Privacy Policy

Privacy Policy

Thank you for your interest in our online shop. The protection of your personal data is important to us. Below, we inform you, in accordance with Art. 13, 14 DSGVO, about the processing of your personal data when you use our shop.

1. Data Controller

A company data protection officer is not required by law and has not been appointed. If you have any questions about data protection, please contact us directly using the address above.

2. Processing When You Visit the Shop (Server Log Files / Hosting)

Our shop is operated on the technical infrastructure of Shopify International Limited, 2 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (with group affiliates Shopify Inc., Canada, and Shopify (USA) Inc.). When you visit the shop, Shopify automatically collects technical access data (IP address, date/time, page requested, referrer URL, browser and operating system used) in order to provide the shop, ensure its stability and security, and prevent misuse. The legal basis is Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in a functional and secure operation). We have entered into a data processing agreement with Shopify. To the extent data is transferred to the USA in this context, Shopify states that it relies on the EU-US Data Privacy Framework or, alternatively, on the EU Standard Contractual Clauses as appropriate safeguards within the meaning of Art. 46 DSGVO. Further information: shopify.com/legal/privacy.

3. Contract Processing, Customer Account, Contact

When you place an order with us, we process the data required to perform the contract (name, address, email address, telephone number, order and payment details) in order to process your order, respond to queries, and administer your statutory warranty and withdrawal rights. The legal basis is Art. 6 Abs. 1 lit. b DSGVO (performance of a contract or pre-contractual measures). If you create a customer account, we process the data you provide to manage that account on the same legal basis. If you contact us by email, telephone or the contact form, we process the data provided to deal with your enquiry (Art. 6 Abs. 1 lit. b or f DSGVO, as applicable).

After the contract ends, we retain your data only to the extent required by statutory retention obligations (in particular commercial and tax law obligations under § 257 HGB and § 147 AO, generally of six or ten years respectively) or where you have given your consent.

4. Payment Processing

Depending on the payment method you choose, we use payment service providers to process payments, such as PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, and the payment providers connected through Shopify Payments. The data required for this purpose (name, address, payment details) is transmitted to the relevant provider for the purpose of processing the payment. The legal basis is Art. 6 Abs. 1 lit. b DSGVO. The privacy notices of the respective payment service provider apply in addition.

4a. Electronic Withdrawal Button

For the electronic exercise of the statutory right of withdrawal (§ 356a BGB), we use the "EU Withdrawal Button" service provided by 401layers UG, which is integrated via euwiderrufsbutton.de. When you use the button, the data you enter (name, email address, order number) together with technical connection data is transmitted to this provider in order to identify and log your withdrawal declaration and to send you the automatic confirmation of receipt. The legal basis is Art. 6 Abs. 1 lit. c DSGVO (compliance with the statutory obligation under § 356a BGB) in conjunction with lit. b (handling the withdrawal as a contract-related process). Further details are set out in our Withdrawal Instructions.

5. Cookies and Consent

Our shop uses cookies and similar technologies. We use technically necessary cookies (for example, for the shopping cart, login, and security) on the basis of Art. 6 Abs. 1 lit. f DSGVO and § 25 Abs. 2 TDDDG, as they are required for the operation of the shop. We use all other cookies and tools (in particular the analytics and marketing services referred to in section 6) only with your prior consent, which you may withdraw at any time (§ 25 Abs. 1 TDDDG, Art. 6 Abs. 1 lit. a DSGVO). We obtain this consent through a cookie consent banner, where you can change your selection at any time.

6. Analytics and Marketing Tools

Google Analytics 4

With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA). Google Analytics uses cookies or similar technologies that allow analysis of how the shop is used (for example, page views, time spent on the site, and visitor origin). Your IP address is shortened by Google within the EU or the EEA, or, in exceptional cases, transferred to the USA and shortened there. Your data is not combined with other data held by Google. The legal basis is your consent (Art. 6 Abs. 1 lit. a DSGVO). You may withdraw your consent at any time, with future effect, via the cookie banner or your browser settings. To the extent data is transferred to the USA in this context, Google states that it relies on the EU-US Data Privacy Framework. Further information: policies.google.com/privacy.

Meta/Facebook Pixel

With your consent, we use the Meta Pixel provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (parent company: Meta Platforms, Inc., USA). The Pixel enables us to track the effectiveness of advertisements on Facebook/Instagram and to show you advertising tailored to your interests (remarketing, custom audiences). In doing so, usage data is transmitted to Meta and may be linked to your Meta account. The legal basis is your consent (Art. 6 Abs. 1 lit. a DSGVO). Meta participates in the collection of data through the Pixel as a joint controller within the meaning of Art. 26 DSGVO; details are set out in Meta's "Controller Addendum" for joint controllers. Data is transferred to the USA on the basis of the EU-US Data Privacy Framework or, alternatively, the EU Standard Contractual Clauses. Further information and opt-out options: facebook.com/privacy/policy and Ad Settings.

7. Disclosure to Recipients

We only transfer your data to the service providers named in this Policy (hosting, payment processing, shipping, and analytics/marketing), to shipping providers for the delivery of your order, and to public authorities to the extent we are legally required to do so. Your data is not transferred for any purpose other than those stated.

8. Retention Period

We store personal data only for as long as necessary for the relevant purpose, or as required by statutory retention periods (see section 3). Data processed on the basis of consent (for example, analytics/marketing cookies) is stored until you withdraw your consent, or for the period specified in the relevant cookie banner.

9. Your Rights

You have the right of access (Art. 15 DSGVO), rectification (Art. 16 DSGVO), erasure (Art. 17 DSGVO), restriction of processing (Art. 18 DSGVO), data portability (Art. 20 DSGVO), and objection to processing (Art. 21 DSGVO). You may withdraw any consent you have given at any time, with future effect. To exercise these rights, an informal message to the contact address given in section 1 is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is, in particular, the Saxon Data Protection Commissioner:

10. Obligation to Provide Data

Providing your personal data is necessary to conclude a contract of purchase. Without this data, we cannot conclude or perform the contract with you. To contact us via the contact form or by email, we require at least a valid email address.

11. Automated Decision-Making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 DSGVO.

Last updated: September 2026