Privacy Policy

1. Responsible Party

Responsible for data processing in this online shop is: [NAME OR COMPANY], [ADDRESS], Email: [EMAIL ADDRESS], Phone: [PHONE NUMBER].

2. Hosting and Shop System

Our shop runs on [SHOP SYSTEM, e.g., Shopify (Shopify International Limited, Ireland)]. When you visit, technically necessary data such as IP address, date and time of access, browser type, and the pages called up are processed to deliver the shop safely and stably. The legal basis is Art. 6 para. 1 lit. f GDPR; our legitimate interest is the secure operation of the shop.

3. Order and Contract Fulfillment

When you order, we process the data necessary for the contract: name, delivery and billing address, email address, [PHONE NUMBER,] ordered items, and payment information. The legal basis is Art. 6 para. 1 lit. b GDPR. Due to commercial and tax law retention obligations, we store order data for up to ten years (Art. 6 para. 1 lit. c GDPR).

4. Suppliers and Shipping Service Providers

So that your order reaches you, we pass on name, delivery address, [PHONE NUMBER AND] the ordered items to our suppliers and shipping service providers: [SUPPLIERS AND SHIPPING SERVICE PROVIDERS WITH HEADQUARTERS]. The legal basis is Art. 6 para. 1 lit. b GDPR.

[IF A SUPPLIER IS LOCATED OUTSIDE THE EU] Some suppliers are located outside the EU, in [COUNTRY]. For the transmission there, we have agreed on [STANDARD CONTRACTUAL CLAUSES OF THE EU COMMISSION (Art. 46 para. 2 lit. c GDPR)].

5. Payment Service Providers

Payment is processed by the following service providers: [PAYMENT SERVICE PROVIDER WITH HEADQUARTERS, e.g., Shopify Payments, PayPal, Klarna]. For this purpose, we pass on the necessary payment data to the respective provider (Art. 6 para. 1 lit. b GDPR). In addition, their privacy policies apply.

6. Cookies and Consent

Technically necessary cookies, for example for the shopping cart, are set on the basis of § 25 para. 2 TDDDG and Art. 6 para. 1 lit. f GDPR. All other cookies and comparable techniques — for statistics or advertising — are only set with your consent (§ 25 para. 1 TDDDG, Art. 6 para. 1 lit. a GDPR). You can withdraw this at any time via [LINK OR NAME OF COOKIE SETTINGS].

7. Analysis and Advertising

[ONE PARAGRAPH FOR EACH TOOL] We use [SERVICE, e.g., Meta Pixel] from [PROVIDER WITH HEADQUARTERS], to [PURPOSE, e.g., measure the effectiveness of our ads]. In the process, [DATA, e.g., visited pages, purchases, IP address] are processed. This only happens with your consent (Art. 6 para. 1 lit. a GDPR). [UPON TRANSMISSION TO THE USA: The provider is certified under the EU-US Data Privacy Framework.]

8. Newsletter

[IF AVAILABLE] If you subscribe to our newsletter, we use your email address to send you [CONTENT AND FREQUENCY]. The basis is your consent (Art. 6 para. 1 lit. a GDPR), which you give via a confirmation link (double opt-in). You can unsubscribe at any time via the link in each email. Shipping service provider: [PROVIDER WITH HEADQUARTERS].

9. Contact

If you write to us by email or contact form, we process your details to answer your inquiry (Art. 6 para. 1 lit. b GDPR for questions about an order, otherwise Art. 6 para. 1 lit. f GDPR).

10. Storage Duration

We delete personal data as soon as the purpose no longer applies and no statutory retention obligations exist.

11. Your Rights

• Information about your stored data (Art. 15 GDPR)
• Correction of incorrect data (Art. 16 GDPR)
• Deletion (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7 para. 3 GDPR)
• Complaint to a data protection supervisory authority (Art. 77 GDPR)

Write to us at [EMAIL ADDRESS] for this.

Status: [DATE]