Last updated: October 2025
This Privacy Policy informs users of this website in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws about the nature, scope, and purpose of the collection and use of personal data by the website operator Card4U ([email protected]).
Card4U takes your data protection very seriously and treats your personal data confidentially and in accordance with legal requirements. Please note that data transmission on the internet may have security vulnerabilities. Complete protection against unauthorized access by third parties cannot be guaranteed.
We collect and process the following categories of personal data:
The website operator logs access data and stores it as "server log files". The following data is logged:
The collected data is used for statistical evaluations and website improvements. However, the website operator reserves the right to subsequently review server log files if there are concrete indications of unlawful use.
This website uses cookies—small text files stored on your device. Your browser accesses these files. Cookies enhance the user-friendliness and security of this website.
Most browsers offer the option to prevent cookies from being stored. However, if you disable cookies, you cannot be assured that you will have unrestricted access to all functions of this website.
The website operator collects, uses, and forwards your personal data only if this is permitted by law or you consent to the data collection. Personal data includes all information that can identify your person and can be traced back to you—for example, your name, email address, and phone number.
To place orders through this service, each customer must set up a password-protected customer account. This account provides an overview of orders placed and active order processes. When you leave the online shop, you are automatically logged out.
The operator assumes no liability for password misuse unless caused by the operator itself.
The following personal data is collected and stored during the order process:
Data that is required for delivery or order processing is forwarded to third-party service providers (printing and postal services). Once data storage is no longer required or legally mandated, it will be deleted.
When you contact the website operator through available contact options, your information is stored to process and answer your inquiry. Without your consent, this data will not be shared with third parties.
The website operator offers you a newsletter in which you are informed about current events and offers. To subscribe to the newsletter, you must provide a valid email address. No additional data is collected. The stored data will not be passed on to third parties. You can unsubscribe from the newsletter at any time.
We may share your personal data with the following service providers:
We may also share data when required by law, such as with law enforcement authorities or government agencies.
Important Security Notice: Postcards can be accessed via unique sharing links based on randomly generated tokens. Please note that these links do not require authentication—anyone with the link can view your postcard's content. We recommend not sharing postcard links publicly if they contain sensitive personal information. Only share links with trusted recipients.
We store your personal data for as long as this is necessary to achieve the respective storage purpose. After that, we delete your data unless we are obliged by tax, commercial, or other legal retention or documentation requirements to retain it for longer, or you have consented to further storage of your data.
You have the right to request free information about what personal data is stored about you. If you wish, you can also request correction of incorrect data and blocking or deletion of your personal data—except where this conflicts with legal retention obligations (such as tax record retention).
Under GDPR, you also have the right to:
To exercise any of these rights, please contact us:
Email: [email protected]
Subject Line: "Data Subject Request"
Please provide sufficient information to identify your account. We will respond within 30 days.
We implement technical and organizational security measures to protect your personal data:
Note: While we implement security measures, no internet transmission is completely secure. We cannot guarantee absolute security but take appropriate measures to minimize risks.
We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated to you via email or prominent website notice.
Website Operator:
Card4U
Email: [email protected]
Website: card4u.org
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.