Privacy

Privacy Policy

1. Introduction

We take the protection of your personal data seriously. This privacy policy explains how we collect, use, and protect your personal information when you visit and make purchases from our BigCartel store.

2. Data Controller

Zhivko Popov / Bad Billy Records
Nordstrasse 62
47574, Goch, Germany
Email: badbillyrecords(at)gmail.com
Phone: 015510504006

3. Data We Collect

We may collect and process the following personal data:

  • Name and contact details (e.g., email address, shipping address)

  • Order information and payment details (via payment providers)

  • IP address and device information

  • Messages sent through the contact form

  • Cookies and usage data (see section 6)

4. Purpose and Legal Basis for Processing

We process your data for the following purposes:

  • To fulfill and ship your orders (Art. 6(1)(b) GDPR)

  • To communicate with you regarding your purchase (Art. 6(1)(b) GDPR)

  • To comply with legal obligations (e.g., tax laws) (Art. 6(1)(c) GDPR)

  • With your consent (e.g., for email marketing) (Art. 6(1)(a) GDPR)

5. Sharing of Data

We share data with third-party services only as necessary:

  • BigCartel Inc. (store hosting): https://www.bigcartel.com/privacy

  • Payment Providers (e.g., PayPal, Stripe): Data required for payment processing

  • Shipping Companies (e.g., DHL, Deutsche Post): For order delivery

Some of these providers may process data outside the EU. In such cases, we ensure compliance with GDPR through appropriate safeguards such as Standard Contractual Clauses.

6. Cookies and Tracking

Our website may use cookies and similar tracking technologies to improve user experience. You will be asked for consent to use non-essential cookies.

If we use analytics tools (e.g., Google Analytics), we will:

  • Anonymize IP addresses

  • Only activate tracking after your explicit consent

You can adjust your cookie preferences at any time through our cookie banner.

7. Your Rights Under the GDPR

You have the right to:

  • Request access to your data

  • Rectify inaccurate data

  • Request erasure of your data

  • Restrict or object to data processing

  • Request data portability

  • Withdraw consent at any time

  • Lodge a complaint with a data protection authority (e.g., BfDI in Germany)

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described above or as required by law (e.g., tax record retention for 10 years in Germany).

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including SSL encryption and secure hosting through BigCartel.

10. International Data Transfers

If data is transferred to countries outside the European Economic Area (EEA), we ensure adequate protection via mechanisms such as the EU Standard Contractual Clauses.

11. Changes to This Privacy Policy

We may update this privacy policy from time to time. Updates will be posted on this page with a revised "Last updated" date.

Last updated: May 4, 2025