I. Introduction

At Fred's Lab, we take your privacy seriously. We comply fully with the European General Data Protection Regulation (GDPR) and are committed to protecting the personal data of our customers and visitors.

This website is designed with privacy in mind: it does not rely on third-party frameworks or content delivery networks, and we do not track visitor activity or collect profiling data such as browser type, operating system, or browsing history. No cookies or analytics tools are used, except those required by PayPal for payment processing. If a visitor rejects PayPal cookies, the online shop (Boutique) will be disabled and cannot be used.

We collect personal data only when you voluntarily provide it-for example, when making a purchase, registering on the forum, requesting support, or subscribing to our mailing list. We do not perform automated decision-making or profiling on any personal data.

II. Data Controller

The entity responsible for collecting and managing personal data is:

Fred's Lab is the data controller and is responsible for the lawful handling and protection of your personal data.

III. Data We Collect

a) Online Store ("Boutique")

When you purchase products through the Fred's Lab Boutique (instruments, sound sets, preset banks, accessories), we collect the following data:

• Name
• Billing and delivery address
• Email address
• Telephone number (optional)
• Order details and tax information
• European VAT ID (optional)
• PayPal account name or bank account IBAN (only if required for payment processing)

This data is used exclusively to process orders, issue invoices, and comply with accounting obligations. The legal basis for this processing is the performance of the sale and delivery process. Paper and digital copies of invoices are securely archived for 10 years as required by German law.

Third parties involved in order fulfillment (only as necessary):

• Payment processors (e.g., PayPal)
• Shipping providers: DHL International, DHL Germany, Deutsche Post, and their subcontractors (for delivery purposes)

Session storage: The Boutique uses browser session storage to remember your shopping basket contents and to store an affiliate link ID when applicable. This data remains in your browser and is not transmitted to Fred's Lab unless you submit an order.

b) Forum

To create and manage forum accounts we collect:

• Pseudonym (chosen username)
• Email address

Forum data is used only for account management and is not shared with third parties.

c) Technical Support

When you submit a support request you may provide text, images, or files. Please note that images and files may contain embedded metadata (such as EXIF or XMP data), which can include personal information such as device details or location data. Customers should remove or deactivate such metadata, especially location services, before uploading files.

To use the support platform, you create a profile with a name, email, and password.

• Support data is used solely to manage and document support requests.
• Support content and contact details are not shared with third parties.

d) Mailing List

If you subscribe to our mailing list we only collect your email address to send product news, updates, and offers. Mailing list data is never shared with third parties and you may unsubscribe at any time via the link in each email.

IV. Third Party Services

The website integrates the following third-party service for payment processing:

• PayPal - for secure online payments.
  See PayPal's privacy policy: PayPal Privacy Policy

No other third-party embeds are used on the site.

V. How We Use & Store Data

• Customer and order data are archived securely (digital and paper) for 10 years to satisfy accounting obligations, after which they are destroyed.
• Personal data is never sold. We only share data with third parties when strictly necessary for payment, shipping, or to comply with a lawful request.
• If required by law, Fred's Lab may disclose personal data to public authorities, but only after verifying the legitimacy and legality of such requests.

VI. Your Rights Under GDPR

Under Regulation (EU) 2016/679 (GDPR), you have the following rights:

• Access – request a copy of your personal data.
• Correction – request updates or corrections to your data.
• Deletion – request erasure of your data where legally permissible.
• Restriction / Objection – limit or object to certain processing activities.
• Withdrawal of Consent – unsubscribe from mailing lists or revoke consent previously given.
• Complaint – lodge a complaint with a supervisory authority in accordance with Article 77 GDPR if you believe your data is being processed unlawfully.

To exercise these rights, contact us with proof of identity: valid ID, driving licence, or passport copy.

VII. Contact & Support

To exercise your rights or for privacy questions, contact:

Contact and support form submissions are sent by encrypted email to support@fredslab.net. Please do not send sensitive information (bank details, passwords) via these forms.

VIII. Updates to This Policy

Fred's Lab may update this policy to reflect legal or operational changes. Changes will be published on this page with an updated version number and date.