Privacy policy

Thank you for your interest in our online shop. The protection of your personal data is important to us. Below, we explain what data we collect, how we use it, and what rights you have.

1. Data Controller

The data controller within the meaning of data protection laws is:
Veldaer UG (limited liability)
Reiherstraße 16, 50997 Cologne, Germany
Email: veldaerug@outlook.de

2. Hosting / Shopify platform

Our shop is operated via the Shopify platform. Shopify processes data on our behalf to enable the operation of the shop (e.g. orders, checkout, technical provision). In doing so, data may also be processed in countries outside the EU/EEA. Shopify implements appropriate safeguards (e.g. standard contractual clauses) where necessary.

3. Collection and use of personal data

We process personal data when you:

visit our shop (e.g. IP address, device/browser data, log data),

create a customer account (if offered),

place an order (e.g. name, address, email, order details),

enter payment details (processing via payment service providers; we do not necessarily receive complete payment details).

The purposes of processing are, in particular:

Provision and operation of the shop,

Conclusion and fulfilment of contracts (orders, dispatch, returns, refunds),

Customer service and communication,

Fraud prevention and IT security,

Legal obligations (e.g. commercial and tax law).

4. Legal basis

Depending on the case, processing is carried out on the basis of:

Art. 6(1)(b) GDPR (contract/pre-contractual measures),

Art. 6(1)(c) GDPR (legal obligation),

Art. 6(1)(f) GDPR (legitimate interest, e.g. security, prevention of misuse, technical provision),

Art. 6(1)(a) GDPR (consent, e.g. for certain cookies/tracking).

5. Payment processing (Shopify Payments)

We use Shopify Payments for payments. Depending on the payment method selected, data required for payment processing is transmitted to the payment service provider. The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

6. Dispatch / Delivery

For delivery purposes, we process dispatch data (name, address, email for dispatch notifications). Legal basis: Article 6(1)(b) GDPR.

7. Cookies and similar technologies

Our shop uses cookies and similar technologies that may be necessary for technical operation (e.g. shopping basket, login status, language settings) as well as, where applicable, cookies for statistics/marketing, provided these are enabled.
Where consent is required, we obtain this prior to the use of such cookies (Art. 6(1)(a) GDPR). We set technically necessary cookies on the basis of Art. 6(1)(f) GDPR (legitimate interest in secure, functional operation).

8. Your rights

You have the following rights, provided the legal requirements are met:

Right of access (Art. 15 GDPR),

Right to rectification (Art. 16 GDPR),

Right to erasure (Art. 17 GDPR),

Right to restriction of processing (Art. 18 GDPR),

Right to data portability (Art. 20 GDPR),

Objection to processing (Art. 21 GDPR),

Withdrawal of consent (Art. 7(3) GDPR),

Lodging a complaint with a data protection supervisory authority.

9. Data Protection Contact

If you have any questions regarding data protection, please contact: veldaerug@outlook.de