Privacy Policy

Last updated: February 18, 2026

This Privacy Policy explains how The Good Shit Land GmbH (“we”, “us”, “our”) collects and processes personal data when you visit www.goodshit.land (the “Website”).

1. Controller

The controller responsible for data processing under the GDPR is:
The Good Shit Land GmbH
Pfarrgasse 7, 61137 Schöneck, Germany
Email: welcome(at)goodshit.land
Phone: +49 172 6561742

2. What data we process when you use our Website

a) Server log data

When you access the Website, technical information is processed automatically (e.g., IP address, date/time of access, requested page, browser type, operating system, referrer URL). This data is necessary to deliver the Website and to ensure its stability and security.

Legal basis: Art. 6(1)(f) GDPR (legitimate interests in operating a secure and functional website).

b) Contact via email or phone

If you contact us via email or phone, we process the data you provide (e.g., name, email address, phone number, message content) to respond to your request.

Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and/or Art. 6(1)(f) GDPR (legitimate interest in communication).

3. Cookies and similar technologies

We use cookies and similar technologies to operate the Website and, if you consent, to analyze usage.

  • Essential cookies are required for the Website to function and cannot be switched off.

  • Analytics cookies help us understand how visitors use the Website (e.g., traffic sources, engagement, interactions). We only use analytics cookies after you give consent via the cookie banner.

Legal basis:

  • Essential cookies: Art. 6(1)(f) GDPR (legitimate interests) and, where applicable, §25(2) TTDSG (Germany).

  • Analytics cookies: Art. 6(1)(a) GDPR (consent) and §25(1) TTDSG (Germany).

You can change or withdraw your consent at any time via the cookie settings/banner.

4. Website hosting and website platform (Squarespace)

Our Website is built and hosted using Squarespace. Squarespace processes personal data on our behalf to provide hosting and website functionality and may provide us with website analytics.

Legal basis: Art. 6(1)(f) GDPR (operation and security of the Website) and Art. 6(1)(a) GDPR where analytics requires consent.

Squarespace may process data in countries outside the EU/EEA. Where applicable, transfers are safeguarded using appropriate mechanisms (e.g., EU Standard Contractual Clauses).

5. External links to social networks

Our Website contains links to external social networks (e.g., Instagram and LinkedIn). When you click such a link, you will be redirected to the respective platform. From that point on, the provider processes your data under its own responsibility. We have no influence on the data processing by these providers.

6. Recipients of data

We may share personal data with:

  • service providers that support Website hosting and operations (e.g., Squarespace),

  • authorities or legal advisors where required by law or to enforce rights.

We do not sell personal data.

7. Data retention

We retain personal data only as long as necessary for the purposes described above or as required by law.

  • Server log data is typically retained for a limited period for security and troubleshooting.

  • Communication data is retained as long as needed to handle your request and for documentation and legal retention obligations.

8. Your rights under the GDPR

You have the right to:

  • access (Art. 15 GDPR),

  • rectification (Art. 16 GDPR),

  • erasure (Art. 17 GDPR),

  • restriction of processing (Art. 18 GDPR),

  • data portability (Art. 20 GDPR),

  • object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR),

  • withdraw consent at any time (Art. 7(3) GDPR), without affecting the lawfulness of processing before withdrawal.

To exercise your rights, contact us at felix(at)goodshit.land

9. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement (Art. 77 GDPR).

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is published on this page.