We're glad you're interested in our company. Privacy Policy is especially important to us. You can generally use our website without providing any personal data. However, if you want to use special services on our website, processing personal data might be necessary. If processing personal data is required and there’s no legal basis for it, we’ll always ask for your consent first.

We always process personal data in accordance with the Privacy Policy Regulation (GDPR) and the applicable national data protection laws. With this privacy policy, we want to inform the public about the type, scope, and purpose of the personal data we collect, use, and process. We also explain the rights you have regarding your data.

As the data controller, we have implemented many technical and organizational measures to ensure the best possible protection of personal data processed through this website. Still, internet-based data transfers can have security gaps, so absolute protection can't be guaranteed.

1. Definitions

This privacy policy is based on the terms used by the European legislator when adopting the GDPR. Here are the main terms explained:

A) Personal Data

Personal data is All information relating to an identified or identifiable natural person. A person is considered identifiable if they can be identified, directly or indirectly—especially by reference to a name, an identification number, location data, an online identifier, or one or more specific characteristics.

B) Data Subject

A data subject is any identified or identifiable natural person whose personal data is processed by the controller.

C) Processing

Processing means any operation involving personal data: collecting, recording, organizing, storing, adapting, reading, retrieving, using, disclosing by transmission, distributing, matching, restricting, deleting, or destroying.

D) Restriction of Processing

The marking of stored personal data with the aim of limiting its future processing.

E) Profiling

Any kind of automated processing of personal data to evaluate certain personal aspects of a natural person, especially work performance, economic situation, health, preferences, interests, behavior, or location.

F) Pseudonymization

Processing personal data in such a way that the data can no longer be attributed to a specific data subject without additional information.

G) Controller

The natural or legal person who alone or together with others decides on the purposes and means of processing personal data.

H) Processor

A natural or legal person who processes personal data on behalf of the controller.

I) Recipient

A natural or legal person to whom personal data is disclosed, whether or not they are a third party.

J) Third Party

Any natural or legal person other than the data subject, the controller, the processor, and those who, under the direct authority of the controller, are authorized to process personal data.

K) Consent

Any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they signify agreement to the processing of personal data relating to them.

2. Name and Address of the Controller

The controller under the GDPR is:

Service hours: Mon–Fri: 10:00 am–6:00 pm
Email: support@sheesh.de

We are not willing or obliged to participate in dispute resolution proceedings before a consumer arbitration board.

3. Cookies

Our company’s websites use cookies. Cookies are text files that are placed and stored on a computer system via an internet browser.

Many websites and servers use cookies. Many cookies contain what’s called a cookie ID—a unique identifier that allows websites and servers to recognize the specific internet browser where the cookie was stored.

By using cookies, our company can provide users of this website with more user-friendly services that wouldn’t be possible without cookies. Cookies make it possible to optimize information and offers on our website in the interest of the user.

You can prevent cookies from being set by our website at any time by adjusting your internet browser settings, and in doing so, permanently object to the setting of cookies. You can also delete cookies that have already been set at any time via your internet browser or other software programs. If you deactivate cookies, some All functions of our website may not be fully usable.

4. Collection of General Data and Information

Each time the website is accessed by a data subject or an automated system, a series of general data and information is collected and stored in the server’s log files. The following may be collected:

• browser types and versions used
• the operating system used by the accessing system
• the website from which an accessing system arrives at our website (referrer)
• the subpages accessed on our website by an accessing system
• date and time of access to the website
• Internet Protocol address (IP address)
• the internet service provider of the accessing system

When using this general data, our company does not draw any conclusions about the individual concerned. This information is needed to deliver the content of our website correctly, to ensure the ongoing functionality of our systems, and to provide law enforcement authorities with necessary information in the event of a cyberattack. The anonymous data from the server log files is stored separately from all personal data.

5. Contact options via the website

The website includes information that allows you to quickly get in touch with us electronically, including a Email address. If you contact us via Email, the personal data you provide will be stored automatically. Any data you send us voluntarily will be stored for processing your request or for getting in touch with you. This personal data will not be shared with third parties.

6. Routine deletion and blocking of personal data

The controller processes and stores personal data of the individual concerned only for the period necessary to achieve the storage purpose, or as required by legal regulations.

If the storage purpose no longer applies or a required storage period expires, the personal data will be routinely blocked or deleted in accordance with legal requirements.

7. Rights of the individual concerned

A) Right to confirmation

Every individual concerned has the right to ask the controller for confirmation as to whether personal data concerning them is being processed.

B) Right to information

Every individual concerned has the right to receive, at any time and free of charge, information from the controller about the personal data stored about them and a copy of this information. There is also a right to information about the following:

• the purposes of processing
• the categories of personal data being processed
• the recipients or categories of recipients to whom the data has been disclosed
• the planned duration of storage or the criteria for determining this duration
• the existence of a right to rectification, erasure, or restriction of processing
• the existence of a right to lodge a complaint with a supervisory authority
• the existence of automated decision-making including profiling

C) Right to rectification

Every individual concerned has the right to request the immediate correction of inaccurate personal data concerning them. They also have the right to request the completion of incomplete data.

D) Right to erasure (right to be forgotten)

Every individual concerned has the right to request from the controller that personal data concerning them be deleted without delay if one of the following reasons applies:

• The data was collected for purposes for which it is no longer needed.
• The individual withdraws their consent and there is no other legal basis.
• The individual objects to the processing and there are no overriding legitimate reasons.
• The personal data was processed unlawfully.
• Deletion is required to fulfill a legal obligation.

E) Right to restriction of processing

Every individual concerned has the right to request the restriction of processing from the controller if one of the following conditions is met:

• The accuracy of the data is disputed, for a period enabling the controller to verify the accuracy.
• The processing is unlawful and the individual refuses erasure.
• The controller no longer needs the data, but the individual requires it for the establishment, exercise, or defense of legal claims.
• The individual has objected to the processing.

F) Right to data portability

Every individual concerned has the right to receive the personal data concerning them in a structured, commonly used, and machine-readable format and to transmit this data to another controller, provided the processing is based on consent or a contract.

G) Right to object

Every individual concerned has the right, for reasons arising from their particular situation, to object at any time to the processing of personal data concerning them. In the event of an objection, our company will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing.

H) Automated decisions including profiling

Every individual concerned has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or significantly affects them in a similar way.

I) Right to withdraw consent under data protection law

Every individual concerned has the right to withdraw consent to the processing of personal data at any time. To exercise this right, the individual can contact us at any time.

8. Privacy Policy on Instagram

If components of the Instagram service are integrated on this website, the following applies: Instagram is an audiovisual service that allows sharing photos and videos as well as distributing them in social networks.

Operator: Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA (a company of Meta Platforms, Inc.).

When you access a page that has an Instagram component integrated, your internet browser automatically downloads a display of the corresponding Instagram component. Through this technical process, Instagram becomes aware of which specific subpage of our website is being visited.

If you are logged into Instagram at the same time, Instagram recognizes which specific subpage you visit every time you access our website and links this information to your Instagram account. To prevent this, you can log out of your Instagram account before visiting our website.

More information: https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/

9. Legal basis for processing

Article 6(1)(a) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose.

If the processing of personal data is necessary for the fulfillment of a contract, the processing is based on Article 6(1)(b) GDPR. The same applies to pre-contractual measures.

If our company is subject to a legal obligation that requires the processing of personal data (for example, tax obligations), the processing is based on Article 6(1)(c) GDPR.

Finally, processing operations may be based on Article 6(1)(f) GDPR if the processing is necessary to protect a legitimate interest of our company, provided that the interests, fundamental rights, and freedoms of the data subject do not override those interests.

10. Duration of storage of personal data

The criterion for the duration of storage of personal data is the respective statutory retention period. After this period expires, the relevant data is routinely deleted, provided it is no longer required for contract fulfillment or initiation.

11. Statutory or contractual requirements for providing personal data

We inform you that the provision of personal data is partly required by law (for example, tax regulations) or can result from contractual arrangements. If you do not provide personal data, it would mean that the contract with you could not be concluded. Before providing personal data, you can always contact us.

12. Existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

Status: March 2026