Last updated: 5 November 2026
1. Who is responsible
Rubber Bear Berlin
Alfred-Jung-Str. 4
10367 Berlin, Germany
E-mail: info@rubberbearberlin.com
This statement explains which personal data we process when you visit rubberbearberlin.com or order from our shop, why we do this and what your rights are under the EU General Data Protection Regulation (GDPR).
2. Visiting the website
When you visit the site, our hosting provider automatically stores technical data in server log files: your IP address, date and time, the page requested, the browser and the operating system. We need this to deliver the website and keep it secure (Art. 6(1)(f) GDPR, legitimate interest). Log files are deleted after a short period, unless they are needed to investigate an incident.
3. Cookies and local storage
We only use what is necessary, unless you give consent for analytics.
Necessary (always on)
- Session cookie (
SESS…): keeps your shopping cart and login working. Deleted when you log out or after the session expires. - rbb-theme (local storage): remembers your choice for the dark or light design.
- rbb-consent (local storage): remembers your cookie choice, so we do not ask again on every page.
Legal basis: § 25(2) TDDDG and Art. 6(1)(b) and (f) GDPR.
Analytics (only with your consent)
If you allow analytics, we use Google Analytics 4, loaded through Google Tag Manager. This tells us how the site is used, for example which pages are visited and how visitors find us, so we can improve the site and the shop.
- Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
- Cookies:
_gaand_ga_<ID>, stored for up to 2 years. - Data: pseudonymous identifiers, pages visited, time on the site, device and browser details and approximate location (country/city). Google Analytics 4 does not store full IP addresses.
- Retention in Google Analytics: at most 14 months.
- Data may be transferred to Google LLC in the USA. Google is certified under the EU-U.S. Data Privacy Framework.
- Legal basis: your consent (§ 25(1) TDDDG and Art. 6(1)(a) GDPR).
Without your consent Google Tag Manager and Google Analytics are not loaded. You can change or withdraw your consent at any time via Cookie settings (also at the bottom of every page). Withdrawing does not affect processing that took place before.
More information: Google Privacy Policy.
4. Orders
When you order, we process your name, e-mail address, billing and shipping address, phone number (if given) and the order details. We need this to process, ship and invoice your order (Art. 6(1)(b) GDPR). We are required by German tax and commercial law to keep invoices and order records for up to 10 years (Art. 6(1)(c) GDPR, § 147 AO, § 257 HGB).
We share your name and address with the shipping company that delivers your parcel, only for that purpose.
Payment
Payments are handled by Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, the Netherlands. You enter your payment details on Mollie's payment page; we do not receive your full card or bank details. See the Mollie Privacy Statement.
5. Customer account
If you create an account, we store your e-mail address, password (encrypted) and order history, so you can log in and view your orders (Art. 6(1)(b) GDPR). You can ask us to delete your account at any time; order records that we must keep by law are kept for the legal period.
6. Contact
When you e-mail us or use the contact form, we use your name, e-mail address and message only to answer you (Art. 6(1)(b) or (f) GDPR). We delete this correspondence when it is no longer needed, unless we must keep it by law.
Spam protection (Google reCAPTCHA)
Some forms (such as contact, login and registration) are protected by Google reCAPTCHA to keep out spam and bots. reCAPTCHA checks whether a form is filled in by a person and sends data such as your IP address and browser details to Google (Google Ireland Limited; transfer to the USA under the EU-U.S. Data Privacy Framework). Legal basis: our legitimate interest in protecting the site against abuse (Art. 6(1)(f) GDPR).
7. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict processing, to data portability and to object to processing based on legitimate interest (Art. 15–21 GDPR). Where we rely on your consent, you can withdraw it at any time. To use your rights, e-mail info@rubberbearberlin.com.
You also have the right to lodge a complaint with a data protection authority. For us this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin (datenschutz-berlin.de).
8. Changes
We may update this statement when the site or the law changes. The date at the top shows the latest version.