Privacy Policy & Legal Information

1. Business & Registration Details

Buchhandlung & Antiquariat
Reuterstr. 4a, 53113 Bonn, Germany

Responsible person: Dr. Jagdev S. Sawhney

E-Mail: Reuter4a@oldbooks-bonn.com

Tel.: +49 228 / 216622

Tel.2: +49 15120794863

Fax: +49 228 / 218846

Supervisory authority: Finanzamt Bonn-Innenstadt, Germany.
Platform for online dispute resolution (EU ODR): https://ec.europa.eu/consumers/odr

2. Data Controller

The data controller within the meaning of the EU General Data Protection Regulation (GDPR – Regulation 2016/679) and other applicable data protection laws is:

Dr. Jagdev S. Sawhney
Buchhandlung & Antiquariat
Reuterstr. 4a, 53113 Bonn, Germany
Reuter4a@oldbooks-bonn.com

3. Data We Collect

• Usage data – IP address (anonymised), browser type, pages visited, referrer URL, timestamps.
• Order data – name, shipping address, e-mail address, and payment reference when you place an order.
• Communication data – content of messages you send us via e-mail or contact forms.
• Cookies – session cookies required for the shopping cart; no third-party tracking cookies are set by default.

4. Legal Basis for Processing (GDPR Art. 6)

• Art. 6(1)(b) – Processing is necessary for the performance of a contract (order fulfilment).
• Art. 6(1)(c) – Processing is necessary for compliance with a legal obligation (German commercial and tax law).
• Art. 6(1)(f) – Legitimate interest in operating and improving the website.
• Art. 6(1)(a) – Consent, where you have freely given it (e.g. optional newsletter).

5. How We Use Your Data

• Processing and shipping your orders.
• Responding to your enquiries.
• Fulfilling tax and accounting obligations under German law (§§ 147 AO, 257 HGB).
• Preventing fraud and ensuring technical security.
• Improving website functionality (anonymised analytics only).

6. Data Retention

Order and invoice records are retained for 10 years as required by German commercial law (§ 257 HGB) and tax law (§ 147 AO). Communication records are deleted after 3 years unless a longer retention period is legally required. Anonymised log data is retained for up to 7 days.

7. International Data Transfers

Our servers are located within the European Union. If personal data is transferred outside the EEA (e.g. to payment processors or shipping partners in the USA, Africa, or Asia), we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or we rely on adequacy decisions where applicable. Transfers to the United States are conducted in compliance with applicable US privacy frameworks. Transfers to customers in South Africa are conducted in compliance with POPIA (Protection of Personal Information Act). Transfers to customers in India and other Asian countries comply with local data-protection obligations as applicable.

8. Your Rights

Depending on your country of residence, you may have the following rights regarding your personal data:

To exercise any of these rights, contact us at Reuter4a@oldbooks-bonn.com. We will respond within 30 days (or the applicable statutory period). You also have the right to lodge a complaint with a supervisory authority — in Germany, this is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

9. Cookies

We use only technically necessary cookies:

• Session cookie – keeps your shopping cart active during your visit. Deleted when you close the browser.
• Language preference – stores your chosen language. Expires after 1 year.

No marketing, tracking, or analytics cookies from third parties are used. We do not engage in behavioural advertising.

10. Third-Party Services

• Google Maps (embedded on the Impressum/Contact panel) – Google LLC, USA. Google's privacy policy applies: policies.google.com/privacy. The map is loaded only when you open the contact panel.
• Payment processors – if you purchase via third-party payment gateways, their respective privacy policies govern that data.

11. Security

We use TLS/HTTPS encryption for all data in transit. Access to personal data is restricted to authorised personnel only. We implement technical and organisational measures (TOMs) in accordance with Art. 32 GDPR.

12. Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

13. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our website after any changes constitutes acceptance of the updated policy.