Privacy Policy

Last updated: 22 September 2026

1. Controller

The controller responsible for the processing of personal data on this website is:

Marc Schalich
Steensweg 38
26419 Schortens
Germany

2. General Information

We take the protection of your personal data seriously.

Personal data is any information relating to an identified or identifiable natural person. We process personal data only where this is necessary to operate this website, provide CelestiPost services, process orders, fulfil legal obligations or protect legitimate interests.

Depending on the respective processing activity, the legal basis is in particular Article 6(1)(b), (c) or (f) GDPR.

3. Website Hosting

This website is hosted by:

ALL-INKL.COM – Neue Medien Münnich
Hauptstraße 68
02742 Friedersdorf
Germany

When you access this website, technical information may be processed by the hosting provider. This may include:

IP address
date and time of access
requested page or file
browser type and version
operating system
referrer URL
server status information

This processing is necessary to provide the website securely and reliably, detect technical problems and prevent misuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.

4. Contacting Us

If you contact us by email or through a contact form, we process the information you provide, such as:

name
email address
message
order number, if provided
other information contained in your enquiry

We use this information solely to process and respond to your enquiry.

Where your enquiry relates to an existing or potential contract, the legal basis is Article 6(1)(b) GDPR. In other cases, processing is based on our legitimate interest in responding to enquiries pursuant to Article 6(1)(f) GDPR.

Correspondence is retained only for as long as necessary for the respective purpose or as required by statutory retention obligations.

5. Orders and WooCommerce

We use WooCommerce to operate our online store and process orders.

When you place an order, we may process information including:

first and last name
billing address
email address
telephone number, if provided
country or region
products ordered
order value
order date and time
payment status
order number
technical information required to process the transaction

This information is necessary to process your order, perform the contract, provide customer support and comply with legal accounting and tax obligations.

The legal basis is Article 6(1)(b) GDPR for contractual processing and Article 6(1)(c) GDPR where processing is required by law.

5a. Gift Vouchers and Promotional Codes

When purchasing or redeeming a CelestiPost gift voucher, we may additionally process information necessary to create, manage and redeem the voucher. This may include:

voucher code
voucher type
associated order number
date of issue
redemption status
date of redemption
where applicable, technical information used to prevent multiple or unauthorised use

This information is processed in order to create and provide the purchased voucher, enable its redemption and prevent multiple redemption.

The legal basis is Article 6(1)(b) GDPR where the processing is necessary for the performance of the voucher contract and its subsequent redemption. Where information is processed to prevent misuse or document proper redemption, processing may additionally be based on Article 6(1)(f) GDPR.

The personal voucher code and PDF voucher are currently sent only to the email address provided by the purchaser. CelestiPost does not currently collect separate personal data relating to the eventual recipient of the gift voucher.

For free promotional or campaign codes, information such as the respective code, applicable usage limits, any specified validity period and redemption status may be stored.

6. CelestiPost Messages and Image Uploads

When purchasing a CelestiPost transmission, you may provide:

a personal text message
an image, depending on the selected product
optional accompanying text
information required to identify and process the transmission

This content is processed solely for the purpose of preparing, performing, verifying and documenting the transmission requested by you.

The legal basis is Article 6(1)(b) GDPR.

Messages and uploaded images are not used for advertising, profiling or unrelated purposes.

Retention of Transmission Content

Text messages and uploaded images are retained only for as long as necessary to prepare, transmit and technically verify the transmission.

After successful transmission and technical verification, the original message content and uploaded files are deleted.

Technical verification information may be retained separately without retaining the original message or image.

7. Transmission Logs and Technical Verification Data

For technical verification and documentation of the CelestiPost service, we may create and retain information such as:

transmission date and time
message or file hash
transmission status
reception confirmation
signal strength information, such as RSSI
internal order or transmission identifier

A cryptographic hash may be used to identify transmitted content without storing or reproducing the original message or file.

This allows the integrity of a specific message or file to be verified later without requiring CelestiPost to retain the original content.

Processing is carried out for the performance and documentation of the service and for reliable technical operation.

The legal basis is Article 6(1)(b) GDPR and, where applicable, Article 6(1)(f) GDPR.

8. CelestiPost Transmission Certificate

After a successful transmission, CelestiPost may generate a personal Transmission Certificate documenting the transmission.

The certificate may contain information such as:

transmission date and time
transmission type
message or file hash
transmission status
reception status
signal strength
receiving station information
order or transmission reference

The Transmission Certificate forms part of the CelestiPost service.

The legal basis is Article 6(1)(b) GDPR.

9. Payment Processing with PayPal

We use PayPal to process payments.

Depending on the payment method available and selected, PayPal may process payments using methods including:

PayPal
credit cards
debit cards
digital wallets
bank-based payment methods
other payment methods offered by PayPal

Information required to process the transaction may be transmitted to PayPal. This may include billing information, transaction amount, order information and other data required to process, secure and verify the payment.

The legal basis for the transfer of payment-related information is Article 6(1)(b) GDPR.

PayPal processes personal data under its own responsibility in accordance with its applicable privacy policy.

CelestiPost does not receive or store complete credit or debit card details.

10. Cookies and Technically Necessary Storage

This website, WooCommerce and associated payment functions use cookies or similar technologies where technically necessary to provide functions such as:

shopping cart operation
checkout
session management
payment processing
security
remembering user selections

Technically necessary cookies and similar technologies are used to provide functions requested by the user and to operate the website and online store.

If technologies requiring consent are introduced, they will only be activated after the required consent has been obtained.

11. No Advertising Profiling

CelestiPost does not use the content of customer messages, uploaded images or transmission data for behavioural advertising or customer profiling.

If analytics, advertising, newsletter or marketing services are introduced in the future, this Privacy Policy will be updated accordingly and consent will be obtained where legally required.

12. Recipients of Personal Data

Personal data may be disclosed where necessary to:

hosting and technical service providers
payment service providers
accounting or tax service providers
authorities where disclosure is legally required
other processors necessary to provide the CelestiPost service

CelestiPost does not sell personal data.

13. International Data Transfers

Some service providers, particularly payment service providers, may process personal data outside Germany or the European Economic Area.

Where such transfers take place, the relevant provider must ensure that an appropriate legal basis and applicable safeguards for international data transfers are in place.

For details regarding PayPal’s processing of personal data and international transfers, please refer to PayPal’s current privacy information.

14. Storage Periods

We retain personal data only for as long as necessary for the respective purpose or as required by law.

In particular:

Text messages and uploaded images: deleted after successful transmission and technical verification
Technical transmission and verification data: retained as necessary to document and verify the CelestiPost service
Contact enquiries: retained until the enquiry has been resolved, unless further storage is necessary
Order, invoice and accounting information: retained for the applicable statutory retention periods

Once the respective purpose or statutory retention period ends, personal data is deleted or anonymised unless further processing is legally required.

Information relating to gift vouchers and their redemption is retained for as long as necessary to administer and document the voucher and to comply with applicable statutory retention and evidentiary obligations.

15. Your Rights

Subject to the applicable legal requirements, you have the right to:

request information about your personal data
request correction of inaccurate or incomplete data
request deletion of your personal data
request restriction of processing
object to certain processing
receive certain personal data in a portable format
withdraw consent at any time where processing is based on consent

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact:

info@celestipost.com

16. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

17. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, disclosure, destruction or unauthorised access.

Data transmitted between your browser and this website is protected using encrypted HTTPS connections.

18. Customer-Submitted Content

Customers are responsible for ensuring that they have the necessary rights to submit and transmit content through CelestiPost.

Please do not submit:

illegal content
content that infringes third-party rights
confidential information that should not be transmitted
highly sensitive personal information unless strictly necessary for the intended message

Where submitted content contains personal data relating to another person, the customer is responsible for ensuring that the submission and transmission of that content is lawful.

19. Withdrawal Function

CelestiPost provides an electronic withdrawal function through which customers may submit a withdrawal declaration online.

When using this function, we process the following information:

name
order or contract number
email address
date and time of submission
the content of the withdrawal declaration

The purpose of this processing is to receive, document and process the withdrawal declaration and to send the required electronic confirmation of receipt.

The legal basis for this processing is Article 6(1)(c) GDPR, insofar as the processing is necessary to comply with a legal obligation, and Article 6(1)(b) GDPR insofar as the processing relates to the administration of the contractual relationship.

The withdrawal form is provided using WPForms Lite. WPForms Lite entry backups (Lite Connect) are disabled. Form submissions are therefore not backed up through the WPForms Lite Connect service. The submitted information is transmitted to CelestiPost by email and a confirmation email is sent to the email address provided by the customer.

Withdrawal declarations and related correspondence are retained for as long as necessary to process and document the withdrawal and to comply with applicable statutory retention obligations.

20. Printed Certificates and Postal Delivery

If you choose the optional “Printed Certificate by Mail”, additional personal data is required in order to prepare and deliver the printed certificate.

This may include:

first and last name
street address
postcode
city
country
state or region where required

This information is processed for the purpose of fulfilling the order, producing the personalised certificate and delivering it to the postal address provided.

The legal basis for this processing is Article 6(1)(b) GDPR, as the processing is necessary for the performance of the contract.

Where necessary for delivery, the required recipient and address information may be provided to the postal or delivery service used for shipment.

Postal address information is retained only for as long as necessary to fulfil the order and to comply with applicable statutory documentation and retention obligations.

21. Documentation of Early Performance Request

CelestiPost normally begins performing the ordered radio-sending service within three business days.

Where a customer expressly requests that CelestiPost begin providing the service before the expiry of an applicable statutory withdrawal period, CelestiPost records this declaration as part of the order documentation.

The following information may be stored:

confirmation that the request was made
date and time of the confirmation
the wording of the declaration presented to the customer
the associated order reference

This information is processed for the purpose of documenting the customer’s request, administering the contractual relationship and demonstrating compliance with applicable consumer-protection requirements.

The legal basis for this processing is Article 6(1)(b) GDPR and, where applicable, Article 6(1)(c) GDPR.

The recorded information is retained for as long as necessary to document the contractual relationship and to comply with applicable statutory retention and evidentiary obligations.

22. Changes to this Privacy Policy

We may update this Privacy Policy if our services, technical systems, service providers or applicable legal requirements change.

The current version of this Privacy Policy will always be made available on this website.