Privacy Policy (Datenschutzerklärung)
Transparent disclosure regarding the collection, processing, retention, and cryptographic protection of personal data pursuant to Articles 13, 14, and 21 of the European General Data Protection Regulation (GDPR).
1. Data Controller & Data Protection Officer
The controller responsible for data processing on https://jdmpartshop.com within the meaning of Art. 4 (7) GDPR is:
2. Server Log Files, TLS 1.3 Encryption & Infrastructure
When visiting our platform for informational purposes, your browser automatically transmits technical access metadata (anonymized IP address, timestamp, HTTP status code, requested URI, user-agent header). Processing is conducted on the legal basis of Art. 6 (1) (f) GDPR (legitimate interest in ensuring cyber-resilience, DDoS mitigation, and platform stability). Log files are automatically purged after 14 days. All data transmission is secured via 256-bit TLS 1.3 encryption.
3. E-Commerce Order Processing & Statutory Tax Retention
When you place an order for performance automotive hardware, we collect your full name, billing address, shipping address, email address, telephone number (for courier/pallet delivery coordination), and optional company/EU VAT ID.
Legal Basis: Art. 6 (1) (b) GDPR (performance of a contract) and Art. 6 (1) (c) GDPR (compliance with statutory commercial and tax retention obligations under § 147 AO and § 257 HGB, requiring a 10-year retention period for commercial tax invoices).
4. Logistics & Freight Carrier Data Transmission
To fulfill your shipment and provide real-time parcel or pallet tracking notifications, we transmit your delivery address, email address, and phone number to the designated European logistics carrier (DHL Express / Deutsche Post AG, DPD Deutschland GmbH, GLS Germany GmbH & Co. OHG, or DACHSER SE) strictly pursuant to Art. 6 (1) (b) GDPR.
5. Payment Service Providers (Stripe & SEPA Banking)
- Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Dublin, Ireland): When selecting Credit Card, Apple Pay, or Google Pay, payment tokens and transaction amounts are processed directly by Stripe pursuant to Art. 6 (1) (b) GDPR. JDM Part Shop Europe never stores raw credit card numbers or CVV codes on its servers.
- SEPA Credit Transfer (Vorkasse): When paying via SEPA bank wire, your IBAN/BIC and remittance reference are processed within our German corporate banking infrastructure solely for invoice reconciliation and potential refund execution.
6. Strictly Necessary Session Cookies
Our platform utilizes strictly necessary first-party HTTP-only session cookies and CSRF security tokens required to persist your shopping basket contents and secure checkout forms (§ 25 (2) No. 2 TDDDG / TTDSG and Art. 6 (1) (f) GDPR). We do not sell personal data or deploy intrusive third-party behavioral ad-tracking scripts.
7. Your Statutory Data Subject Rights (Art. 15–21 & Art. 77 GDPR)
Under the European General Data Protection Regulation, you have the unconditional right to: