Privacy policy

We collect as little data as possible: no trackers, no analytics, no advertising cookies, no third-party embeds. Fonts are served from our own server.

1. Controller

Sebastian Winzker, Livländische Straße 19, 10715 Berlin, Germany
Email: sebwinzker@gmail.com, phone: +49 170 410 41 40

2. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit, Vercel processes technically necessary data: IP address, date and time, requested URL, referrer, browser and device information. This is needed to deliver the site and keep it stable and secure (Art. 6(1)(f) GDPR). Vercel keeps these logs only for a short time. Our server functions run in Frankfurt am Main; content is delivered via a worldwide network. We have a data processing agreement with Vercel. For transfers to the USA, Vercel relies on the EU-U.S. Data Privacy Framework (Art. 45 GDPR) and on standard contractual clauses (Art. 46(2)(c) GDPR).

When you open the home page, we send you to the German or English version based on the country Vercel derives from your IP address. The country is only used at that moment and is not stored (Art. 6(1)(f) GDPR).

3. Cookie “lang” (language choice)

If you pick a language with the switcher, we store your choice in a cookie called lang (value de or en, lifetime 1 year). It is strictly necessary for the function you asked for (§ 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR) and is read only by this website. We set no other cookies. You can delete it in your browser at any time.

4. Giveaway and confirmation email (double opt-in)

For the giveaway we process your email address, your language, your checkbox choices and the time of sign-up and confirmation. The legal basis is running the giveaway under the giveaway terms (Art. 6(1)(b) GDPR).

After you sign up we send you an email with a confirmation link that is valid for 48 hours. You only take part once you confirm. This makes sure nobody can enter someone else's address. To be able to prove the confirmation, we log your IP address, browser identifier (user agent) and the time of confirmation and send this record by email to the operator's mailbox (Google Gmail, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) (Art. 6(1)(c) and (f) GDPR, proof of sign-up and consent). To prevent abuse, your IP address is also held briefly in the memory of our server function to limit repeated sign-ups; it is not stored permanently.

Emails and the contact list are handled by Resend, Inc. (USA) as our processor. Transfers to the USA are based on standard contractual clauses (Art. 46(2)(c) GDPR) or, where the provider is certified, on the EU-U.S. Data Privacy Framework.

We notify winners by email and then ask for a delivery address, which we use only to ship the prize. We delete giveaway data once the prizes have been shipped, at the latest three months after the giveaway ends. We keep the confirmation records as long as we need them as proof (usually up to three years).

5. Newsletter (optional)

If you tick the optional newsletter box, we send you news about Traders Tarot (new decks, drops, discounts). The legal basis is your consent (Art. 6(1)(a) GDPR). Consent is not a condition for entering the giveaway. You can withdraw it at any time with effect for the future, e.g. via the unsubscribe link in every email or by emailing us. Your address stays on the list at Resend until you unsubscribe.

6. Orders and payment via Stripe

Pre-orders are handled with Stripe Payment Links. The order buttons take you to Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). Stripe processes your name, email address, delivery address and payment details. We never receive full payment details such as card numbers. Stripe is partly an independent controller for payment processing; data may be transferred to Stripe, Inc. (USA), which is certified under the EU-U.S. Data Privacy Framework. See stripe.com/privacy.

We use your order data to fulfil the contract and ship your deck (Art. 6(1)(b) GDPR). For shipping we pass your name and address to the carrier (e.g. Deutsche Post/DHL). We keep invoices and accounting records for the statutory periods (Art. 6(1)(c) GDPR with § 147 AO).

7. Contact by email or phone

If you contact us, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR). Emails are received in a Google Gmail mailbox. We delete requests once they are settled and no retention duties apply.

Online withdrawal function: If you withdraw via “Withdraw from contract here”, we process your name, email address, order reference, optional note, time of receipt and IP address to handle the withdrawal and to email you the legally required acknowledgment of receipt (Art. 6(1)(b) and (c) GDPR). Emails are sent via Resend (see section 4). We keep this data as long as needed to process the withdrawal and for statutory retention duties.

8. External links

The partner link leads to card.winzker.net, the order buttons to Stripe. Data is only sent to these providers once you click such a link; their privacy policies then apply.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw any consent (Art. 7(3)). An informal email to sebwinzker@gmail.com is enough.

Right to object (Art. 21 GDPR): where we process data on the basis of legitimate interests, you can object at any time on grounds relating to your particular situation.

You can also lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany.

10. Other

This website is only served encrypted (HTTPS). There is no automated decision-making or profiling; winners are drawn at random.

Last updated: September 2026. The German version of this page is legally binding.