Skip to content
Drop 01 is live · Free shipping from €60

Privacy policy

Last updated: 12 November 2026

1. Controller

LORENZ & ROTSCH GbR
Sandheide 28
21714 Hammah
Germany
Email: [email protected]

Partners: Enzo Lorenz, Richard Rotsch. This policy applies to our websites Pocketwall (pocketwall.de), Unbillionaired (unbillionaired.de), Overdressd (overdressd.de) and ONEPROMPT (onepromptclub.de) and to the checkout on plaingoods.de.

2. Website hosting

Our websites are delivered via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary data such as IP address, date and time, the page requested, browser and operating system in order to deliver the pages and protect them against attacks. The legal basis is our legitimate interest in a secure and fast service (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; we have also concluded a data processing agreement with standard contractual clauses.

We load fonts from our own server. No connection to Google Fonts is made.

3. Shop, cart and checkout

Product data, cart and checkout run on Shopify (Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). When you add something to the cart, we store a cart identifier in your browser (local storage) so your cart is kept. At checkout we process your order data (name, address, email, phone number if provided, products ordered, payment information) to perform the contract (Art. 6(1)(b) GDPR). Shopify processes the data on our behalf; transfers to third countries, in particular the USA and Canada, are possible and safeguarded by standard contractual clauses or adequacy decisions. On the checkout page, Shopify sets its own technically necessary cookies.

4. Payment

Depending on the payment method you choose, we pass the data required for payment to the respective payment service provider (Art. 6(1)(b) GDPR):

  • Shopify Payments (credit card, Apple Pay, Google Pay and others), processed by Shopify International Limited and Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland
  • PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

Payment service providers may act as independent controllers for fraud prevention and credit checks. Their privacy notices also apply.

5. Production and shipping

For the production and shipping of our clothing, we work with a service provider based in China. For this purpose we transfer your name, delivery address, email and phone number if provided, and the products ordered (Art. 6(1)(b) GDPR). The service provider passes your name and address to the carrier so that the parcel can be delivered.

This involves transferring your data to a country outside the EU (China) for which there is no adequacy decision by the European Commission. The level of data protection there does not correspond to that of the EU; among other things, authorities may be able to access data without effective legal remedies being available to you. The transfer is necessary for the performance of your purchase contract because the goods are shipped to you from there (Art. 49(1)(b) GDPR). We only transfer the data required for production and shipping.

6. Digital downloads

For wallpaper sets, we provide you with a personal download link via Shopify and send it to your email address (Art. 6(1)(b) GDPR). We store your consent to the early start of performance with the order so that we can prove it (Art. 6(1)(c) GDPR).

7. Withdrawal function and contact

If you use the “Cancel your contract” function, we process your details (name, email, order number, message) to handle the withdrawal and send you an acknowledgement of receipt (Art. 6(1)(c) GDPR). We send these emails via Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany). If you email us, we process your details to answer your request (Art. 6(1)(b) or (f) GDPR).

8. Cookies and TikTok pixel

Without your consent, we only use technically necessary storage (cart, your cookie choice; § 25(2) TDDDG). Only if you consent in the cookie banner do we load the TikTok pixel (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland). It measures which TikTok videos and ads lead to visits and purchases and processes, among other things, IP address, device information, pages visited and purchase events. Data may be transferred to TikTok group companies outside the EU; TikTok relies on standard contractual clauses for this. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time via “Cookie settings” in the website footer.

9. Storage period

We delete personal data as soon as it is no longer required for the respective purpose. We keep order and invoice data for up to 10 years due to commercial and tax law obligations (§ 147 AO, § 257 HGB).

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent you have given at any time with effect for the future. Just write to us at [email protected].

You can also lodge a complaint with a data protection supervisory authority, for example the authority responsible for us, the Lower Saxony State Commissioner for Data Protection (Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.

11. Obligation to provide data, automated decisions

For an order, we need the details marked as required at checkout. Without them we cannot conclude the contract. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.