Privacy Policy

Privacy Policy


Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for concluding a contract. You are not obliged to provide this data. Failure to provide the data will have no consequences. This applies only insofar as no other information is given for the processing operations described below. “Personal data” refers to all information relating to an identified or identifiable natural person.


Server Log Files

You can visit our websites without providing personal information. Each time you access our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in log files (so-called server log files). These stored data include, for example, the name of the page accessed, date and time of access, the IP address, the amount of data transmitted, and the requesting provider.

The processing is based on Article 6(1)(f) GDPR, justified by our legitimate interest in ensuring the smooth operation of our website and improving our offerings.


Your data may be transferred to third countries outside the EU, in particular Canada and the USA, and processed there. For Canada, there is an adequacy decision by the EU Commission. For the USA, there is an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under TADPF. This data transfer is carried out on the basis of contractual obligations comparable to the Standard Contractual Clauses of the EU Commission.


Contact


Responsible Party

You may contact us on request. Responsible for data processing is:

Mamadou Aliou Diallo

Horneburg 37, 44869 Bochum, Germany

Tel.: +49 157 57163103

Email: mdiallo1983mamadou@gmail.com


Initiated Contact via Email

If you contact us by email, we collect your personal data (name, email address, message content) only to the extent you provide. The data processing serves the purpose of processing and responding to your inquiry.

If the contact is for pre-contractual measures (e.g., advice on purchase interest, quote preparation) or concerns an existing contract, processing is based on Article 6(1)(b) GDPR.

If the contact is for other reasons, processing is based on Article 6(1)(f) GDPR, justified by our legitimate interest in responding to inquiries. In this case, you have the right to object at any time to the processing of your personal data based on Article 6(1)(f) GDPR for reasons arising from your particular situation. Your email address is used only to process your inquiry and will be deleted afterward according to statutory retention periods unless you have consented to further processing.


Customer Account & Orders


Customer Account

When opening a customer account, we collect personal data as provided. Processing serves to improve your shopping experience and facilitate order processing. It is based on Article 6(1)(a) GDPR with your consent, which you can withdraw at any time without affecting the lawfulness of processing conducted before the withdrawal. The customer account will then be deleted.


Order Processing

We collect and process personal data only to the extent necessary to fulfill and process your order and respond to inquiries. Provision of data is necessary for contract conclusion; failure to provide data means no contract can be concluded. Processing is based on Article 6(1)(b) GDPR for contract fulfillment.

Data may be shared with shipping providers, dropshipping providers, payment providers, service providers for order processing, and IT service providers. In all cases, legal requirements are strictly observed, and data transmission is limited to a minimum.

Your data may be transferred to third countries outside the EU, especially Canada and the USA, and processed there. For Canada and the USA, adequacy decisions exist. Shopify is not TADPF certified; transfers are based on contractual obligations comparable to EU Standard Contractual Clauses.


Payment Providers


PayPal

We use PayPal on our website. Data processing enables you to pay via PayPal. By choosing PayPal, necessary data is transmitted to PayPal to fulfill the contract using the selected payment method. Processing is based on Article 6(1)(b) GDPR.

All PayPal transactions are subject to PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-fullAttachment.png


Stripe

We use Stripe for payment processing. Necessary data is transmitted to Stripe to complete the payment and fulfill the contract. Processing is based on Article 6(1)(b) GDPR. Stripe may perform credit checks using statistical methods and third-party agencies, based on Article 6(1)(f) GDPR.

Stripe privacy policy: https://stripe.com/de/privacyAttachment.png


Mollie

We use Mollie B.V. for payment processing. Data necessary for processing (e.g., payment info, IP, browser, order info) is transmitted to Mollie. Processing is based on Article 6(1)(b) GDPR.

Mollie privacy policy: https://www.mollie.com/de/privacyAttachment.png


Cookies

Our website uses cookies—small text files stored on your device that allow identification of your browser on subsequent visits. You have full control over cookie usage through browser settings. Stored cookies can be deleted at any time.

Technical cookies are necessary for functionality and user-friendly operation, based on Article 6(1)(f) GDPR.


Cookie Consent Manager CCM19

We use CCM19 for consent management, hosted at consenttool.haendlerbund.de. Data collected (e.g., consent status, timestamp) is stored for 13 months and not shared with third parties. Processing is based on Article 6(1)(c) GDPR.

More info: https://www.haendlerbund.de/de/datenschutzerklaerungAttachment.png


Data Retention & User Rights

Data is stored for warranty periods and legal retention requirements, then deleted unless further processing consent exists.

You have rights under Articles 15–20 GDPR (access, rectification, deletion, restriction, data portability) and Article 21 GDPR (objection to processing, direct marketing).

You may lodge a complaint with the relevant supervisory authority:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen

PO Box 20 04 44, 40102 Düsseldorf, Germany

Tel.: +49 211 384240

Fax: +49 211 38424999

Email: poststelle@ldi.nrw.de


If processing is based on legitimate interest (Art. 6(1)(f)), you can object at any time for reasons relating to your particular situation. Processing will then cease unless overriding legitimate grounds exist.


Last updated: 29.11.2023