1. Data Controller
The data controller responsible for data processing on this website is:
Robert Alsop Trading as Trust Birthpools Maschmühlenweg 36 37081 Göttingen Germany
Email: trust@geburts-pool.de Phone: +49 152 0826 0482
2. Overview
We take the protection of your personal data seriously. We process your data in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications Digital Services Data Protection Act (TDDDG).
This privacy policy explains what data we collect, why we collect it, and what rights you have.
3. Data We Collect When You Visit Our Website
When you access our website, your browser automatically transmits certain technical data to our web server. This includes your IP address, the date and time of the request, the page visited, the browser type and version, and the operating system used.
This data is processed on the basis of Article 6(1)(f) GDPR (legitimate interest). Our legitimate interest is ensuring the technical functionality and security of the website. This data is not combined with other data sources. Server log data is deleted automatically after 14 days unless retention is required for security investigation.
4. Data We Collect When You Place an Order
When you place a rental order, we collect the following personal data: your name, email address, postal address (billing and shipping), and your expected due date. We also collect payment information, which is processed directly by our payment provider (see Section 7).
We process this data on the basis of Article 6(1)(b) GDPR (performance of a contract). This data is necessary to fulfil your rental order — to deliver the birthpool to the correct address at the right time, to process your payment, and to arrange the return.
Your expected due date is used solely to calculate the rental delivery window. It is treated as sensitive-adjacent data and is stored only for the duration required to fulfil the rental. It is not shared with third parties, used for marketing, or retained after the rental is complete and legally required retention periods have passed.
5. Data We Collect When You Contact Us
When you contact us by email, we store the content of your message, your email address, and any other information you provide. We process this data on the basis of Article 6(1)(b) GDPR (if related to a contract) or Article 6(1)(f) GDPR (legitimate interest in responding to enquiries).
We retain correspondence for as long as the business relationship requires, and in accordance with statutory retention periods.
6. Cookies
Our website uses only technically necessary cookies required for the website to function. These cookies do not track your behaviour and do not collect personal data for marketing purposes. No consent is required for technically necessary cookies under applicable law.
We do not use analytics cookies, tracking pixels, or third-party advertising tools.
7. Payment Processing — Stripe
We use Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland) to process payments. When you complete a checkout, you are redirected to Stripe’s hosted checkout page. Stripe collects your payment details (such as card number or bank account details) directly. We do not receive or store your full payment details.
Stripe processes your data as a data processor on our behalf and as an independent data controller for its own fraud prevention and compliance purposes. Stripe may transfer personal data to countries outside the European Economic Area, including the United States. Where such transfers occur, Stripe relies on the EU-US Data Privacy Framework, Standard Contractual Clauses, or other legally recognised transfer mechanisms. Stripe’s privacy policy is available at: https://stripe.com/privacy.
The legal basis for this processing is Article 6(1)(b) GDPR (performance of a contract).
8. Shipping and Delivery Partners
To fulfil your order, we share your name, shipping address, and — where necessary — your email address or phone number with our delivery partners: Hermes, DPD, and DHL. These partners process your data solely for the purpose of delivering and returning your rental package.
The legal basis for this processing is Article 6(1)(b) GDPR (performance of a contract).
9. No Data Sharing for Marketing
We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data for profiling or automated decision-making.
10. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Specifically:
Order and contract data is retained for 10 years after the end of the calendar year in which the order was placed, in accordance with German commercial and tax law (Section 147 AO, Section 257 HGB).
Email correspondence is retained for the duration of the business relationship and the applicable statutory retention period.
Server log data is deleted after 14 days.
Once the retention period expires, data is deleted or anonymised.
11. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
Right of access (Article 15 GDPR) — you can request a copy of your stored data. Right to rectification (Article 16 GDPR) — you can request correction of inaccurate data. Right to erasure (Article 17 GDPR) — you can request deletion of your data, subject to statutory retention obligations. Right to restriction of processing (Article 18 GDPR) — you can request that processing be limited under certain conditions. Right to data portability (Article 20 GDPR) — you can request your data in a structured, machine-readable format. Right to object (Article 21 GDPR) — you can object to processing based on legitimate interests. Right to withdraw consent (Article 7(3) GDPR) — where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, contact us at: trust@geburts-pool.de.
12. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for Trust Birthpools is:
Die Landesbeauftragte für den Datenschutz Niedersachsen Prinzenstraße 5 30159 Hannover Germany
Website: https://www.lfd.niedersachsen.de
13. Changes to This Privacy Policy
We may update this privacy policy from time to time. The current version is always available on our website. Changes take effect upon publication.
Last updated: 27 March 2026