Privacy policy
1. Data controller
Homecockpit-Simulation, proprietor Sven Lamprecht, Lindenallee 17, 91161 Hilpoltstein, Germany; support@homecockpit-simulation.de.
2. Hosting, access data and security
The website uses a Synology server installation and associated infrastructure. Technical access logs may contain IP address, timestamps, requested resources, browser/device information and error codes. Actual server/proxy logging and retention must be checked against the live configuration and added. The legal basis for secure operation is GDPR Art. 6(1)(f).
3. Customer accounts, carts, orders and invoices
To process orders, we use names, addresses, contact details, cart content, order numbers, goods, payment, shipping and order status data within WordPress/WooCommerce. Legal bases are performance of contract (Art. 6(1)(b)) and statutory record-keeping duties (Art. 6(1)(c)). Data is deleted or restricted in accordance with mandatory retention duties and legitimate processing needs.
4. Payment services
For bank transfers we process the payment reference and receipt of funds. When PayPal or another payment method provided by PayPal is selected, relevant transaction and order data may be shared with PayPal and involved payment service providers. The relevant PayPal legal entity, potential international transfers and installed payment modules require confirmation against the live setup before publication. Bases include Art. 6(1)(b) and, for necessary fraud prevention, potentially Art. 6(1)(f).
5. Shipping with DHL and other carriers
We send shipping contact, delivery address and parcel data to DHL or the carrier selected at checkout to perform the contract (Art. 6(1)(b) GDPR).
6. OEM export compliance and signed declarations
For marked OEM items we also collect order/contact details, company, final destination country, actual end user, final use location and declared purpose. The per-order form is attached to the order email, with signed forms returned to compliance@homecockpit-simulation.de.
We record the form version, review and approval result and relevant communications to carry out contractual end-use checks, meet applicable export/sanctions obligations and document lawful supplies. Depending on the specific processing operation, legal bases are Art. 6(1)(b), (c) and/or (f) GDPR.
Documents are accessible to authorised staff only, not retained indefinitely by default. Applicable specific retention periods and possible disclosures to competent authorities or suppliers must be documented.
7. Email communication
Order emails come from shop@homecockpit-simulation.de and compliance mail goes to compliance@homecockpit-simulation.de. Email content and delivery data are processed to administer contracts or enquiries (Art. 6(1)(b), where applicable Art. 6(1)(f)). Identify the actual email/SMTP provider before publication.
8. Cookies and third-party services
WooCommerce may use essential cart, session and checkout cookies. Any optional analytics/marketing cookies, Google reCAPTCHA, Cloudflare Turnstile or comparable external services must follow applicable consent requirements. **Before publication, verify all actual integrations, providers, purposes, storage periods and cross-border transfers with a live cookie scan.**
9. Data subject rights
You may exercise GDPR rights including access, rectification, erasure, restriction, portability, objection and withdrawal of consent for the future. Contact support@homecockpit-simulation.de. You may complain to a supervisory authority, including the Bavarian Data Protection Authority for the Private Sector (BayLDA).
10. Status
22 October 2026.
