Privacy Policy

The protection of your personal data is important to us. In this privacy policy, we inform you about which data we process in connection with our online shop.

1. Controller

The controller for data processing is:

Florian Günther
Shellax-Cozy
Heilbronn 37
91555 Feuchtwangen
Germany
Email: shellax@gmx.net

2. Data Collected

We process the data that you provide to us in the context of an order, contact, or use of our shop. This may include name, address, email address, order data, payment information, and technical access data.

3. Purposes of Processing

We use personal data for processing orders, for payment and shipping processing, for customer communication, for fulfilling legal obligations, and for the secure and functional provision of our online shop.

4. Legal Bases

Processing is carried out, where applicable, on the basis of Art. 6 Para. 1 lit. b GDPR for the performance of a contract, Art. 6 Para. 1 lit. c GDPR for compliance with legal obligations, Art. 6 Para. 1 lit. f GDPR due to legitimate interests, and Art. 6 Para. 1 lit. a GDPR if you have given consent.

5. Shopify

Our shop is operated via Shopify. The provider is Shopify International Limited, 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes data required for the operation of the shop, order processing, and technical provision.

6. Payment and Shipping Service Providers

For payment processing and delivery, we pass on the necessary data to the payment service providers selected at checkout and to shipping service providers.

7. Cookies and Technical Data

Our shop may use cookies and similar technologies to provide necessary shop functions, enable orders, ensure security, and analyze shop usage. Where consent is required, processing is based on your consent.

8. Storage Period

We store personal data only for as long as necessary for the stated purposes or as required by statutory retention obligations. Tax and commercial law relevant documents can be stored for up to ten years.

9. Your Rights

Under the statutory conditions, you have the right to information, rectification, erasure, restriction of processing, data portability, and objection to certain processing operations. You can revoke given consents at any time with effect for the future.

You also have the right to lodge a complaint with a competent data protection supervisory authority.