Privacy policy

Controller

Thomas Schlecht, c/o IP-Management #9732, Ludwig-Erhard-Straße 18, 20459 Hamburg, Germany, folviashop@gmail.com.

What we process and why

• Orders: name, addresses, email, phone, order contents and payment status, to fulfil your order (Art. 6 (1) b GDPR).
• Legal retention: order and invoice records up to 10 years (Art. 6 (1) c GDPR; § 147 AO, § 257 HGB).
• Security and fraud prevention: technical data such as IP address (Art. 6 (1) f GDPR).
• Newsletter, analytics and marketing cookies: only with your consent (Art. 6 (1) a GDPR, § 25 TDDDG), which you can withdraw at any time.

Recipients

• Shopify (store hosting and checkout; Shopify International Ltd., Ireland, and Shopify Inc., Canada/USA).
• Payment provider: Shopify Payments (Stripe).
• Our fulfilment partner CJdropshipping in China: your name, delivery address, phone number and order contents are sent to CJ so the order can be packed and shipped. This transfer to a country without an EU adequacy decision is necessary to perform the contract you requested (Art. 49 (1) b GDPR).
• Parcel carriers for delivery.

Transfers outside the EU

USA (Shopify, payment providers): EU-U.S. Data Privacy Framework or Standard Contractual Clauses. China (CJdropshipping): see above.

Your rights

Access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), withdrawal of consent (Art. 7 (3) GDPR), and the right to complain to a supervisory authority, e.g. the Hamburg Commissioner for Data Protection and Freedom of Information. Contact: folviashop@gmail.com.