Effective as of: June 1, 2026
Company Name: Name the Pen
Website: www.thatsriver.com
1. Data Controller
The data controller within the meaning of the General Data Protection Regulation is:
Miriam Abel
Sole proprietor, operating under the name “Name the Pen”
Hohenbergringstr. 116
53940 Hellenthal
Germany
Email: contact@thatsriver.com
Effective Date: June 1, 2026
Company Name: Name the Pen
Website: www.thatsriver.com
2. Collection and Purpose of Personal Data
When you visit our website, the hosting provider processes technically necessary data, including, in particular, your IP address, the date and time of access, the pages you visited, your browser type, operating system, and referrer URL. This processing is carried out to make the website available, to ensure technical security and stability, and to analyze errors.
The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and functional provision of our online services.
We process the personal data you provide to us when placing an order, including, in particular, your name, billing and shipping addresses, email address, phone number, order details, and payment information. This processing is carried out for the purposes of fulfilling the contract, processing payments, delivering the goods, issuing invoices, and communicating with customers.
The legal basis is Article 6(1)(b) of the GDPR.
To the extent that we are subject to statutory retention obligations, processing is also based on Article 6(1)(c) of the GDPR.
3. Disclosure of Data to Third Parties
We disclose personal data only to the extent necessary for contract fulfillment, delivery, payment processing, the technical operation of the website, or to comply with legal obligations.
This may include, in particular, the following recipients:
Shipping service providers, in particular DHL, for the delivery of ordered goods;
payment service providers, in particular PayPal, Klarna, iDEAL/Wero, or credit card providers, for payment processing;
the website and online store provider Squarespace, for the technical operation of the website and online store;
tax advisors, government agencies, or other authorities, to the extent that legal obligations apply.
Links to the privacy policies of the payment providers used:
https://www.paypal.com/de/legalhub/paypal/privacy-full
https://www.klarna.com/de/datenschutz/
https://wero-wallet.eu/de/datenschutzcenter
4. Cookies and Tracking
4.1 What are Cookies?
Cookies are small data files that are stored on your computer or mobile device when you visit a website. They are frequently used by website operators to ensure the functionality of their websites, to improve their efficiency, and to provide analytics data.
Cookies set by the website operator are referred to as “first-party cookies.” Cookies set by parties other than the website operator are referred to as “third-party cookies.”
4.2 Why do we use Cookies?
We use first-party and third-party cookies for various reasons. Some cookies are necessary for technical reasons to operate our website; we refer to these as “strictly necessary” cookies. Other cookies allow us to track and target our users’ interests in order to improve their experience on our website. Third parties set cookies through our website for advertising, analytics, and other purposes.
4.3 Categories of Cookies we use
We divide the cookies we use into the following categories:
Strictly Necessary Cookies (always active): These are required for the website’s core functions (e.g., to save items in your shopping cart or to log in to your customer account). You cannot disable these, as our bookstore cannot function without them.
Functional cookies: These allow us to save your settings (such as your preferred language, region, or currency) and offer you improved, personalized features.
Analytics and performance cookies: These cookies collect information about how you use our website, such as which pages you visit and which links you click. We use this data to optimize our store and improve its performance.
Marketing and targeting cookies: These third-party cookies track your browsing habits to show you tailored advertisements and measure the effectiveness of our campaigns.
4.4 Consent and Legal Basis
Under German law (Section 25 TDDDG) and the General Data Protection Regulation (GDPR), we must obtain your explicit consent before we may use cookies that are not strictly necessary (such as analytics or marketing cookies).
Strictly necessary cookies: Processing is based on our legitimate interest in providing a fully functional website (Art. 6(1)(f) GDPR).
Non-essential cookies: These are only set after you have given your explicit consent via our cookie banner (Art. 6(1)(a) GDPR). You can revoke or change your consent at any time via our “Cookie Settings” section.
4.5 Managing Your Cookie Settings
You can change your cookie settings at any time by clicking the “Cookie Settings” button at the bottom of our website.
Alternatively, you can manage or delete cookies through your web browser’s settings. Please note that your ability to use certain features or areas of our online bookstore may be limited if you disable certain cookies.
4.6 Detailed Cookie List
CART | Session / (2 weeks) | Remembers items added to the cart for checkout.
hasCart | Functional / (30 mins) | Updates mini-cart display.
cart_canonical_url | Functional / (3 days) | Remembers the canonical URL for items in an e-commerce cart.
locked | Functional / (Session) | Manages access to password-protected pages.
crumb | Functional / (Session) | Prevents CSRF attacks, ensuring secure transactions.
siteUserCrumb | Functional / (3 years) | Prevents CSRF for logged-in site users.
RecentRedirect | Functional / (30 mins) | Aids in URL redirects and ensures page navigation works smoothly.
ss_cid, ss_cpvisit, ss_cvisit, ss_cvr, ss_cvt | Analytics / (30m - 2y) | Squarespace Analytics: Identifies unique visitors and tracks sessions.
_dd_s | 1st-Party Session / (4 hours) | Used to monitor and record browser errors.
4.7 Contact
If you have any questions about our use of cookies or other technologies, please send us an email at contact@thatsriver.com or contact us by mail at:
Miriam Abel
Sole proprietor, operating under the name “Name the Pen”
Hohenbergringstr. 116
53940 Hellenthal
Germany
5. Retention Period
We store personal data from orders only for as long as is necessary to fulfill the contract. To the extent that commercial or tax law requires retention, we store the relevant documents for the periods prescribed by law, typically six to ten years.
Technical data and server log data are stored only as long as necessary for security, error analysis, and website operation.
Cookie data is stored in accordance with the retention periods specified in the cookie overview.
6. Data Subject Rights
You have the following rights in accordance with the statutory requirements:
• Right to access the stored personal data;
• Right to rectification of inaccurate data;
• Right to erasure;
• Right to restriction of processing;
• Right to data portability;
• Right to object to certain processing activities;
• Right to withdraw consent with future effect.
To exercise your rights, you can contact us at contact@thatsriver.com.
7. Right to File a Complaint with the Data Protection Supervisory Authority
If you believe that the processing of your data violates data protection regulations, you have the right to file a complaint with a supervisory authority. In Germany, the competent authority is the State Commissioner for Data Protection and Freedom of Information (LfDI) of your respective federal state.
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Website: www.ldi.nrw.de