1. Data protection at a glance

The protection of your personal data is very important to us. Below, we provide information about what data is processed when you use our website and for what purposes.

Personal data is any data that can be used to identify you personally.

 

2. Responsible party

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

 

Bricks And Stories GmbH

Herzog-Rudolf-Straße 9

80539 Munich

Germany

 

Telephone: 0172-6001813

Email: hello@bricksandstories.com

 

3. Hosting

Our website is hosted by the following provider:

​

STRATO AG

Otto-Ostrowski-Straße 7

10249 Berlin

Germany

 

When you visit our website, STRATO processes personal data on our behalf that is generated during the use of this website (e.g. IP address in server log files). Processing is carried out on the basis of Art. 6 (1) lit. f GDPR (legitimate interest in the secure and stable operation of the website).

A contract for order processing has been concluded with STRATO in accordance with Art. 28 GDPR.

 

4. Access data / server log files

When you visit our website, the hosting provider automatically collects and stores information in so-called server log files. This information may include, in particular:

→ IP address (in abbreviated form, if applicable)

→ Date and time of the request

→ Page/file accessed

→ Amount of data transferred

→ Browser type and browser version

→ Operating system

→ Referrer URL

→ Host name of the accessing computer

This data is processed to ensure the smooth operation of the website, to improve our offering and to prevent misuse (e.g. attacks on the server infrastructure).

The legal basis is Art. 6 (1) lit. f GDPR.

 

5. Contacting us by e-mail

If you contact us by e-mail, the personal data you provide (e.g. name, e-mail address, content of the message) will be processed in order to process your enquiry.

Depending on the content of the enquiry, processing is based on:

* Art. 6 (1) (b) GDPR (contract/pre-contractual measures), or

* Art. 6 (1) (f) GDPR (legitimate interest in processing enquiries)

We only store the data for as long as is necessary to process your enquiry or as required by statutory retention obligations.

 

6. Cookies 

Our website does not use cookies for analysis, tracking or marketing purposes.

However, it may be technically necessary for our hosting provider or integrated services (e.g. map function) to set cookies that are necessary for operation and display.

The legal basis for technically necessary cookies is Art. 6 (1) lit. f GDPR (legitimate interest in a functional website) and § 25 (2) TTDSG (where applicable).

 

7. SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the fact that the address line of the browser begins with ‘https://’.

 

8. Storage period

Unless a more specific storage period is specified in this privacy policy, we only process and store personal data for as long as is necessary to achieve the respective purpose.

The data is then deleted, provided that there are no legal retention obligations to the contrary.

 

9. Your rights as a data subject

You have the right at any time:

→ to information in accordance with Art. 15 GDPR

→ to rectification in accordance with Art. 16 GDPR

→ to erasure in accordance with Art. 17 GDPR

→ to restriction of processing pursuant to Art. 18 GDPR

→ to data portability pursuant to Art. 20 GDPR

→ to object to processing pursuant to Art. 21 GDPR

If you have given your consent, you can revoke it at any time with effect for the future (Art. 7(3) GDPR).

 

10. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.

The authority responsible for companies based in Munich is usually:

​

Bavarian State Office for Data Protection Supervision (BayLDA)

Promenade 18

91522 Ansbach

Germany

 

11. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy.

 

Status: 02/2026