Privacy policy

Privacy Policy

Unless stated otherwise below, providing your personal data is neither required by law or contract nor necessary for concluding a contract. You are not obliged to provide the data. Not providing it has no consequences. This applies only as far as the processing operations below do not state otherwise.
"Personal data" means any information relating to an identified or identifiable natural person.

Server log files

You can visit our website without telling us who you are.
Each time you access our website, your browser transmits usage data to us or to our web host / IT service provider, which is stored in log files (server log files). This data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
The processing is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our offer.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, an adequacy decision of the EU Commission exists. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This transfer is based on contractual obligations comparable to the standard contractual clauses of the EU Commission.

Contact

Controller

The controller responsible for data processing is: Radicale UG (haftungsbeschränkt), Bergstraße 19, 46446 Emmerich am Rhein, Germany, +49 151 29802708, info@radicalecaffe.de

Contacting us by email

If you contact us by email on your own initiative, we collect your personal data (name, email address, message text) only to the extent you provide it. The processing serves to handle and answer your enquiry.
If the contact serves pre-contractual measures (e.g. advice on a purchase, preparing an offer) or concerns a contract already concluded between you and us, the processing is based on Art. 6(1)(b) GDPR.
If you contact us for other reasons, the processing is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in handling and answering your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6(1)(f) GDPR.
We use your email address only to handle your enquiry. Your data is then deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When you use the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The processing serves to contact you.
If the contact serves pre-contractual measures (e.g. advice on a purchase, preparing an offer) or concerns a contract already concluded between you and us, the processing is based on Art. 6(1)(b) GDPR.
If you contact us for other reasons, the processing is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in handling and answering your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6(1)(f) GDPR.
We use your email address only to handle your enquiry. Your data is then deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the withdrawal button

If you have concluded a contract via our website, we provide a withdrawal function (withdrawal button) through which you can declare your withdrawal directly.
When you use the withdrawal function, we collect your personal data (name, email address, details identifying the contract or part of the contract you wish to withdraw from, and the time (date and time) the withdrawal was sent) only to the extent you provide it. The processing serves to give you the legally required option to withdraw from your contract and to handle your withdrawal properly.
If the contact concerns a contract already concluded between you and us, the processing is based on Art. 6(1)(b) GDPR. Otherwise the processing is based on Art. 6(1)(c) GDPR, to fulfil our legal obligation to provide a withdrawal function on our website.
We use your email address only to handle your withdrawal. Your data is then deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

The processing of your personal data serves to meet the legal requirements for the withdrawal function and is based on Art. 6(1)(c) GDPR. It is also based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in offering you a user-friendly way to withdraw. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6(1)(f) GDPR.

Collection and processing when using the cancellation button

If you cancel a subscription contract concluded via our website using the legally required cancellation button, we process the data you enter in the confirmation form. When you use the cancellation button, we collect your personal data (name, email address, your phone number if given, details identifying the contract you wish to cancel, and the time (date and time) the cancellation was sent) only to the extent you provide it. The processing serves to give you the legally required option to cancel your continuing contract and to handle your cancellation properly.
If the contact concerns a contract already concluded between you and us, the processing is based on Art. 6(1)(b) GDPR. Otherwise the processing is based on Art. 6(1)(c) GDPR, as we are legally obliged to provide a cancellation button on our website.
We use your email address only to handle your cancellation. Your data is then deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

The cancellation is sent to our internal management system. It runs on a server of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) in Germany under a data processing agreement. We send you the confirmation of receipt by email through our email provider (see "Sending and receiving email").

Sending and receiving email

Our mailboxes (@radicalecaffe.de) are hosted by Vimexx B.V. (Vondellaan 47, 2332 AA Leiden, Netherlands) under a data processing agreement. Emails you send us and emails we send you are stored there. Shopify forwards emails sent to @rdcl.coffee addresses to these mailboxes. The processing has the same legal basis as the reason for the email (e.g. Art. 6(1)(b) GDPR for an order).

Customer account and orders

Customer account

When you open a customer account, we collect your personal data to the extent stated there. The processing serves to improve your shopping experience and to simplify order handling. The processing is based on Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal. Your customer account is then deleted.

Collection, processing and transfer of personal data for orders

When you order, we collect and process your personal data only as far as necessary to fulfil and handle your order and to deal with your enquiries. Providing the data is necessary to conclude the contract. If you do not provide it, no contract can be concluded. The processing is based on Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.
Your data is passed on, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, service providers for order handling and IT service providers. In all cases we strictly comply with the legal requirements. The data transferred is kept to a minimum.

Shipping

For shipping, we pass your name and delivery address to DHL Paket GmbH (Sträßchensweg 10, 53113 Bonn, Germany). We create the shipping labels with the Shopify app "Post & DHL Shipping" of Deutsche Post AG. So that DHL can inform you about the delivery, we also pass your email address to DHL. For deliveries we make ourselves in Emmerich am Rhein, we pass your data to no one.
The processing is based on Art. 6(1)(b) GDPR; passing on your email address is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in smooth delivery. You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data.
More information: https://www.dhl.de/de/toolbar/footer/datenschutz.html.

Subscriptions via PayWhirl

For coffee subscriptions we use the PayWhirl service of PayWhirl, Inc. (9452 Telephone Road #140, Ventura, CA 93004, USA; "PayWhirl") under a data processing agreement. PayWhirl processes your name, your email address, your delivery and billing address, the details of your subscription and a reference to your payment method. In the PayWhirl customer portal you can view and change your subscription.
The processing serves to handle your subscription and is based on Art. 6(1)(b) GDPR.
Your data is transferred to the USA. The transfer is based on the standard contractual clauses of the EU Commission, which are part of our data processing agreement with PayWhirl.
More information: https://paywhirl.com/privacy.

Custom labels (Globo Product Options)

For products with a custom label we use the Shopify app Product Options of PowerfulForm Technology Company Limited (19 Tuyen, Soc Son, Hanoi, Vietnam; "Globo") under a data processing agreement. We process the images and texts you upload or enter for the design together with your order.
The processing serves to make the goods you ordered and is based on Art. 6(1)(b) GDPR.
Your data may be transferred to Vietnam, the USA and Canada. For Canada, an adequacy decision of the EU Commission exists; for Vietnam, none exists. The transfer is based on the standard contractual clauses of the EU Commission, which are part of our data processing agreement with Globo.
More information: https://globo.io/privacy-policy.

Analysis of order data (Sellerboard)

To analyse sales, costs and profit we use the Sellerboard service of nextechnology GmbH (Ziegelbrennerstr. 5, 70374 Stuttgart, Germany) under a data processing agreement. For this, your order data is transferred to Sellerboard.
The processing is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in a business analysis of our shop. You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data.

Advertising

Use of your email address for newsletters

We use your email address to send you information and offers by newsletter if you have expressly consented to this. The processing serves exclusively for advertising. For this we process your email address and any other data you voluntarily provided when subscribing to our newsletter.
The processing is based on Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
You can unsubscribe from the newsletter at any time using the link in the newsletter or by notifying us. Your email address is then removed from the mailing list. Even after removal, we may keep your email address on a block list to make sure you receive no further newsletters from us. This storage is based on Art. 6(1)(f) GDPR, on the basis of our and your legitimate interest in preventing your email address from being used again for our newsletter. You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data.

We send the newsletter with Shopify Messaging of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") under a data processing agreement. For transfers to third countries, the information under "Server log files" applies.

Use of your email address for direct advertising

We use the email address we received when selling goods or services to send you advertising by email for our own goods or services similar to those you have already bought from us, unless you have objected to this use. Providing the email address is necessary to conclude the contract. If you do not provide it, no contract can be concluded. The processing is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. You find the contact details for your objection in the legal notice. You can also use the link provided in the advertising email. This costs you nothing beyond the transmission costs at basic rates.

Back-in-stock notifications

If a product is sold out, you can ask to be notified as soon as it is available again. For this we use the Shopify app Back in Stock of CWILL INC (8 The Green, Ste A, Dover, DE 19901, USA; "CWILL") under a data processing agreement. We process your email address and the product you want.
The processing is based on Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time using the link in the email or by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal. After the notification has been sent, we delete your request.
Your data may be transferred to the USA, Hong Kong and China. For these countries, no adequacy decision of the EU Commission applies to CWILL. The transfer is based on the standard contractual clauses of the EU Commission, which are part of our data processing agreement with CWILL.
More information: https://www.cwill.com/privacy-policy.

Payment service providers

Use of PayPal Express

On our website we use the payment service PayPal Express of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal"). The processing serves to offer you payment via PayPal Express. To include this payment service, PayPal needs to collect, store and analyse data when you access the website (e.g. IP address, device type, operating system, browser type, location of your device). Cookies may be used for this. Cookies make it possible to recognise your browser.
The processing of your personal data is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in offering a customer-friendly range of payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data.
When you choose and use PayPal Express, the data needed to process the payment is transferred to PayPal so that we can perform the contract with you using the chosen payment method. This processing is based on Art. 6(1)(b) GDPR. More information on data processing when using PayPal Express is available in PayPal's privacy statement at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of PayPal Checkout

On our website we use the payment service PayPal Checkout of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal"). The processing serves to offer you payment via this service. When you choose and use payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data needed to process the payment is transferred to PayPal so that we can perform the contract with you using the chosen payment method. This processing is based on Art. 6(1)(b) GDPR.

Cookies may be stored that make it possible to recognise your browser. The resulting processing is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in offering a customer-friendly range of payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data.

Credit card via PayPal, direct debit via PayPal and "Pay Later" via PayPal
For some payment methods, such as credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit check from credit agencies based on mathematical-statistical methods. For this, PayPal transfers the personal data needed for a credit check to a credit agency and uses the information received on the statistical probability of a payment default to make a balanced decision on establishing, performing or ending the contractual relationship. The credit report may contain probability values (score values) calculated using scientifically recognised mathematical-statistical methods, which include address data among other things. Your legitimate interests are taken into account in accordance with the law. The processing serves to check creditworthiness before a contract. It is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in protection against payment default where PayPal pays in advance.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6(1)(f) GDPR by notifying PayPal. Providing the data is necessary to conclude the contract with the payment method you want. If you do not provide it, the contract cannot be concluded with the payment method you chose.

Third-party providers
If you pay with a third-party payment method, the data needed to process the payment is transferred to PayPal. This processing is based on Art. 6(1)(b) GDPR. To carry out this payment method, PayPal may then pass the data on to the relevant provider. This processing is based on Art. 6(1)(b) GDPR. Local third-party providers can be, for example:

Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Pay by invoice via PayPal
If you pay by invoice, the data needed to process the payment is first transferred to PayPal. To carry out this payment method, PayPal then transfers the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") so that we can perform the contract with you using the chosen payment method. This processing is based on Art. 6(1)(b) GDPR. Ratepay may carry out a credit check based on mathematical-statistical methods (probability or score values) using credit agencies, as described above. The processing serves to check creditworthiness before a contract. It is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in protection against payment default where Ratepay pays in advance. More information on data protection and the credit agencies Ratepay uses is available at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

More information on data processing when using PayPal is available in PayPal's privacy statement at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Klarna payment options

On our website we use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna"). When you choose and use payment via Klarna, the data needed to process the payment is transferred to Klarna so that we can perform the contract with you using the chosen payment method. This processing is based on Art. 6(1)(b) GDPR.

"Pay Later" (invoice), "Pay Now" (direct debit, credit card, instant transfer), "Financing" (instalments)
For some payment methods, such as "Pay Later" (invoice), "Pay Now" (direct debit, credit card, instant transfer) or "Financing" (instalments), Klarna reserves the right to obtain a credit check from credit agencies based on mathematical-statistical methods.
For this, Klarna transfers the personal data needed for identity and credit checks, such as first and last name, address, gender, email address, IP address and data related to the order, to a credit agency and uses the information received on the statistical probability of a payment default to make a balanced decision on establishing, performing or ending the contractual relationship. The credit report may contain probability values (score values) calculated using scientifically recognised mathematical-statistical methods, which include address data among other things. Your legitimate interests are taken into account in accordance with the law. The processing serves to check creditworthiness before a contract. It is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in protection against payment default where Klarna pays in advance. You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6(1)(f) GDPR by notifying Klarna. Providing the data is necessary to conclude the contract with the payment method you want. If you do not provide it, the contract cannot be concluded with the payment method you chose.
More information, in particular on the credit agencies to which Klarna passes your personal data, is available for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies.
General information on Klarna is available for Germany at https://www.klarna.com/de/ and for Austria at https://www.klarna.com/at/. Klarna handles your personal data in accordance with the applicable data protection law and Klarna's privacy notice for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.

Use of Shopify Payments

On our website we use the payment service "Shopify Payments" of Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify"). The payment is processed by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). The processing serves to offer you payment via Shopify Payments. When you choose and use a Shopify Payments method, the data needed to process the payment is transferred to Stripe so that we can perform the contract with you using the chosen payment method. This processing is based on Art. 6(1)(b) GDPR.
Stripe reserves the right to obtain a credit check from credit agencies based on mathematical-statistical methods. For this, Stripe transfers the personal data needed for a credit check to a credit agency and uses the information received on the statistical probability of a payment default to make a balanced decision on establishing, performing or ending the contractual relationship. The credit report may contain probability values (score values) calculated using scientifically recognised mathematical-statistical methods, which include address data among other things. Your legitimate interests are taken into account in accordance with the law. The processing serves to check creditworthiness before a contract. It is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in protection against payment default where Stripe pays in advance.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6(1)(f) GDPR by notifying Stripe. Providing the data is necessary to conclude the contract with the payment method you want. If you do not provide it, the contract cannot be concluded with the payment method you chose.
More information on data processing when using Shopify Payments is available in Shopify's privacy policy at https://www.shopify.com/legal/privacy.
More information on data processing by the payment service provider Stripe is available in Stripe's privacy policy at https://stripe.com/privacy.

Cookies

Our website uses cookies. Cookies are small text files that are stored in or by the web browser on a user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that makes it possible to identify the browser uniquely when the website is visited again.

Cookies are stored on your computer, so you have full control over their use. By choosing the appropriate technical settings in your browser, you can be notified before cookies are set, decide on each one individually, and prevent cookies from being stored and their data from being transmitted. Cookies already stored can be deleted at any time. Please note that you may then not be able to use all functions of this website in full.

The following links explain how to manage (and also disable) cookies in the main browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=en
Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
Safari: https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless stated otherwise below in this privacy policy, we use only these technically necessary cookies, to make our offer more user-friendly, effective and secure. Cookies also allow our systems to recognise your browser after a page change and to offer you services. Some functions of our website cannot be offered without cookies. For these, the browser must be recognised after a page change.

The use of cookies or similar technologies is based on § 25(2) TDDDG. The processing of your personal data is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data.

Use of the Shopify cookie banner

On our website we use the cookie banner of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify").
With the banner you can consent to data processing, in particular the setting of cookies, and withdraw consent you have given. The processing serves to obtain and document the required consent. For this, a cookie is set that stores your choice. You can change your choice at any time with the "Cookie settings" link at the bottom of the page.
The processing serves to fulfil a legal obligation and is based on Art. 6(1)(c) GDPR. For transfers to third countries, the information under "Server log files" applies.

Analytics and ad tracking

Use of Google Tag Manager

On our website we use Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). With Tag Manager we can manage website tags through one interface. Tag Manager itself sets no cookies and does not analyse data. However, your IP address is transmitted to Google when you open the website. Services loaded through Tag Manager are loaded only with your consent; each is described separately in this privacy policy.
The processing is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in simple management of the services on our website. You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data.
Your data may be transferred to servers of Google LLC in the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thus committed to comply with European data protection principles.
More information: https://policies.google.com/privacy?hl=en.

Use of Google Analytics 4

On our website we use the web analytics service Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
The processing serves to analyse this website and its visitors and for marketing and advertising purposes. On behalf of the operator of this website, Google uses the information obtained to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services related to website and internet use.
The following information, among other things, may be collected: IP address, date and time of the page view, click path, information about your browser and device, pages visited, referrer URL (the website from which you came to our website), location data, purchase activity. Google may link your data with other data, such as your search history, your personal accounts, your usage data from other devices and any other data Google holds about you.

Google shortens the IP address beforehand within member states of the European Union or other states party to the Agreement on the European Economic Area.

Google uses technologies such as cookies, browser web storage and tracking pixels that enable an analysis of your use of the website. The use of cookies or similar technologies is based on your consent under § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR.

The processing of your personal data is based on your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.

The information generated about your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thus committed to comply with European data protection principles. Both Google and US government authorities have access to your data.

More information on terms of use and data protection is available at https://policies.google.com/technologies/partner-sites, https://policies.google.com/privacy?hl=en and https://business.safety.google/privacy/.

Use of Shopify Analytics

On our website we use the statistics and analytics functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") under a data processing agreement. Shopify is affiliated with Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The processing serves to analyse this website and its visitors. For this, data is stored for marketing and optimisation purposes and provided in reports, analyses and statistics. The following device information, among other things, is collected and processed: information about the web browser, the IP address, the time zone and some of the cookies installed on your device. As you navigate the website, information about the pages or products viewed, the referrer URL (the website from which you came to our website) and how you interact with the website is also recorded. Technologies such as cookies, web beacons, tags and pixels (electronic files that record how you navigate the website) are used for this.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, an adequacy decision of the EU Commission exists. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This transfer is based on contractual obligations comparable to the standard contractual clauses of the EU Commission.
The use of cookies or similar technologies is based on your consent under § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is based on your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
More information on data protection at Shopify is available at https://www.shopify.com/legal/privacy, on the data processing agreement at https://www.shopify.com/legal/dpa and on the cookies used at https://www.shopify.com/legal/cookies.

Use of the Meta Pixel

On our website we use the Meta Pixel of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta").
Meta and we are joint controllers for the collection of your data when the service is included and for the transfer of this data to Meta. This is based on an agreement between us and Meta on the joint processing of personal data, which sets out the respective responsibilities. The agreement is available at https://www.facebook.com/legal/terms/businesstools. Under it, we are responsible in particular for meeting the information obligations under Art. 13 and 14 GDPR, for complying with the security requirements of Art. 32 GDPR regarding the correct technical implementation and configuration of the service, and for the obligations under Art. 33 and 34 GDPR where a personal data breach concerns our obligations under the joint processing agreement. Meta is responsible for enabling the data subject rights under Art. 15 to 20 GDPR, for complying with the security requirements of Art. 32 GDPR regarding the security of the service, and for the obligations under Art. 33 and 34 GDPR where a personal data breach concerns Meta's obligations under the joint processing agreement.
The service serves to address visitors of the website with interest-based advertising in the social networks Facebook and Instagram. For this, Meta's remarketing tag has been implemented on the website. When you visit the website, this tag establishes a direct connection to Meta's servers. This transmits to Meta which of our pages you visited. Meta assigns this information to your personal Facebook and/or Instagram account. When you visit Facebook or Instagram, you are then shown personalised, interest-based ads.
The service also serves to create conversion statistics. These show us the total number of users who clicked on one of our ads and were forwarded to a page with a conversion tracking tag, and what actions they took after being forwarded to this website. We do not receive any information that identifies users personally.
Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Meta is certified under the TADPF and has thus committed to comply with European data protection principles.
The processing of your personal data is based on your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
More information on how Meta collects and uses data, your rights and ways to protect your privacy is available in Meta's privacy policy at https://www.facebook.com/privacy/policy/.

Use of Google Ads conversion tracking

On our website we use the online advertising programme "Google Ads" and, as part of it, conversion tracking. Google conversion tracking is an analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have limited validity, contain no personal data and therefore do not serve to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, Google and we can see that you clicked on the ad and were forwarded to this page. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across the websites of Ads customers.
The information obtained with the conversion cookie serves to create conversion statistics. These show us the total number of users who clicked on one of our ads and were forwarded to a page with a conversion tracking tag. We do not receive any information that identifies users personally.
Your data may be transferred to servers of Google LLC in the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thus committed to comply with European data protection principles.
The use of cookies or similar technologies is based on your consent under § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is based on your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
More information and Google's privacy policy: https://policies.google.com/privacy or https://business.safety.google/privacy/

Use of Microsoft Clarity

On our website we use the analytics service Microsoft Clarity of Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland; "Microsoft").
The processing serves to understand and improve the use of our website. For this, Clarity records how you move on the website (e.g. mouse movements, clicks, scrolling) and creates heatmaps and session recordings. The following information, among other things, may be collected: IP address, information about browser and device, pages visited, referrer URL, date and time. Clarity hides input in form fields by default.
Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft is certified under the TADPF and has thus committed to comply with European data protection principles.
The use of cookies or similar technologies is based on your consent under § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is based on your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
More information: https://privacy.microsoft.com/en-gb/privacystatement and https://clarity.microsoft.com/terms.

Plug-ins and other services

Use of hCaptcha

On our website we use the hCaptcha service of Intuition Machines Inc. (1065 SW 8th St #704, Miami, FL 33130, USA; "hCaptcha") under a data processing agreement.
hCaptcha protects our website against spam and abuse by automated access (bots). By using hCaptcha we make sure that certain actions on our website are carried out only by real people, which keeps our online services secure and intact.
When hCaptcha is used, the following data may be collected and processed: the user's IP address, information about the device used (e.g. browser and operating system), mouse movements and interactions on the website, time spent on the website, the user's input behaviour.
Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). hCaptcha is certified under the TADPF and has thus committed to comply with European data protection principles.
The use of cookies or similar technologies is based on your consent under § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is based on your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
More information on data processing and data protection at hCaptcha: https://www.hcaptcha.com/gdpr.

Your rights and storage period

Storage period

After the contract has been fully performed, the data is first stored for the duration of the warranty period, then in accordance with statutory, in particular tax and commercial, retention periods, and then deleted when these periods expire, unless you have consented to further processing and use.

Rights of the data subject

If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right of access, rectification, erasure, restriction of processing and data portability.
You also have a right under Art. 21(1) GDPR to object to processing based on Art. 6(1)(f) GDPR and to processing for direct advertising.

Right to lodge a complaint with a supervisory authority

Under Art. 77 GDPR you have the right to lodge a complaint with the supervisory authority if you believe that your personal data is not being processed lawfully.

You can lodge a complaint with the supervisory authority responsible for us at the following contact details:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Germany
Tel.: +49 211 384240
Fax: +49 211 38424999
Email: poststelle@ldi.nrw.de

Right to object

Where the processing of personal data described here is based on our legitimate interest under Art. 6(1)(f) GDPR, you have the right to object to this processing at any time with effect for the future, on grounds relating to your particular situation.
After an objection, the processing of the data concerned stops, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Last updated: 22 October 2026