Privacy Policy – K & K Badger

‌Effective Date: October 15, 2026‌

1. Introduction

Welcome to www.kkbadger.com (hereinafter referred to as “the Website”), operated by K & K Badger Services UG. We are a Germany-based travel essentials brand dedicated to delivering compact, lightweight, and thoughtfully designed travel gear that makes every trip simpler and more enjoyable. At K & K Badger, we prioritize the protection of your personal data and are fully committed to complying with all applicable data protection regulations, including the EU General Data Protection Regulation (GDPR, known in German as DSGVO), the German Federal Data Protection Act (BDSG), and the Telecommunications, Digital Services and Data Protection Act (TDDDG). This Privacy Policy is designed to clearly inform you about how we collect, process, store, and protect your personal information when you use our Website, browse our travel product offerings, place orders, or interact with our services.

When you access our Website, shop for our collapsible water cups, travel packing cubes, toiletry pouches and other travel essentials, or submit any personal information to us, you agree to the practices described in this document. We have structured this policy to be transparent and easy to understand, so that you can make fully informed decisions about your personal data when engaging with our e-commerce platform.

2. Data Controller Information

For all purposes related to personal data protection under applicable laws, the data controller responsible for your information is:
‌K & K Badger Services UG‌
Address: Schlehenweg 7, 15326 Lebus, Germany
Contact Email: luvyr@kkbadger.com
Contact Telephone: +49 521 94978333

If you have any questions, concerns, or requests regarding your personal data and our processing activities, you can reach out to us at any time using the contact details provided above.

3. Types of Personal Data We Collect

We only collect personal data that is necessary for the specified, explicit, and legitimate purposes outlined in this policy. The categories of personal information we may process include:

‌Information you voluntarily provide to us‌: When you create an account on our Website, place an order for travel essentials, sign up for our newsletter, contact our customer support team, or submit feedback, we may collect your full name, billing and shipping address, email address, contact phone number, payment-related information, and any other details you choose to share with us.
‌Automatically collected information‌: When you visit and browse our Website, we automatically collect certain technical data to ensure the stable operation of our platform, including your IP address, browser type and version, device type and operating system, time of access, pages viewed on our Website, referral URLs, and other anonymous usage statistics. This data helps us optimize our website performance, troubleshoot technical issues, and improve your overall shopping experience.
‌Transaction and usage data‌: We may collect records of your purchase history with us, order details, product preferences, shipping status updates, and your interaction with our customer service communications, all for the purpose of fulfilling our contractual obligations to you and maintaining accurate order records.

All the data we collect is limited to what is strictly required for our stated operational purposes, in full compliance with the data minimization principle set out in the GDPR.

4. Legal Bases for Data Processing

All our processing activities of your personal data are based on one or more valid legal grounds as defined under Article 6 of the GDPR:

‌Processing based on your explicit consent (Article 6(1)(a) GDPR)‌: For activities that require your prior opt-in agreement, such as sending you our subscribed newsletter with new product announcements and travel tips, conducting non-essential user behavior tracking to improve our product recommendations, or sharing your information with third-party marketing partners, we will always collect your explicit, freely given, specific, and revocable consent first. You have the full right to withdraw your consent at any time, which will not affect the lawfulness of processing carried out before the withdrawal.
‌Processing necessary for the performance of a contract (Article 6(1)(b) GDPR)‌: When you place an order on our Website, we process your name, delivery address, payment details, and contact information exclusively to fulfill our contract with you: to process your payment, arrange the shipping of your selected travel essentials, handle order-related communications, and resolve any issues related to your purchase. This processing is essential for us to deliver the products you have ordered from our store.
‌Processing based on legitimate interests (Article 6(1)(f) GDPR)‌: We may process your IP address and basic device information for the legitimate interest of ensuring the security of our Website, preventing unauthorized access, fraud detection, and maintaining the stable operation of our e-commerce platform, as well as for internal statistical analysis to understand how users interact with our site and improve our product and service offerings. We always balance our legitimate interests against your data protection rights, and will never process your data in ways that override your fundamental privacy rights.

5. Cookie and Tracking Technologies Compliance

Our use of cookies and other tracking technologies strictly complies with the requirements of the TDDDG:

‌Technically necessary cookies‌: These cookies are essential for our Website to function properly, enabling basic features such as page navigation, access to secure areas of the site, and the maintenance of your shopping cart as you browse our travel gear collection. These strictly necessary cookies do not require your explicit consent, as they are processed based on our legitimate interest and the need to perform our contract with you, in accordance with Section 25(2)(2) of the TDDDG.
‌Non-essential cookies‌: All other cookies, including those used for website analytics, personalized advertising, and social media integration, will only be activated after you provide your explicit, unambiguous consent through our consent management platform. We strictly prohibit the use of pre-ticked checkboxes, and will not assume your consent through actions such as scrolling or continued browsing of our site. The “Reject All” option on our cookie consent banner will be as prominent and easily accessible as the “Accept All” option, to ensure you have full control over your preferences.
You can adjust your cookie settings at any time by accessing the cookie management tool available on our Website footer, and modify or withdraw your previous consent whenever you wish.

6. How We Use Your Personal Data

We only process your personal data for the clear, lawful purposes we have disclosed to you, including:

Processing, confirming, and fulfilling your orders for our travel essentials, including arranging logistics delivery, handling payment processing, and managing returns and refunds when necessary.
Sending you order status updates, shipping notifications, and responding to your customer service inquiries, to ensure you receive timely information about your purchase.
Sending you requested newsletters, promotional updates for new travel product launches, and exclusive offers only if you have explicitly opted in to receive such communications.
Continuously improving our Website functionality, product offerings, and user shopping experience, through aggregated, anonymized analysis of user browsing behavior that does not identify any individual user.
Complying with our legal obligations under applicable tax regulations, commercial laws, and data protection requirements that apply to our operations as a Germany-based e-commerce business.
Protecting our Website, our users, and our business from fraud, unauthorized access, data breaches, and other illegal activities.

We will never use your personal data for any purposes that are incompatible with the purposes we outlined in this Privacy Policy, without providing you with new relevant information and obtaining your separate consent where required by law.

7. Data Storage and Security Measures

In line with Article 32 of the GDPR, we implement strict technical and organizational measures to safeguard your personal data against unauthorized access, alteration, disclosure, destruction, or accidental loss:

All personal data transmitted between your browser and our Website is encrypted via HTTPS protocol, to prevent interception during transmission.
We adopt anonymization and encryption technologies for stored personal data where appropriate, to reduce privacy risks.
Our internal staff with access to personal data are bound by strict confidentiality agreements, and only authorized personnel who need to process your data for the purposes of order fulfillment or technical maintenance are granted access to your information.
We conduct regular security audits and updates to our website systems and server infrastructure, to address potential vulnerabilities and ensure ongoing data security.

We will only retain your personal data for as long as it is strictly necessary to achieve the purposes for which it was collected. For order-related data, we store it for the full duration required by German commercial and tax laws, which may extend up to 10 years as required by applicable regulatory obligations. For data processed based on your consent, we will retain it until you choose to withdraw that consent and request deletion. Once the relevant retention period expires or the purpose for processing no longer exists, we will securely delete or anonymize your personal data in compliance with legal requirements.

8. Third-Party Data Processors and Data Transfers

In the course of operating our e-commerce platform, we may share your necessary personal data with carefully selected third-party service providers who act as data processors on our behalf, including:

Cloud hosting service providers that store our website and order data
Payment service providers that process your payment transactions securely
Logistics and shipping partners that deliver your ordered travel products to your designated address
IT maintenance and website optimization service providers that help us maintain the normal operation of our Website

In full compliance with Article 28 of the GDPR, we have signed formal Data Processing Agreements (Auftragsverarbeitungsvertrag) with all our third-party data processors, which explicitly bind them to comply with all applicable data protection requirements, implement equivalent security measures to protect your personal data, and never process your data for any purposes other than the instructions we explicitly issue.

In the event that any personal data we collect needs to be transferred to countries or regions outside the European Economic Area (EEA), we will ensure that the destination jurisdiction provides an adequate level of data protection as recognized by the European Commission. For transfers to territories without an adequacy decision, we will implement appropriate and legally valid safeguards, such as adopting the Standard Contractual Clauses approved by the European Commission, to guarantee that your personal data receives the same level of protection as required under GDPR. If you wish to obtain a copy of these relevant safeguard documents, you can contact us using the contact information provided in Section 2 of this policy. We do not arbitrarily embed third-party statistical or analysis tools that trigger unauthorized cross-border data transmission without ensuring that appropriate data protection measures are in place.

9. Your Data Subject Rights

Under applicable German and European data protection laws, you are entitled to a comprehensive set of rights regarding your personal data. You can exercise these rights at any time free of charge, by submitting a request to us via the contact details we have provided:

‌Right of Access‌: You have the right to request a copy of all personal data we hold about you, as well as detailed information about how we process that data, the recipients we share it with, and the expected storage duration.
‌Right to Rectification‌: If you find that any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update that information without undue delay.
‌Right to Erasure‌: You have the right to request the deletion of your personal data, under circumstances including when the data is no longer necessary for the original purposes for which it was collected, when you withdraw your consent to the processing, or when the processing is otherwise unlawful. We will comply with your request unless we are legally obligated to retain certain data for regulatory or legal compliance purposes.
‌Right to Restriction of Processing‌: You have the right to request that we restrict the processing of your personal data in scenarios such as when you contest the accuracy of the data, when the processing is unlawful, or when we no longer need the data but you require it for the establishment, exercise, or defense of legal claims.
‌Right to Data Portability‌: For personal data that you have provided to us based on your consent or for the performance of a contract, you have the right to receive that data in a structured, commonly used, machine-readable format, or to request that we transmit it directly to another data controller where technically feasible.
‌Right to Object‌: You have the right to object to processing of your personal data that is based on our legitimate interests, at any time, on grounds relating to your particular situation. If you object to processing for direct marketing purposes, we will immediately cease all such processing of your personal data.
‌Right to Withdraw Consent‌: You can withdraw any consent you previously provided to us for specific processing activities at any time. The withdrawal of consent will not affect the lawfulness of any processing that we carried out before your withdrawal.
‌Right to Lodge a Complaint‌: If you believe that our processing of your personal data violates applicable data protection laws, you have the right to submit a complaint to the competent German data protection authority at any time.

When you submit a request to exercise your rights, we will respond to you within one month, as required by GDPR. If your request is particularly complex or you have submitted multiple parallel requests, we may extend the response period by up to two months, and we will inform you of this extension and the relevant reasons within one month of receiving your request.

10. Updates to This Privacy Policy

We may occasionally update and revise this Privacy Policy to reflect changes in our business operations, new legal and regulatory requirements, or updates to the features and functions of our e-commerce Website. Any revisions will be posted on this page, with the updated effective date clearly marked at the top of the policy. For changes that have a material impact on your privacy rights or the way we process your personal data, we will take appropriate additional measures to notify you, such as publishing a prominent notice on our Website homepage or sending you an email notification to ensure you have sufficient time to review the updated terms.

We encourage you to review this Privacy Policy periodically whenever you visit our Website, to stay informed about how we are protecting your personal data.

11. Contact Information

If you have any questions, comments, or concerns about this Privacy Policy, or any matters related to our processing of your personal data, please do not hesitate to contact us at:
K & K Badger Services UG
Address: Schlehenweg 7, 15326 Lebus, Germany
Email: luvyr@kkbadger.com
Telephone: +49 521 94978333