Last updated: 31 October 2024

Steven Marais ("we", "us", "our") operates Feral Magazine from Rubensstraße 92, 12157 Berlin, Germany. We are committed to protecting and respecting your privacy when you visit our website or communicate electronically with us. This policy outlines how we collect, use, protect, and disclose your personal data under the General Data Protection Regulation (GDPR).

If you have any concerns or questions regarding this policy, please contact us at fyi@stevemarais.com or contact@heavyferal.com

---

1. Data We Collect

We collect personal data to process your orders, manage subscriptions, and offer visitor services on our website. The personal data we collect may include:

• Contact Information: Full name, address, email address, and phone number.
• Payment Information: Transaction details and incomplete card information (processed through secure third-party providers).
• Account Information: Username, password, and historical orders if an account is created.
• Website Data: IP address, browsing behaviour, and cookie information collected via analytical tools.
• Marketing Information: Preferences for receiving news, promotional materials, or notices about upcoming issues of Feral.

We collect information directly from you via our website, email communications, or support services, and automatically when you browse our website.

Cookies and Tracking Technologies

Our website uses cookies to collect certain data. Cookies are small files stored on your device that allow us to analyse website traffic and improve the user experience.

You can control cookie preferences through your browser settings, but disabling cookies may limit your ability to use certain features of our website.
For more details, please visit our Cookie Policy.

---

2. How We Use Your Data

We collect your data to support your orders and enhance the experience with our services. The ways we use your data include:

• Fulfilling Orders: We use your provided contact and payment details to process orders, send confirmation emails, and arrange deliveries.
• Communications: Sending customer service responses, updates on your orders, or subscription renewals.
• Marketing: With your permission, we may send promotional emails regarding new releases, exclusive issues, discounts, or offers related to Feral Magazine.
• Improving our Website: Utilizing visitor analytics for website optimization and enhancement of user experience.
• Legal Compliance: To comply with legal requirements, and assist law enforcement if requested, by providing necessary information.

---

3. Lawful Basis for Data Processing

Under the GDPR, we process your personal data based only on legal grounds which include:

• Performance of a contract: To fulfil our obligations regarding sales, subscriptions, and services.
• Legitimate interests: To operate our business, including improving customer service, providing information about products, and responding to enquiries.
• Consent: For any marketing communications or newsletter subscriptions where you have provided explicit consent. You can withdraw your consent at any time.
• Legal obligation: To comply with regulations, tax laws, or official legal requests.

---

4. Data Sharing and Third-Party Access

We do not sell, trade, or otherwise transfer your personal information to outside parties, except in the following cases:

Third-Party Service Providers

We engage trusted third-party providers to help us perform our tasks, including:

• Payment Gateways: We use external payment providers (such as PayPal and Stripe) to process payments securely.
• Shipping and Fulfilment: Postal services like Deutsche Post, DHL, UPS for order shipping.
• Analytics Providers: Google Analytics to track and analyse website traffic.

All third-parties with whom we share your data are bound by contractual agreements ensuring that your data is managed in accordance with GDPR standards. Your payment information is never stored by us and is securely processed through our third-party providers.

Legal and Regulatory Authorities

We may disclose your information if required to do so by law, or if it is necessary to enforce our Terms & Conditions or other user agreements.

---

5. International Transfers

As part of providing you with our services, the information you supply to us may be transferred to countries outside of the European Economic Area (EEA). This may happen if our third-party providers are located in countries that do not have GDPR-level protection.

Whenever such transfers occur, we ensure that your data is protected via contractual arrangements or international frameworks like the EU-U.S. Privacy Shield (now invalid) or using other legal mechanisms like Standard Contractual Clauses (SCCs).

---

6. Data Retention

We only retain your personal data as long as necessary for the purposes specified in this notice. Specifically:

• Order Information: Retained for 10 years for bookkeeping and tax obligations.
• Account Information: Stored until you request deletion of your account.
• Marketing Emails: Retained unless you opt to unsubscribe, which you can do by contacting us or following the unsubscribe link in our emails.

After this period, your data is securely deleted or anonymized in a non-identifiable manner.

---

7. Your Rights Under GDPR

Under the GDPR, you have various rights concerning your data. These rights include:

• Right of Access: Receive a copy of your data and details about how your information is processed.
• Right to Rectification: Correct incomplete or inaccurate information we hold about you.
• Right to Erasure ("Right to be Forgotten"): Request the deletion of your personal data.
• Right to Restrict Processing: Ask to temporarily restrict the processing of your data under specific circumstances.
• Right to Data Portability: Obtain your data in a structured, machine-readable format and transfer it to another controller.
• Right to Object: Object to the processing of your personal data for direct marketing purposes or under other legitimate grounds.
• Right to Withdraw Consent: If you’ve provided consent for certain data use, you can withdraw it at any time.

To exercise any of these rights, please contact us at shop@stevemarais.com. We will respond to your request within one month as per GDPR guidelines.

---

8. Security Measures

We take the security of your personal data seriously, implementing various technological and administrative safeguards to ensure your data is protected from loss, theft, and unauthorized access.

Our website incorporates encryption (SSL certificates) to secure communications. We also enforce strict access controls within our team and ensure that any third-party processing is done through GDPR-compliant providers.

While we strive to protect your information, no method of transmission over the internet is 100% secure, and we cannot guarantee the absolute security of your data.

---

9. Data Breach Procedure

In the unlikely event of a data breach, as per GDPR requirements:

• We will notify the relevant supervisory authority within 72 hours.
• If the breach poses a high risk to your rights and freedoms, we will inform you directly.

---

10. Third-Party Links

Occasionally, our website may link to third-party sites for additional content or services (for example, external payment services). These third-party sites have their own privacy policies, which we encourage you to review before sharing any personal data with them. We are not responsible for the content or data processing practices of these external sites.

---

11. Changes to This Policy

We may update this privacy policy from time to time to comply with legal or business changes. Any significant amendments will be posted on this page, and we will notify you directly if they affect your rights.

---

12. Contact Us

If you have any questions about this privacy policy or your data, please contact us at:

Steve Marais
Feral Magazine
Rubensstraße 92
12157 Berlin, Germany

Email: contact@heavyferal.com
Email: shop@stevemarais.com

You also have the right to lodge a complaint with the German Data Protection Authority if you believe your data has been mishandled under GDPR.