tracking.

Provider in the European Economic Area: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you click on a Google ad and subsequently visit our website, the conversion measurement may serve to determine whether certain actions were performed on our website.

In this case, in particular information about ad clicks, visited pages, technical device information, and other data required for conversion measurement may be processed.

Google Ads Conversion Tracking is only activated after you have given the required consent through our consent management.

To the extent information is stored or read on your end device and no exemption applies, this is done on the basis of § 25(1) TDDDG.

The subsequent processing of personal data is based on Art. 6(1)(a) GDPR, where consent is the legal basis.

A transmission of personal data to the USA cannot be excluded. To the extent a transmission is based on the EU-U.S. Data Privacy Framework, the respective recipient must be correspondingly certified and covered by the framework.

You may revoke your consent at any time through the privacy settings on our website with effect for the future.

Further information can be found in Google's privacy information at https://policies.google.com/privacy.

18. Google Remarketing

To the extent the remarketing function of Google is used on our website, Google may process information about your visit to our website in order to display interest-based advertising on websites and services of Google or within the Google Advertising Network.

In this case, in particular information about visited pages, technical device information, and identifiers used for re-identification or assignment of visits may be processed.

The remarketing function is only activated after you have given the required consent through our consent management.

To the extent information is stored or read on your end device and no statutory exemption applies, this is done on the basis of § 25(1) TDDDG.

The subsequent processing of personal data is based on Art. 6(1)(a) GDPR, where consent is the legal basis.

A transmission of personal data to the USA cannot be excluded. To the extent the transmission is based on the EU-U.S. Data Privacy Framework, the respective recipient must be correspondingly certified and covered by the framework.

You may revoke your consent at any time through the privacy settings.

Further information can be found at https://policies.google.com/privacy.

19. ADCELL / Firstlead

If we participate in the affiliate/advertising network ADCELL, the service may serve the assignment of advertising contacts and the settlement of referrals.

Provider: Firstlead GmbH, Rosenfelder Straße 15–16, 10315 Berlin

In this case, cookies or comparable technologies may be used and information about advertising contacts, page views, referrals, and conversions may be processed.

To the extent access to information on the end device requires consent, this is done only after your consent pursuant to § 25(1) TDDDG.

The subsequent processing of personal data is based on Art. 6(1)(a) GDPR, where consent is the legal basis.

You may revoke your consent at any time through the privacy settings.

20. Consent Management

Our website uses a consent management system through which you can decide whether certain non-technically necessary services may be activated.

In this context, your selection and possibly technical information for evidencing the given consent are processed.

Your settings may be stored on your end device so that your decision can be taken into account in later visits.

You can change your settings at any time through the privacy settings function on our website and revoke already given consents with effect for the future.

The consent management system is intended to ensure that consent-required services are only activated after the required consent has been given.

21. Technically Necessary Cookies and Comparable Technologies

Our online shop uses technically necessary cookies and comparable technologies to the extent they are required for explicitly desired shop functions.

These may in particular include session cookies for session management, the shopping cart, login, and the provision of other necessary shop functions.

The storage of information on your end device or access to already stored information is permissible without consent pursuant to § 25(2)(2) TDDDG, provided these operations are absolutely necessary to provide a digital service explicitly requested by you.

The subsequent processing of personal data is based on the respective applicable legal basis under Art. 6 GDPR.

To the extent processing is necessary for the safeguarding of our legitimate interests, Art. 6(1)(f) GDPR may apply.

Our legitimate interest consists in particular in the secure and functional operation of our online shop.

Non-essential analytics and advertising technologies are not treated as technically necessary solely because they are economically or organizationally useful to us.

22. Visitor Statistics and Visitor Counter

A visitor counter is displayed on our website. To the extent functions of the JTL-Shop or additional extensions are used for this purpose, technical information about page views may be processed.

Which data is actually collected, whether cookies or comparable technologies are used, and whether data is transmitted to third parties depends on the specific technical implementation.

To the extent personal data is processed, this is done on the basis of the respective applicable legal basis under Art. 6 GDPR.

To the extent access to information on the end device requires consent, § 25 TDDDG must additionally be observed.

23. Recipients of Personal Data

Personal data may be transmitted to the following categories of recipients to the extent necessary for the respective purposes:

  • Hosting and IT service providers

  • JTL systems and possibly involved service providers

  • Payment service providers

  • Shipping companies

  • Order and contract fulfillment service providers

  • Newsletter and email service providers

  • Providers of security and spam protection services

  • Providers of embedded media

  • Providers of marketing and advertising services, to the extent activated after the required consent

  • Tax advisors, auditors, or other professional advisors, where required

  • Authorities and other public bodies, where a legal obligation exists

A transmission takes place only to the extent a legal basis exists for it.

24. Transfers to Third Countries

For certain third-party providers, processing of personal data outside the European Union or the European Economic Area may take place.

To the extent personal data is transmitted to the USA, the transmission may be based on the adequacy decision of the European Commission regarding the EU-U.S. Data Privacy Framework, provided the specific recipient participates in the framework and the transmission falls within the scope of the certification.

To the extent no adequacy decision applies, suitable safeguards under Art. 44 et seq. GDPR may be considered, in particular the Standard Data Protection Clauses of the European Commission, provided the statutory prerequisites are met.

25. Storage Period

We store personal data only as long as necessary for the respective purpose.

In addition, statutory retention obligations may require longer storage, in particular under commercial and tax law provisions.

After expiry of the respective periods, the data will be deleted unless another legal basis for further storage exists.

The following principles in particular apply:

  • Server log data: deleted as soon as no longer necessary for secure and trouble-free operation.

  • Contact inquiries: deleted once finally processed and no further legal reasons for storage exist.

  • Contract and order data: stored in accordance with the applicable statutory retention periods.

  • Customer account data: stored for as long as the customer account exists, unless deletion is requested or statutory reasons preclude it.

  • Newsletter data: processed until revocation of consent or unsubscribe.

  • Consent evidence: stored for as long as necessary to evidence consent and fulfill legal obligations.

The specific storage periods of the third-party providers used are additionally governed by their respective data protection information.

26. Rights of Data Subjects

You have, in accordance with the statutory prerequisites, in particular the following rights:

Right to Information – Art. 15 GDPR
You may request information about whether and which personal data we process about you.

Right to Rectification – Art. 16 GDPR
You may request the rectification of inaccurate personal data.

Right to Erasure – Art. 17 GDPR
You may request the erasure of your personal data under the statutory prerequisites.

Right to Restriction of Processing – Art. 18 GDPR
You may request the restriction of processing under the statutory prerequisites.

Right to Data Portability – Art. 20 GDPR
You may receive the personal data concerning you in a structured, commonly used, and machine-readable format under the statutory prerequisites.

Right to Withdraw Consent
To the extent processing is based on your consent, you may revoke it at any time with effect for the future. The lawfulness of the processing carried out until the revocation remains unaffected.

Right to Object – Art. 21 GDPR
If we process your personal data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation.

If personal data is processed for the purpose of direct marketing, you may object to this processing at any time. This also applies to profiling in connection therewith.

27. Right to Lodge a Complaint with a Supervisory Authority

You have the right, pursuant to Art. 77 GDPR, to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

For our location, the following supervisory authority is in particular responsible:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany

Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de

You may also contact another competent data protection supervisory authority, in particular the authority of your habitual residence or the place of the alleged infringement.

28. Data Security

We implement appropriate technical and organizational measures to protect personal data against loss, destruction, alteration, unauthorized disclosure, and unauthorized access.

The transmission of personal data between your browser and our website takes place over an encrypted HTTPS connection.

Our security measures are reviewed and adapted in accordance with technological development and existing risks.

29. No Solely Automated Decision-Making

A decision based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR, which produces legal effects concerning you or similarly significantly affects you, does not take place on our part.

30. Updates to This Privacy Policy

We reserve the right to adapt this privacy policy if the services we use, the technical design of our online shop, or the legal framework change.

The current version published on our website always applies.

Last updated: 21/10/2026