Privacy Policy

1. Controller and supervisory authority

The controller responsible for processing your data on this website and for orders is:

Venture Base GmbH
Schwedter Str. 41
10435 Berlin
Germany
Phone: +49 30 400 534 82
Email: info@starling.global
Represented by the managing director Christian Michaelis.

We are not required to appoint a data protection officer. If you have questions about data protection, please write to info@starling.global.

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany, www.datenschutz-berlin.de. If you live in the United Kingdom, you can also contact the Information Commissioner's Office (ico.org.uk).

2. Hosting and server log files

Our website is hosted in Germany by Mittwald CM Service GmbH & Co. KG, Königsberger Str. 4–6, 32339 Espelkamp, Germany. Mittwald processes the data on our behalf.

When you visit the website, the server automatically stores: IP address, date and time, the page requested, referrer URL, browser type and version, and operating system. This is necessary to provide the website securely and reliably and to detect attacks. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). The log files are deleted automatically after a short time unless they are needed to investigate a security incident.

For program libraries we use the content delivery networks jsDelivr and Google Hosted Libraries. Your IP address is transmitted to the respective provider (Art. 6(1)(f) GDPR).

3. Cookies

We set technically necessary cookies (e.g. shopping cart, session, storing your cookie choice) without consent (Art. 6(1)(b) and (f) GDPR; § 25(2) of the German Telecommunications Digital Services Data Protection Act, TDDDG).

In addition, the analytics and advertising services listed in section 8 set cookies and similar identifiers. Section 8 explains how you can object. You can also set your browser to reject cookies or delete them when it closes; some shop functions may then not work.

4. Orders in our shop

To process your order we use your name, billing and delivery address, email address, phone number if provided, the products ordered, your personalisation details (e.g. star name, date, dedication) and payment information. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR); for invoices, our statutory retention obligation (Art. 6(1)(c) GDPR).

Shipping: We pass your name and delivery address to the shipping company (Deutsche Post AG or DHL Paket GmbH). We only pass on your email address if you have agreed to receive shipping notifications. Digital products are sent by email.

Payment: Depending on the payment method you choose, we transmit the necessary order and payment data to the payment service. Some of these services process the data under their own responsibility, for example for fraud prevention. Which payment methods are available depends on the shop and your country; you will see them at checkout.

Payment methodProviderPrivacy information
Credit card and other card paymentsStripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Irelandstripe.com/privacy
PayPalPayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourgpaypal.com
KlarnaKlarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Swedenklarna.com
Amazon PayAmazon Payments Europe S.C.A., 38 Avenue John F. Kennedy, L-1855 Luxembourgpay.amazon.eu

5. Orders via Amazon

If you buy our products on Amazon, Amazon is responsible for processing on its marketplace and Amazon's privacy notice applies. Amazon sends us the data we need to fulfil your order: name, delivery address, the order and your personalisation details.

We transfer this data into our shop system to personalise the product, ship it and issue the invoice (Art. 6(1)(b) and (c) GDPR). We send messages about your order through Amazon's messaging service. We do not use Amazon data for advertising and only pass it on to the shipping company and to our accountants and tax advisers.

6. Star register

Your star is entered permanently in our star register with the star name, chosen date, dedication text, a 12-character registration number and public astronomical data. This is part of the service you purchased (Art. 6(1)(b) GDPR).

The entry contains neither your contact details nor your order number. It can only be retrieved with the registration number. If the star name or dedication contains a person's name, you can ask us at any time to delete or change the entry.

7. Contact and customer service

If you contact us by email, phone or contact form, we process your details to handle your enquiry (Art. 6(1)(b) GDPR if it relates to an order, otherwise Art. 6(1)(f) GDPR).

Our mailbox and the shop's email delivery run on Google Workspace, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the data on our behalf. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework.

8. Analytics and advertising

We use the following services to understand how the website is used, to improve it and to measure the success of our advertising. They are loaded when you visit the website and set cookies or similar identifiers. The legal basis is our legitimate interest in analysing and optimising our offer and our advertising (Art. 6(1)(f) GDPR). The providers may transfer data to the USA; their US parent companies are certified under the EU-US Data Privacy Framework.

You can object by blocking or deleting cookies in your browser, installing the Google Analytics opt-out browser add-on, turning off personalised ads in your Google settings and at Microsoft, or by writing to us at info@starling.global.

ServiceProviderPurposePrivacy information
Google Tag ManagerGoogle Ireland Limited, DublinLoading the analytics and advertising tagspolicies.google.com/privacy
Google Analytics 4Google Ireland Limited, DublinAudience measurement and usage analysis; IP addresses are truncated in the EUpolicies.google.com/privacy
Google Ads (conversion tracking, remarketing)Google Ireland Limited, DublinMeasuring and serving adspolicies.google.com/technologies/ads
Microsoft ClarityMicrosoft Ireland Operations Ltd., DublinAnalysis of clicks and scrolling (heatmaps, session recordings without input fields)privacy.microsoft.com
Microsoft Advertising (UET)Microsoft Ireland Operations Ltd., DublinConversion measurement for Bing adsprivacy.microsoft.com

9. Newsletter

If you subscribe to our newsletter, we process your email address with your consent (Art. 6(1)(a) GDPR) to send you information and offers about our products. You can unsubscribe at any time using the link in every newsletter or by email to info@starling.global. Your data will then be deleted.

The newsletter is sent through our shop system and our Google Workspace email account (see sections 2 and 7).

10. Retention periods

We only keep your data for as long as necessary for the respective purpose or as required by law.

DataRetention period
Invoices and accounting records8 years (German tax and commercial law, § 147 AO, § 257 HGB)
Order datauntil the retention period of the related invoice expires
Business emails6 years (§ 257 HGB)
Star register entrypermanently, without contact details
Newsletter datauntil you unsubscribe
Analytics and advertising cookiesdepending on the service, at most 2 years

The periods begin at the end of the calendar year in which the order was completed.

11. Your rights

You have the right at any time to:

  • access the data we hold about you (Art. 15 GDPR)
  • have incorrect data corrected (Art. 16 GDPR)
  • have your data erased, unless we are required to keep it (Art. 17 GDPR)
  • restrict processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on legitimate interests (Art. 21 GDPR)
  • withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR)
  • lodge a complaint with a supervisory authority (Art. 77 GDPR), see section 1

An email to info@starling.global is sufficient.

Last updated: October 2026