Privacy Policy

Privacy Policy

We are pleased about your interest in our online shop. The protection of your personal data is important to us. Below we inform you, in accordance with Art. 13 and 14 GDPR, about the processing of your personal data when you use our shop.

1. Controller

Opis Technology GmbH
Managing directors: Aron Zeh, Ulrich Zahnert
Sierksstr. 30, 01326 Dresden, Germany
E-mail: contact@opis-tech.com
Phone: +49 (0) 351 41 88 70 60
Fax: +49 (0) 351 41 88 70 63

A data protection officer is not required by law and has not been appointed. If you have questions about data protection, please contact the address above.

2. Visiting the shop (hosting, server log files)

Our shop is operated on the technical infrastructure of Shopify International Limited, 2 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (with group links to Shopify Inc., Canada, and Shopify (USA) Inc.). When you access the shop, Shopify automatically collects technical access data (IP address, date/time, page accessed, referrer URL, browser and operating system) in order to provide the shop, ensure its stability and security and prevent misuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a functional, secure operation). A data processing agreement exists with Shopify. Where data is transferred to the USA, Shopify, according to its own statements, relies on the EU-US Data Privacy Framework or on EU standard contractual clauses (Art. 46 GDPR). Further information: shopify.com/legal/privacy.

3. Contract processing, customer account, contact

When you order from us, we process the data required to perform the contract (name, address, e-mail address, phone number, order and payment data) in order to process your order, for queries and within the scope of the statutory warranty and withdrawal rights. The legal basis is Art. 6(1)(b) GDPR. If you create a customer account, we process the data you provide to manage the account on the same legal basis. If you contact us by e-mail, phone or contact form, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR) and delete them once the request has been dealt with and no retention obligations apply.

After the end of the contract we store your data only as long as statutory retention obligations require (in particular § 257 German Commercial Code (HGB) and § 147 German Fiscal Code (AO): six or ten years) or you have given consent.

4. Shipping

For delivery we work with DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany) or Deutsche Post. We pass on your delivery data (name, address) for the performance of the contract (Art. 6(1)(b) GDPR). We pass on your e-mail address for parcel notification only if you have given consent (Art. 6(1)(a) GDPR); you can withdraw your consent at any time.

5. Payment processing

For payment processing we use payment service providers depending on the payment method you choose. The data required for the payment is transmitted (name, address, payment data, order amount). The legal basis is Art. 6(1)(b) GDPR. The privacy notices of the respective provider also apply. Depending on your selection in the checkout, these are in particular:

• Shopify Payments (credit card, Apple Pay, Google Pay, iDEAL, Bancontact, EPS, Maestro, etc.) and Shop Pay, in each case via Shopify and the payment providers connected there,
• PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg,
• Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

6. Electronic withdrawal button

To exercise the right of withdrawal electronically (§ 356a BGB) we use the “EU Widerruf Button” service of 401layers UG (euwiderrufsbutton.de). The data you enter (name, e-mail address, order number) and technical connection data are transmitted to this provider in order to identify and log your declaration and to send you the confirmation of receipt. The legal basis is Art. 6(1)(c) GDPR in conjunction with § 356a BGB.

7. Newsletter

If you sign up with your e-mail address in the footer of our shop for our e-mails, we use your address to send you information about our products and offers. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, e.g. via the unsubscribe link in every e-mail or by message to contact@opis-tech.com. The e-mails are sent via Shopify (see section 2). We store your data until you withdraw your consent.

8. Cookies and consent

Our shop uses cookies and similar technologies. We use technically necessary cookies (e.g. for the shopping cart, login, security, storing your cookie choice) on the basis of Art. 6(1)(f) GDPR and § 25(2) TDDDG. All cookies and tools going beyond this, in particular the analytics and marketing services listed in section 9, are used only with your prior consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). We obtain consent via a cookie banner; you can change or withdraw your choice there at any time.

9. Analytics and marketing tools

Google Analytics 4

With your consent we use Google Analytics 4 of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA) to analyse the use of our shop (e.g. page views, time spent, origin of visitors). IP addresses are shortened. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Where data is transferred to the USA, Google relies on the EU-US Data Privacy Framework. Further information: policies.google.com/privacy.

Meta Pixel

With your consent we use the Meta Pixel of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (parent company: Meta Platforms, Inc., USA). It enables us to track the success of advertisements on Facebook and Instagram and to show interest-based advertising. Usage data is transmitted to Meta and may be linked to your Meta account. Meta is a joint controller with us in this respect (Art. 26 GDPR). The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Transfers to the USA take place on the basis of the EU-US Data Privacy Framework or the EU standard contractual clauses. Further information: facebook.com/privacy/policy.

Pinterest Tag

With your consent we use the Pinterest Tag of Pinterest Europe Ltd., Palmerston House, Fenian Street, Dublin 2, Ireland (parent company: Pinterest, Inc., USA) to measure the success of ads on Pinterest and to build audiences for advertising. Usage and order data is transmitted to Pinterest. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Transfers to the USA take place on the basis of the EU-US Data Privacy Framework or the EU standard contractual clauses. Further information: policy.pinterest.com/en/privacy-policy.

Snap Pixel (Snapchat Ads)

With your consent we use the Snap Pixel of Snap Group Limited, 50 Cowcross Street, London EC1M 6AL, United Kingdom to measure the success of ads on Snapchat and to build audiences for advertising. Usage and order data is transmitted to Snap. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). The EU Commission has issued an adequacy decision for the United Kingdom; transfers to other third countries take place on the basis of EU standard contractual clauses. Further information: values.snap.com/privacy/privacy-policy.

TikTok Pixel

With your consent we use the TikTok Pixel of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland to measure the success of ads on TikTok and to build audiences for advertising. Usage and order data is transmitted to TikTok. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). A transfer to third countries is possible and takes place on the basis of EU standard contractual clauses. Further information: tiktok.com/legal/page/eea/privacy-policy/en.

Shopify Collabs

We take part in the Shopify Collabs partner programme. With your consent we record whether you reached our shop via a partner’s (creator’s) link and completed an order, in order to attribute the agreed commission to the partner. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

Server-side transmission

For Meta, Google, Pinterest, Snap and TikTok, data may be transmitted to the respective provider not only via your browser but additionally server-side by Shopify (e.g. order and purchase events). This also takes place only if you have consented to the respective category.

10. Embedded content (YouTube) and social media links

On some pages we embed YouTube videos (YouTube, LLC, USA, represented by Google Ireland Limited). Data is transmitted only once you have agreed to the embedding or started the video; where possible we use the enhanced privacy mode. The icons for Facebook, Instagram, YouTube, TikTok and Pinterest in the footer are simple links; data is transmitted only when you click them.

11. Disclosure to recipients, storage period

Your data is transmitted only to the service providers named in this policy, to shipping providers and to authorities where we are legally obliged to do so. We store personal data only for as long as necessary for the respective purposes or as statutory retention periods require. Data based on consent is stored until you withdraw your consent or for the period stated in the cookie banner.

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future. An informal message to the address given in section 1 is sufficient to exercise your rights. You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is in particular:

Sächsische Datenschutz- und Transparenzbeauftragte (Saxon Data Protection and Transparency Commissioner)
Maternistraße 17, 01067 Dresden, Germany
Phone: +49 351 85471-101
www.datenschutz.sachsen.de

13. Provision of data, automated decisions

The provision of your personal data is necessary for the conclusion of a purchase contract; without this data we cannot conclude and perform the contract. Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place.

14. Changes

We will adapt this privacy policy if our services or the legal requirements change. The version published at the time of your visit applies.

Version: October 2026