for the website shipping-from-indonesia.com
As of: August 8, 2026
1. Responsible person
Responsible for data processing on this website is:
Shipping from Indonesia
Owner: Silvio Harnos
BSD City, Golden Vienna 2, C2/9
15322 Serpong
Indonesia
Tel.: +49 (0)3581 7921528
WhatsApp/Telegram: +62 87 88 2424 150
Email: info@shipping-from-indonesia.com
2. General information on data processing
We take the protection of your personal data very seriously. Personal data is only processed to the extent necessary to provide a functional website, to process our services (in particular purchasing, shipping, payment and customer service) and to fulfill legal obligations. The processing is carried out on the basis of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), in particular to fulfill legal obligations (e.g. tax retention obligations) in accordance with Art. 6 Para. 1 lit. c GDPR.
3. Access data (server logs)
When you visit our website, the hosting provider automatically collects technically necessary information that your browser transmits:
- Browser type and browser version
- Operating system used
- Referrer URL (previously visited page)
- Host name of the accessing computer
- Date and time of the server request
- IP address (shortened/anonymized, as far as technically possible)
This data is used exclusively to guarantee the Security, system stability and troubleshooting used. is the legal basis Art. 6 Paragraph 1 Letter f GDPR (legitimate interest). The data will be automatically deleted after 30 days at the latest. There is no merging with other data sources.
4. Contact us
If you contact us by email, WhatsApp, Telegram or other messenger, we process the data transmitted (e.g. name, email address, telephone number, message content) exclusively to process and answer your request. is the legal basis Art. 6 Paragraph 1 Letter b GDPR (pre-contractual measures or contract fulfillment) or Art. 6 Paragraph 1 Letter f GDPR (legitimate interest in communication). After complete processing, the messages will be sent at the latest 2 years deleted unless there are legal retention obligations to the contrary.
5. Customer account and order processing
The following data can be processed to process orders and set up a customer account:
- Name
- Billing and delivery address
- Telephone number (for delivery and queries)
- Email address
- Order details and purchase history
is the legal basis Art. 6 Paragraph 1 Letter b GDPR (fulfillment of contract). After termination of the contractual relationship, customer data will be stored for the duration of the statutory limitation periods (usually 3 to 6 years) stored if there are tax or commercial retention obligations (e.g. 8 years in accordance with Section 257 Paragraph 1 No. 4 i. V. m. Paragraph 4 HGB or Section 147 Paragraph 1 No. 4 in conjunction with V. m. Paragraph 3 AO; other tax-relevant documents, if relevant: up to 10 years in accordance with Section 147 Paragraph 3 AO) require longer storage.
6. Disclosure to shipping service providers
In order to deliver the ordered goods, we pass on the necessary shipping data (name, address, telephone number if applicable and email) to the following shipping service providers:
- DHL / Deutsche Post
- FedEx
- UPS
- JNE, J&T, TIKI (Indonesia)
The transfer takes place exclusively for the purpose of Delivery based on Art. 6 Paragraph 1 Letter b GDPR. Please note the respective providers’ own data protection declarations.
7. Payment service providers and payment methods
Depending on the payment method selected, we transmit payment data to process the payment to the following service providers:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
Data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Wise (TransferWise)
Data protection declaration: https://wise.com/de/legal/privacy-policy
When paying by Bank transfer We process the bank details required to receive payment (IBAN, BIC, account holder). This can be an Indonesian account or an EU account. This will not be passed on to third parties unless this is necessary for your credit institution to carry out the payment process.
The legal basis for passing this on to payment service providers is Art. 6 Paragraph 1 Letter b GDPR (fulfillment of contract).
8. Cookies and consent management
Our website uses Cookies and similar technologies. We distinguish between:
- Technically necessary cookies: These are required to provide basic functions of the website (e.g. shopping cart, language selection, login, security). They are according § 25 paragraph 2 TDDDG permitted without consent because they are absolutely necessary for the operation of the website.
- Advertising and marketing cookies and tracking cookies: These are used for the personalized display of advertising, in particular through Google AdSense. They will only be used upon your express request Consent set. is the legal basis § 25 paragraph 1 TDDDG i. V. m. Art. 6 Para. 1 lit. a GDPR.
- Analysis cookies: If used, they serve to statistically evaluate the use of our website. These too will only increase Consent set. is the legal basis Art. 6 Paragraph 1 Letter a GDPR.
When you first visit our website, a Cookie banner / consent management faded in. There you can grant your consent, reject it or adjust it later via a link in the data protection declaration or in the footer. You can deactivate or delete cookies at any time in your browser settings; this may limit the functionality of the website.
9. Google AdSense and other Google services
On this website will Advertising via Google AdSense faded in. Personal data such as your IP address and information about your surfing behavior may be processed in order to show you personalized or non-personalized advertising.
We also bet Google Tag Manager provided you have enabled this via the cookie banner. Google Tag Manager is used to manage and control integrated tags. Data processing may take place via the tags integrated via the Tag Manager.
The provider is the Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA). Information about data processing by Google can be found in Google’s privacy policy: https://policies.google.com/privacy and in the AdSense notes: https://policies.google.com/technologies/ads.
The legal basis for using these services is yours Consent in accordance with Article 6 Paragraph 1 Letter a GDPR, provided personal data is processed. You can revoke your consent at any time via the cookie banner.
10. Third country transfer
Your personal data may be transferred to countries outside the European Economic Area (EEA):
- Indonesia: Our company headquarters and parts of order processing are located in Indonesia. The transmission takes place to fulfill the contract and on the basis of Art. 6 Paragraph 1 Letter b GDPR.
- USA (Google): When using Google AdSense or other Google services, data may be transferred to the USA. Google relies on standard contractual clauses (SCC) and, if necessary, additional technical and organizational measures to protect your data.
- Luxembourg/EU (PayPal): PayPal processes data primarily within the EU. Data may be transferred to third countries (e.g. USA) as part of group processing, provided this is necessary for payment processing.
- UK/EU (Wise): Wise processes data in the EEA and UK. Here too, data may be passed on to third countries as part of the provision of services.
When transferring data to third countries, we provide appropriate guarantees (in particular EU standard contractual clauses in accordance with Art. 46 GDPR) or due to adequacy decisions the European Commission (Art. 45 GDPR) ensures the protection of your data.
11. Storage period
Personal data is only stored for as long as is necessary for the respective processing purposes. The specific deadlines are:
- Server logs: 30 days
- Email and Messenger Inquiries: 2 years after processing
- Customer data after the end of the contract: 3 to 6 years depending on the statute of limitations
- Booking documents and invoices: 8 years in accordance with Section 257 Paragraph 1 No. 4 i. V. m. Paragraph 4 HGB or Section 147 Paragraph 1 No. 4 in conjunction with V. m. Paragraph 3 AO; Other tax-relevant documents (if relevant): up to 10 years in accordance with Section 147 Paragraph 3 AO; Business correspondence (if relevant): 6 years in accordance with Section 257 Paragraph 1 No. 2 and 3 HGB
- Advertising and tracking data: until revoked your consent
As soon as the purpose of storage no longer applies and there are no legal retention periods to the contrary, the data will be deleted or anonymized.
12. Rights of data subjects
You have the following rights under the GDPR:
- Right to Information about the data stored about you (Article 15 GDPR)
- Right to Correction incorrect or incomplete data (Art. 16 GDPR)
- Right to Deletion (“Right to be forgotten”) (Art. 17 GDPR)
- Right to Limitation processing (Article 18 GDPR)
- Right to Data portability (Article 20 GDPR)
- Right to contradiction against processing (Art. 21 GDPR)
- Right to Revocation of consent with effect for the future (Art. 7 Para. 3 GDPR)
To exercise your rights, please contact us by email info@shipping-from-indonesia.com or by post to the address specified in Section 1.
You also have the right to request one at any time Complaint to a supervisory authority in particular in the Member State of your habitual residence, your place of work or the place of the alleged violation (Art. 77 GDPR).
13. Revocation of consent
You can revoke the consent you have given us (e.g. for cookies, Google AdSense or other marketing tools) at any time with future effect. The revocation does not affect the lawfulness of the processing carried out up to the revocation. To do this, please use the cookie banner on our website or write to us info@shipping-from-indonesia.com.
14. Changes to this Privacy Policy
We reserve the right to update this data protection declaration if necessary, in particular in the event of changes to the legal framework or our service offerings. The current version can be found at /data protection declaration/.