Privacy Policy

(Last updated: March 2025)

1. Controller

The responsible party for the processing of your personal data on this website is:

TOXXICBUNS
info@toxxicbuns.com
If you have any questions regarding data protection, you can contact us at any time via email.

2. General Information on Data Processing

We take the protection of your data seriously and process personal data only in accordance with applicable data protection laws, particularly the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

We process personal data only if:

You have given us your consent (Art. 6 para. 1 lit. a GDPR),

The processing is necessary for the fulfillment of a contract or pre-contractual measures (Art. 6 para. 1 lit. b GDPR),

We are subject to a legal obligation (Art. 6 para. 1 lit. c GDPR), or

We have a legitimate interest (Art. 6 para. 1 lit. f GDPR).

3. Data We Collect and Why

3.1 Automatically Collected Data (Server Log Files)

When you visit our website, the following data is automatically collected and stored by our hosting provider:

IP address (anonymized where possible)

Browser type & version

Operating system

Referrer URL (previously visited page)

Date & time of the request

Amount of data transmitted

This data is technically necessary to provide the website and is processed under legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. The data is automatically deleted as soon as it is no longer needed.

3.2 Cookies & Tracking Technologies

Our website uses cookies to improve user experience. Cookies are small text files stored on your device.

We differentiate between the following types of cookies:

Necessary Cookies: Essential for website functionality.

Statistics Cookies: Help us analyze website usage (e.g., Google Analytics).

Marketing Cookies: Used for personalized advertising or external services (e.g., social media).

When you first visit, you can decide which cookies to accept via a cookie banner. You can change your preferences at any time [insert link to cookie settings].

3.3 Data Provided via Contact Form or Email

If you contact us via contact form or email, we collect:

Your name

Your email address

Your message

This data is used solely to process your inquiry and is not shared with third parties. The legal basis is Art. 6 para. 1 lit. b GDPR.

3.4 NFT and Web3-related Data (if applicable)

If you purchase NFTs via our website or conduct wallet transactions, we collect:

Your wallet address

Transaction metadata (date, NFT ID, purchase amount)

We do not store sensitive wallet data such as private keys or passwords. Transaction data stored on the blockchain cannot be deleted.

4. Third-Party Services & Data Sharing

We do not share your data with third parties except in the following cases:

Hosting & Server Providers: Our hosting provider processes server log files on our behalf.

Analytics Tools (Google Analytics, if used): Anonymized usage statistics help us improve the website.

NFT Platforms (OpenSea, MetaMask, if relevant): If you make purchases via third-party platforms, their privacy policies apply.

If data is transferred to third countries (e.g., USA), appropriate safeguards (e.g., Standard Contractual Clauses) ensure protection.

5. Data Retention & Deletion

We retain personal data only as long as necessary:

Server log files: Deleted automatically after 30 days.

Contact inquiries: Deleted 6 months after last communication.

Wallet data (if NFTs are managed): Retained as long as your account is active.

Cookies: Retention varies between 1 day and 24 months depending on type.

6. Your Rights Under GDPR

You have the following rights under the GDPR:

Right to Access (Art. 15 GDPR) – Request a copy of your stored data.
Right to Rectification (Art. 16 GDPR) – Request correction of incorrect data.
Right to Erasure (Art. 17 GDPR) – Request deletion of your data.
Right to Restriction of Processing (Art. 18 GDPR) – Request limitation of data processing.
Right to Data Portability (Art. 20 GDPR) – Request transfer of your data in a common format.
Right to Object (Art. 21 GDPR) – Object to processing based on legitimate interest.

To exercise these rights, contact us at [insert email address].

7. Data Security

We implement technical and organizational measures to protect your data:

SSL encryption: All data transmissions are encrypted.

Secure servers: Protection against unauthorized access.

Web3 & Wallet Security: We do not store sensitive keys.

Nevertheless, you should secure your own wallet credentials and never share passwords or private keys.

8. Changes to This Privacy Policy

This privacy policy may be updated to reflect legal or technical changes. The most current version is always available on our website.

9. Contact & Supervisory Authority

If you have any questions or complaints, contact us at:

Email: info@toxxicbuns.com

You also have the right to file a complaint with the relevant data protection authority:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59-61, 10555 Berlin, Germany
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de