Legal

Privacy Policy

Template privacy policy (GDPR). Replace all [PLACEHOLDERS] and have it reviewed before use.

1. Controller

The controller responsible for data processing on this website is:
[COMPANY LEGAL NAME]
[ADDRESS]
Email: [EMAIL]

2. General information

We take the protection of your personal data seriously and process it only in accordance with the EU General Data Protection Regulation (GDPR) and applicable national law. This policy explains what data we collect, why, and what rights you have.

3. Hosting & store platform

Our online store is hosted by Shopify Inc. Shopify collects and stores data required to operate the store (e.g. orders, browsing data). More information: Shopify Privacy Policy.

4. Data we process

When you visit our site we process server log data (IP address, browser, time of request). When you place an order we process your name, contact details, shipping/billing address and order details. When you subscribe to our newsletter we process your email address.

5. Purposes & legal bases

We process your data to perform the purchase contract (Art. 6(1)(b) GDPR), to comply with legal obligations such as tax retention (Art. 6(1)(c) GDPR), and on the basis of our legitimate interest in a secure, functional store (Art. 6(1)(f) GDPR). Newsletter processing is based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

6. Payment providers

When you pay, the data required for payment is transmitted to the relevant payment service provider (e.g. [PAYMENT PROVIDERS]) to process the transaction.

7. Email marketing

If you subscribe to our newsletter, your email address is processed by our email marketing provider [EMAIL PROVIDER, e.g. Klaviyo] to send you marketing messages. You can unsubscribe via the link in every email.

8. Cookies

We use cookies and similar technologies that are necessary for the store to function and, with your consent, for analytics and marketing. You can manage your preferences in your browser or via our cookie banner where available.

9. Recipients & transfers

We share data with service providers (hosting, payment, shipping, email) only to the extent necessary. Where data is transferred outside the EU/EEA, we ensure appropriate safeguards such as EU Standard Contractual Clauses.

10. Retention

We store your data only as long as necessary for the stated purposes or as required by statutory retention periods (e.g. commercial and tax law).

11. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing. You may withdraw consent at any time and lodge a complaint with a supervisory authority.