Datenschutzerklärung

This Privacy Policy describes how shopmixology.shop collects, uses, discloses, stores, and otherwise processes personal data when you visit our online store, purchase products, contact us, create or use customer functionality, or otherwise interact with shopmixology.shop.

For privacy-related questions, contact:

Email: info@shopmixology.shop

1. Scope

This Privacy Policy applies to personal data processed in connection with shopmixology.shop, including information collected through our Shopify-powered website, checkout process, customer service communications, order processing, delivery activities, fraud-prevention measures, analytics, and marketing activities.

2. Data Controller

For purposes of this Privacy Policy and to the extent shopmixology.shop determines the purposes and means of processing customer personal data, shopmixology.shop acts as the data controller.

Privacy contact:

info@shopmixology.shop

The GDPR requires transparency concerning the controller, purposes of processing, legal bases, recipients, retention and individual rights.

3. Personal Data We May Collect

Depending on how you interact with our store, we may collect:

Identification and Contact Information

This may include:

• Name
• Email address
• Telephone number
• Billing information
• Delivery address
• Contact preferences

Order and Transaction Information

This may include:

• Products purchased
• Order number
• Order date
• Order value
• Shipping status
• Return and refund information
• Customer service history

Payment-Related Information

Payments are generally processed through third-party payment providers.

We may receive limited payment-related information such as payment status, payment method type, transaction reference, billing information, or fraud-screening results.

Payment processors may process additional financial information under their own privacy terms and legal obligations.

Device and Technical Information

When you visit our website, certain technical data may be processed automatically, including:

• IP address
• Browser type
• Device type
• Operating system
• Language settings
• Cookie identifiers
• Approximate location derived from IP information
• Website navigation information
• Referring website
• Date and time of access

Customer Service Communications

If you contact us, we may process:

• Your email address
• Your name
• Order information
• The content of your message
• Attachments you send
• Previous correspondence necessary to handle the request

4. Purposes and Legal Bases

We process personal data only where there is an appropriate legal basis.

Under Article 6 GDPR, relevant legal bases can include consent, performance of a contract, compliance with legal obligations, and legitimate interests.

Contract Performance

We may process personal data where necessary to:

• Process orders
• Receive payment
• Fulfil purchases
• Arrange shipping
• Provide order confirmations
• Provide customer support
• Process returns
• Issue refunds
• Handle warranty or conformity claims

The legal basis is generally Article 6(1)(b) GDPR.

Legal Obligations

We may process information where necessary to comply with legal obligations relating to matters such as:

• Accounting
• Taxation
• Recordkeeping
• Consumer protection
• Product safety
• Fraud investigations
• Regulatory requests

The legal basis is generally Article 6(1)(c) GDPR.

Legitimate Interests

Where appropriate, we may process information for legitimate interests such as:

• Securing our website
• Preventing fraud
• Detecting abuse
• Protecting our legal rights
• Improving store functionality
• Analysing general service performance
• Handling and defending legal claims

We rely on legitimate interests only where those interests are not overridden by the rights and freedoms of affected individuals.

Consent

Where required, we may rely on consent for purposes such as:

• Non-essential cookies
• Certain analytics technologies
• Certain advertising technologies
• Electronic marketing

You may withdraw consent at any time for future processing where processing is based on consent.

5. Shopify

Our online store is powered by Shopify.

Shopify provides the technical e-commerce infrastructure that enables us to operate the store, display products, process customer interactions, and manage orders.

Depending on the Shopify services and features used, Shopify may process customer information as a service provider, processor, or in certain circumstances under its own legal responsibilities.

Shopify states that merchants selling to people in Europe generally act as controllers of their customer data and that Shopify may act as a processor in relevant circumstances.

6. Payment Providers

When you make a purchase, payment information may be shared with or collected directly by payment processors.

We use payment providers only to the extent necessary to provide payment functionality, process transactions, address disputes, prevent fraud, and meet legal requirements.

7. Shipping and Fulfilment Providers

Information necessary to fulfil and deliver orders may be disclosed to shipping, logistics, warehouse, fulfilment, or carrier providers.

This information may include:

• Customer name
• Delivery address
• Contact details
• Order reference
• Package information

Such sharing is necessary for order fulfilment.

8. Cookies and Similar Technologies

shopmixology.shop may use cookies and similar technologies.

Some technologies are strictly necessary for functions such as:

• Shopping cart functionality
• Checkout security
• Session management
• Fraud prevention
• Authentication
• Security

Other technologies may be used, subject to applicable consent requirements, for:

• Analytics
• Performance measurement
• Advertising
• Personalisation
• Marketing attribution

Under §25 TDDDG, accessing or storing information on a user's terminal equipment generally requires consent unless the technology is strictly necessary for transmitting communications or providing a digital service expressly requested by the user.

Where required, non-essential technologies will not be activated until the relevant consent has been obtained.

9. Marketing Communications

Where legally permitted, we may send customers marketing communications.

Where consent is legally required, such communications will be sent only after obtaining the necessary consent.

Customers may unsubscribe from marketing emails through the unsubscribe mechanism contained in the communication or by contacting:

info@shopmixology.shop

Unsubscribing from marketing does not prevent us from sending transactional communications necessary to fulfil orders or respond to customer requests.

10. Fraud Prevention and Security

We may process personal information to detect, investigate, and prevent:

• Payment fraud
• Account misuse
• Suspicious transactions
• Automated attacks
• Unauthorised access
• Security incidents
• Abuse of promotional programs

Such processing may be based on contractual necessity, legal obligations, or legitimate interests depending on the circumstances.

11. Disclosure of Personal Information

We may disclose information to categories of recipients including:

• Shopify
• Payment processors
• Shipping and logistics providers
• Fulfilment providers
• IT service providers
• Hosting providers
• Analytics providers where legally permitted
• Professional advisers
• Fraud prevention providers
• Public authorities where disclosure is legally required

We do not disclose personal data merely because an unrelated third party requests it.

12. International Data Transfers

Some service providers may process personal data outside Germany or the European Economic Area.

Where GDPR requirements apply to international transfers, we take appropriate steps intended to ensure an applicable lawful transfer mechanism is available, such as:

• An adequacy decision
• Standard Contractual Clauses
• Other legally recognised safeguards

Shopify also notes that GDPR does not itself require all European customer data to remain physically stored within Europe, but international transfers must receive appropriate protection.

13. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or for applicable legal requirements.

Retention periods may depend on:

• Contractual obligations
• Tax requirements
• Accounting rules
• Consumer claims
• Fraud prevention
• Legal limitation periods
• Regulatory requirements
• Dispute resolution

When information is no longer required, it may be deleted, anonymised, or securely archived where continued retention is legally required.

14. Your GDPR Rights

Subject to applicable conditions and exceptions, individuals may have rights including:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object to certain processing
• Right to withdraw consent
• Right to lodge a complaint with a competent supervisory authority

Requests may be submitted to:

info@shopmixology.shop

We may request reasonable information to verify identity before fulfilling a privacy request.

15. Right to Object to Direct Marketing

Where personal data is processed for direct marketing, you may object to that processing.

Once a valid objection is received, the relevant personal data will no longer be processed for direct marketing purposes.

16. Withdrawal of Consent

Where processing is based on consent, consent may be withdrawn at any time.

Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

17. Automated Processing

Certain e-commerce, payment, security, and fraud-prevention technologies may automatically evaluate transaction information.

Where automated decision-making produces legal or similarly significant effects and is regulated by applicable data protection law, the rights required by law will be respected.

18. Security

We use reasonable administrative, organisational, and technical safeguards intended to protect personal information against:

• Unauthorised access
• Loss
• Misuse
• Alteration
• Disclosure
• Destruction

No method of internet transmission or electronic storage can be guaranteed to be completely secure.

19. Children's Privacy

Our store is not intended to knowingly collect personal information from children who are legally incapable of entering into the relevant transaction or giving valid consent where consent is required.

If you believe a child has provided personal data improperly, contact info@shopmixology.shop.

20. External Links

Our website may contain links to third-party websites.

Third-party sites are governed by their own privacy practices, and shopmixology.shop is not responsible for the independent privacy practices of unrelated websites.

21. Changes to This Privacy Policy

We may update this Privacy Policy when necessary because of:

• Changes in law
• Regulatory guidance
• Shopify functionality
• Business processes
• Security practices
• Service providers
• Website functionality

The current version will be published on shopmixology.shop.

22. Complaints

If you believe your personal data has been processed unlawfully, please contact us first so that we may investigate.

You also have the right, where applicable, to lodge a complaint with a competent data protection supervisory authority in Germany or another competent EU/EEA supervisory authority.

23. Contact

For questions, privacy requests, objections, withdrawal of consent, or other privacy matters:

shopmixology.shop
Email: info@shopmixology.shop