Privacy Policy

Privacy Policy

Last updated: 15 August 2026

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

CAM-JAM GmbH
Veteranenstr. 12
10119 Berlin
Germany

Email: info@cam-jam.de

The online shop is operated exclusively as a B2B shop for business customers.

CAM-JAM GmbH processes personal data in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other applicable data protection laws.

2. Hosting and Server Logs

The website and online shop are hosted by:

netcup GmbH
Germany

When the website is accessed, the server automatically processes technical information, including:

  • IP address;
  • date and time of access;
  • requested page or resource;
  • referrer URL;
  • browser type and version;
  • operating system;
  • amount of data transferred;
  • technical status information.

This processing is necessary to provide, secure and technically operate the website and to detect and prevent misuse and attacks.

Legal basis: Art. 6(1)(f) GDPR.

Server log data is deleted when it is no longer required for these purposes, unless longer storage is necessary for security investigations or required by law.

Where legally required, CAM-JAM has concluded a data processing agreement pursuant to Art. 28 GDPR with the relevant service provider.

3. WordPress and WooCommerce

This website uses WordPress and WooCommerce to operate the online shop.

When using the shop, creating a customer account or placing an order, CAM-JAM may process:

  • name and contact person;
  • company name;
  • billing and delivery address;
  • email address;
  • telephone number;
  • VAT identification number;
  • customer-account information;
  • order and product information;
  • payment information;
  • shipping information;
  • invoices and related correspondence.

The data is processed for customer-account administration, contract formation and performance, payment, delivery, invoicing, warranty and return processing and customer communication.

Legal basis: Art. 6(1)(b) GDPR.

Where processing is required by law, in particular for tax and commercial obligations, the legal basis is Art. 6(1)(c) GDPR.

4. Cookies and Technically Necessary Technologies

The website uses technically necessary cookies and similar technologies required for the operation of the online shop, including:

  • shopping-cart functionality;
  • login and customer accounts;
  • session management;
  • security functions;
  • order processing.

These technologies are not used by CAM-JAM for behavioural advertising or cross-site tracking.

Under § 25(2) no. 2 TDDDG, consent is not required where access to or storage of information is technically necessary to provide a digital service expressly requested by the user.

CAM-JAM currently does not use:

  • Google Analytics;
  • Meta/Facebook tracking;
  • advertising pixels;
  • YouTube;
  • Vimeo;
  • Google Maps;
  • Cloudflare;
  • a CDN;
  • newsletter tracking;
  • abandoned-cart tracking.

5. [Reserved]

6. Customer Accounts

Customers may create a customer account where this function is offered.

The data required for the account is processed to:

  • create and maintain the account;
  • provide access to previous orders;
  • process orders;
  • communicate with the customer;
  • provide customer-service functions.

Legal basis: Art. 6(1)(b) GDPR.

7. Orders and Contract Processing

When an order is placed, CAM-JAM processes the data required to conclude and perform the purchase contract.

This includes, depending on the transaction:

  • contact person;
  • company name;
  • billing address;
  • delivery address;
  • email address;
  • telephone number;
  • VAT identification number;
  • ordered products;
  • prices;
  • payment information;
  • shipping information;
  • invoices;
  • correspondence relating to the order.

The data is used for contract processing, payment, delivery, invoicing, customer communication, warranty and return processing and the assertion or defence of legal claims.

Legal bases: Art. 6(1)(b), Art. 6(1)(c) and, where applicable, Art. 6(1)(f) GDPR.

8. VAT Identification Number

Where required for VAT purposes, CAM-JAM processes the buyer’s VAT identification number.

The VAT identification number may be validated against the relevant official validation system where necessary to determine or document the correct VAT treatment of a transaction.

Legal bases: Art. 6(1)(b) and Art. 6(1)(c) GDPR.

9. Payment Processing

Depending on the payment method selected, payment-related data is transmitted to the relevant payment service provider.

CAM-JAM currently uses:

  • PayPal
  • Stripe (for credit card and electronic payment processing)
  • Wise

The respective payment service provider processes information required for payment processing, security, and fraud prevention, including name, billing information, transaction amounts, credit card or banking details, and technical connection data.
The relevant payment provider acts as an independent controller for its own processing activities, and its own privacy policy applies to such processing.

Legal basis for the transmission by CAM-JAM: Art. 6(1)(b) GDPR.

10. Shipping

For the fulfilment of an order, CAM-JAM transmits the data required for delivery to the selected shipping provider.

Depending on the shipping service, this may include:

  • recipient name;
  • company name;
  • delivery address;
  • country;
  • telephone number where required;
  • email address where required for the selected shipping service.

CAM-JAM currently uses, among others:

  • DHL;
  • Deutsche Post;
  • UPS;
  • FedEx.

Other shipping providers may be used where required for a particular order.

Legal basis: Art. 6(1)(b) GDPR.

CAM-JAM sends shipment tracking information directly from its own WooCommerce system. CAM-JAM does not provide the shipping provider with the recipient’s email address solely for the purpose of sending CAM-JAM’s shipment notification emails.

This does not exclude processing by the shipping provider that is independently necessary for the performance of the shipping service.

11. Transactional Emails

CAM-JAM sends transaction-related emails, including:

  • order confirmations;
  • payment-related notifications;
  • invoices;
  • shipping notifications;
  • tracking information;
  • other messages necessary for contract processing.

Email transmission is technically supported by SMTP Mailer and the email infrastructure of netcup.

The processing is necessary for contract performance and business communication.

Legal bases: Art. 6(1)(b) and Art. 6(1)(c) GDPR.

CAM-JAM does not operate a newsletter and does not send abandoned-cart marketing emails.

12. Product Reviews

WooCommerce provides a product-review function.

If a customer submits a product review, the information provided by the customer is processed for the purpose of displaying and administering the review.

Customers should not include personal data of themselves or third parties in publicly visible reviews unless they intentionally wish to disclose such information.

Legal basis: Art. 6(1)(f) GDPR.

13. Disclosure to Third Parties

CAM-JAM does not sell personal data.

Personal data is disclosed to third parties only where there is a valid legal basis.

Recipients or categories of recipients may include:

  • hosting and IT service providers;
  • payment service providers;
  • banks and financial institutions;
  • shipping and logistics providers;
  • email service providers;
  • tax advisers and accountants;
  • legal advisers;
  • IT-security and fraud-prevention providers;
  • authorities where disclosure is legally required.

Where a service provider processes personal data on behalf of CAM-JAM, a data processing agreement pursuant to Art. 28 GDPR is concluded where legally required.

14. International Data Transfers

Some service providers used by CAM-JAM may process personal data outside the European Economic Area (EEA).

Where personal data is transferred to a third country, CAM-JAM ensures compliance with Chapter V GDPR.

Depending on the respective provider and processing activity, transfers may be based on:

  • an adequacy decision of the European Commission;
  • Standard Contractual Clauses;
  • another legally permissible transfer mechanism.

15. Retention of Personal Data

CAM-JAM stores personal data only for as long as necessary for the respective processing purpose or as required by law.

Business, accounting and tax records are retained for the statutory retention periods under German commercial and tax law.

Data relevant to contracts, warranty claims or legal disputes may be retained for as long as necessary to establish, exercise or defend legal claims.

After expiry of the applicable retention period, the data is deleted unless another legal obligation or legal basis requires or permits continued storage.

16. Legal Obligations, Security and Fraud Prevention

CAM-JAM may process personal data where necessary to:

  • comply with statutory obligations;
  • prevent fraud and misuse;
  • protect IT systems;
  • investigate security incidents;
  • enforce contractual claims;
  • defend against legal claims;
  • respond to lawful requests from authorities.

Legal bases: Art. 6(1)(c) and Art. 6(1)(f) GDPR.

CAM-JAM’s legitimate interests include protecting its business operations, property, IT systems and legal rights.

17. Marketing

CAM-JAM currently does not operate a newsletter.

No personal data is used for direct marketing unless a valid legal basis exists.

Where consent is required, marketing communications are only sent after valid consent has been obtained.

You may object to direct marketing at any time.

18. Automated Decision-Making and Profiling

CAM-JAM does not use automated decision-making within the meaning of Art. 22 GDPR that produces legal effects or similarly significantly affects individuals.

CAM-JAM does not use personal data for advertising profiling.

19. Data Security

CAM-JAM implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

These measures include, where appropriate:

  • access controls;
  • authentication;
  • encrypted transmission;
  • security updates;
  • backups;
  • restricted access to personal data.

20. Your Rights

Subject to the statutory requirements, you have the following rights:

  • Access: Art. 15 GDPR
  • Rectification: Art. 16 GDPR
  • Erasure: Art. 17 GDPR
  • Restriction of processing: Art. 18 GDPR
  • Data portability: Art. 20 GDPR
  • Objection: Art. 21 GDPR

You have the right to object to processing based on Art. 6(1)(e) or Art. 6(1)(f) GDPR for reasons arising from your particular situation.

You have an absolute right to object to the processing of your personal data for direct marketing purposes.

Where processing is based on consent, you may withdraw your consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact:

info@cam-jam.de

CAM-JAM may request appropriate information to verify the identity of the person making a request where this is necessary to prevent unauthorised disclosure of personal data.

21. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that your personal data is being processed unlawfully.

The competent supervisory authority for CAM-JAM GmbH is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
Germany
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de

The current contact details are confirmed by the Berlin data protection authority.

22. Changes to this Privacy Policy

CAM-JAM may amend this Privacy Policy where necessary due to changes in legal requirements, technical developments, changes to the online shop or changes in the processing of personal data.

The current version is published on this website.