Privacy
1. Controller
The controller responsible for processing your data on bundlethemes.com is Julius Elias Gebler, Buckelwiesen 7, 82481 Mittenwald, Germany, email: hello@bundlethemes.com, phone: +49 176 76628871.
2. In short
This site sets no cookies, stores nothing on your device, does not measure visits and loads nothing from third-party servers: the font, images and video come from our own server. There is no tracking and no advertising. We only process what you give us yourself (waitlist, order, a message through the contact form or by email) and what technically arises when a web page is requested.
3. Visiting the site
The site is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The host processes the data on our behalf.
When you open the site, the host’s server processes the data your browser sends: IP address, date and time, the address requested, the amount of data transferred, the page you came from and the identifier of your browser. The host writes this information to log files in order to keep the service running and to investigate faults and attacks. How long it keeps them depends on its settings for our account. We do not combine this information with other data.
The legal basis is our legitimate interest in secure and reliable operation (Art. 6 (1) (f) GDPR).
4. Protection of the forms
To keep the waitlist form and the order form from being abused in bulk, we count how many requests come from one connection. For this we do not store your IP address but an irreversible check value calculated from it, together with the time. For the waitlist we count in the same way how many confirmation emails go to one address. These entries are deleted after 24 hours.
The legal basis is our legitimate interest in protection against abuse (Art. 6 (1) (f) GDPR).
5. Waitlist
If you join the waitlist, we store your email address, the language of the page, the time you signed up, the time you confirmed and the version of the consent text. We do not store an IP address.
You first receive an email with a link to confirm your address (double opt-in). Only then are you on the list. If you do not confirm, we delete the address after the link has expired (seven days). We only write to you through the waitlist to tell you that the offer is available.
The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time: with the unsubscribe link in every email or with a message to hello@bundlethemes.com. When you unsubscribe, we delete your address. All that remains is a counter with no connection to you (the day of unsubscribing and whether the address was confirmed).
6. Orders
If you order a pack, we store: your email address, your country, the language of the page, the pack you chose with its price and license, the time of your consent to the terms and to the start of performance together with the version of these texts, the order number, the identifier and status of the payment, the payment method (for example “credit card”), the time of payment, the invoice number and whether the confirmation email was sent. For your download link we store until when it is valid, how often each file was downloaded through it and when last. We do not store an IP address with the order. We do not ask for your name, your postal address or your payment details.
We need this data to conclude and perform the contract with you: to match the payment, to make the download available and to send the confirmation and the invoice (Art. 6 (1) (b) GDPR). Without your email address and country we cannot carry out the order. We also keep the data of paid orders and the invoices because German commercial and tax law requires it (Art. 6 (1) (c) GDPR, § 257 HGB, § 147 AO).
Storage period: orders that are not paid (canceled, failed, expired or never completed) are deleted after 30 days. The data of paid orders is deleted when the statutory retention periods have expired; these currently run for up to ten years.
7. Payment through Mollie
Payments are handled by the payment service provider Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands. After you submit the order we take you to Mollie’s payment page. There you choose the payment method and enter your payment details; we do not get to see them.
We transmit to Mollie the amount, the name of the pack, the order number, the language of the page and the address you return to after payment. We do not transmit your email address. From Mollie we receive the identifier of the payment, its status (for example “paid”) and the payment method.
Mollie processes the payment data as a controller in its own right, including for fraud prevention and to meet legal obligations. How Mollie handles your data is set out in Mollie’s privacy statement (mollie.com/privacy). The legal basis for our transmission is the performance of the contract (Art. 6 (1) (b) GDPR).
8. Emails and contact form
We send the confirmation email of the waitlist and the confirmation email of your order (with download link and invoice) through our own mailbox at the host. If you write us an email, we process your address and the content of your message in order to reply (Art. 6 (1) (b) and (f) GDPR), and delete the message once the matter is settled and no retention duty applies.
If you write to us through the contact form, we process your email address, your message, the language of the page and, if you give it, your order number in order to handle your request and to reply. When you submit the form, this information is sent as an email to our mailbox at the host; it is not stored on this site. To protect the form against abuse we only count how many messages arrive in total within one hour, and for 24 hours we keep an irreversible check value of the form so that the same message is not sent twice. Your IP address, your email address and the content of the message are not part of this. The legal basis is the handling of your request: Art. 6 (1) (b) GDPR where it concerns or prepares an order, otherwise our legitimate interest in answering requests (Art. 6 (1) (f) GDPR). We delete the email once the matter is settled and no retention duty applies.
9. Recipients
Your data is received only by the host (section 3) and, to the extent described in section 7, by Mollie. We do not sell data and do not pass it on for advertising purposes. We ourselves do not transfer data to countries outside the European Union. There is no automated decision-making and no profiling.
10. Your rights
You have the right of access to the data we process about you (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7 (3)).
Where we process data on the basis of a legitimate interest, you can object on grounds relating to your particular situation (Art. 21 GDPR).
To do so, write to hello@bundlethemes.com.
11. Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority at your place of residence or the one responsible for us: Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany.
12. Date
This statement is dated 6 October 2026. If what the site does changes, we will update the statement.