Datenschutzerklärung

 

This Privacy Policy describes how info@shopakiraa.shop (“we,” “us,” or “our”) collects, uses, discloses, stores, and otherwise processes personal data when you visit our online store, make a purchase, communicate with us, or otherwise use our services.

We respect your privacy and process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable German data protection and digital privacy laws.

1. Data Controller

For the purposes of the GDPR, the controller responsible for the processing of personal data through this online store is:

info@shopakiraa.shop
Email: info@info@shopakiraa.shop

If you have questions about this Privacy Policy or wish to exercise your privacy rights, you may contact us using the email address above.

2. Personal Data We Collect

Depending on how you interact with our store, we may collect the following categories of personal data.

Information You Provide Directly

When you place an order, create or use a customer account, contact us, subscribe to communications, or otherwise interact with our store, we may collect information including:

• Name;

• Billing address;

• Shipping address;

• Email address;

• Telephone number;

• Account and login information;

• Order information;

• Products purchased, returned, or considered;

• Payment and transaction information;

• Communications sent to customer service;

• Reviews, feedback, or other information you voluntarily provide;

• Marketing preferences and consent records.

We generally do not directly store complete payment card details. Payment information may be processed by Shopify, payment processors, banks, or other payment service providers used to complete your transaction.

Information Collected Automatically

When you access or use our website, certain technical information may be collected automatically, including:

• IP address;

• Browser type and version;

• Device type;

• Operating system;

• Language settings;

• Time zone;

• Referring website;

• Pages viewed;

• Date and time of visits;

• Website interactions;

• Shopping cart activity;

• Cookie identifiers;

• Device identifiers;

• Approximate location derived from technical information;

• Information relating to website security, fraud prevention, and performance.

This information may be collected through cookies, pixels, server logs, APIs, and similar technologies.

3. How We Use Personal Data

We may process personal data for the following purposes:

Providing Our Services

We use personal data to:

• Process and fulfil orders;

• Process payments;

• Arrange shipping and delivery;

• Provide order confirmations and updates;

• Process returns and refunds;

• Maintain customer accounts;

• Provide products and services requested by customers;

• Respond to enquiries and customer service requests.

Operating and Improving Our Store

We may use information to:

• Operate and maintain our website;

• Improve website functionality;

• Understand how customers use our store;

• Troubleshoot technical issues;

• Improve products and customer service;

• Maintain the security and reliability of our services.

Fraud Prevention and Security

We may process information to:

• Detect suspicious or fraudulent transactions;

• Protect customers and our business;

• Prevent misuse of our services;

• Maintain website and account security;

• Investigate possible violations of our terms or applicable law.

Legal and Regulatory Compliance

We may process and retain information where necessary to:

• Comply with tax, accounting, consumer protection, and other legal obligations;

• Maintain legally required business records;

• Respond to lawful requests from public authorities;

• Establish, exercise, or defend legal claims;

• Enforce agreements and policies.

Marketing and Advertising

Where legally permitted, we may use personal data to send marketing communications or provide relevant advertising.

Where consent is legally required, we will only send such communications or use non-essential tracking technologies after obtaining the required consent.

You may withdraw consent to marketing communications at any time by using an unsubscribe option included in the communication or by contacting us at info@info@shopakiraa.shop.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

4. Legal Bases for Processing

Under the GDPR, we process personal data only where a valid legal basis applies.

Depending on the circumstances, processing may be based on:

Performance of a Contract

We process personal data where necessary to enter into or perform a contract with you, including processing orders, collecting payments, arranging delivery, handling returns, and providing customer support.

Compliance With Legal Obligations

We may process personal data where required to comply with legal obligations applicable to our business, including tax, accounting, regulatory, and consumer protection requirements.

Legitimate Interests

We may process personal data where necessary for our legitimate interests or those of a third party, provided that those interests are not overridden by your fundamental rights and freedoms.

Such legitimate interests may include:

• Operating and improving our business;

• Protecting our website and customers;

• Preventing fraud;

• Maintaining network and information security;

• Responding to customer enquiries;

• Establishing or defending legal claims;

• Improving our products and services.

Consent

Where required by law, we process personal data based on your consent, including certain marketing, analytics, advertising, and non-essential cookie activities.

You may withdraw your consent at any time.

5. Shopify

Our online store is powered by Shopify.

Shopify provides the e-commerce infrastructure that allows us to offer products and services to you. As part of providing its services, Shopify may process personal data relating to visitors and customers on our behalf and in accordance with its applicable contractual and data protection obligations.

Personal data processed through Shopify may be handled by Shopify entities, affiliated companies, and authorized subprocessors involved in providing the Shopify platform and related services.

We remain responsible for determining the purposes for which we collect and use customer personal data through our store, subject to applicable law.

6. Payment Processing

When you make a purchase, payment-related information may be provided to payment processors, financial institutions, Shopify, and other service providers necessary to authorize and complete your transaction.

Payment providers may process information including:

• Name;

• Billing details;

• Payment method;

• Transaction amount;

• Payment authorization information;

• Fraud-prevention information;

• Other data required to process the payment.

These providers may process personal data according to their own legal obligations and privacy policies where they act independently.

7. Shipping and Order Fulfilment

We may disclose necessary personal data to shipping companies, logistics providers, fulfilment partners, and other service providers involved in delivering your order.

The information shared may include:

• Name;

• Shipping address;

• Telephone number;

• Email address;

• Order information;

• Delivery instructions.

We disclose only information reasonably necessary for the relevant provider to perform its services.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate the store, remember preferences, maintain shopping carts, provide security, measure website performance, and, where permitted, support analytics and advertising.

Some cookies and technologies are necessary for the website and requested services to function. Other cookies, particularly those used for analytics, personalization, or advertising, may require your consent under applicable law.

Where consent is required, such technologies will be used only after the relevant consent has been obtained.

You may be able to manage your cookie preferences through the privacy or cookie controls available on our website.

Withdrawing or refusing consent to non-essential cookies will not prevent you from using the basic functions of the store, although certain optional features may work differently.

9. Disclosure of Personal Data

We may disclose personal data to the following categories of recipients where necessary:

• Shopify and its authorized service providers;

• Payment processors and financial institutions;

• Shipping and logistics providers;

• Order fulfilment providers;

• Hosting, cloud, and IT service providers;

• Security and fraud-prevention providers;

• Customer support providers;

• Analytics and advertising providers where legally permitted;

• Professional advisers, including accountants, auditors, and legal advisers;

• Government authorities, regulators, courts, or law-enforcement authorities where disclosure is legally required;

• Parties involved in a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction.

We do not disclose personal data to third parties without a valid purpose and legal basis.

10. International Data Transfers

Some of our service providers, including companies involved in operating the Shopify platform, may process personal data outside Germany or the European Economic Area.

Where personal data is transferred to a country outside the European Economic Area that has not been recognized as providing an adequate level of data protection, appropriate safeguards will be used where required by law.

Such safeguards may include:

• European Commission adequacy decisions;

• European Commission Standard Contractual Clauses;

• Other legally recognized transfer mechanisms and safeguards.

Additional technical and organizational safeguards may also be implemented where required.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy or for as long as required under applicable law.

Retention periods may depend on factors including:

• The nature of the personal data;

• The purpose for which it was collected;

• The duration of our contractual relationship with you;

• Tax and accounting requirements;

• Consumer protection requirements;

• Fraud-prevention needs;

• Applicable limitation periods;

• The need to establish, exercise, or defend legal claims.

When personal data is no longer required, we will delete, anonymize, or otherwise securely dispose of it where appropriate and legally permitted.

12. Data Security

We use appropriate technical and organizational measures intended to protect personal data against:

• Unauthorized access;

• Accidental loss;

• Destruction;

• Alteration;

• Unauthorized disclosure;

• Unlawful processing.

However, no method of internet transmission or electronic storage can guarantee absolute security.

Customers are also responsible for maintaining the confidentiality of passwords and account credentials associated with their accounts.

13. Your Rights Under the GDPR

Subject to the requirements and limitations of applicable law, you may have the following rights regarding your personal data:

Right of Access

You may request confirmation as to whether we process personal data concerning you and request access to that data and related information.

Right to Rectification

You may request correction of inaccurate personal data and completion of incomplete personal data.

Right to Erasure

You may request deletion of your personal data where the legal requirements for erasure are satisfied.

The right to erasure does not apply where continued processing is legally required or otherwise permitted under applicable law.

Right to Restriction of Processing

You may request that processing of your personal data be restricted in certain circumstances.

Right to Data Portability

Where applicable, you may request to receive personal data that you provided to us in a structured, commonly used, and machine-readable format and may have the right to transmit that data to another controller.

Right to Object

Where processing is based on legitimate interests, you may have the right to object to such processing based on circumstances relating to your particular situation.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

In particular, you may lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, your place of work, or the place of the alleged infringement.

14. Exercising Your Privacy Rights

To exercise your applicable privacy rights, contact us at:

Email: info@info@shopakiraa.shop

When processing a privacy request, we may request information reasonably necessary to verify your identity and protect personal data against unauthorized disclosure.

We will respond to valid requests in accordance with the time limits and requirements established by applicable law.

15. Direct Marketing

Where we send electronic marketing communications, we will do so only where there is an appropriate legal basis.

Where consent is required, you may withdraw that consent at any time.

You may unsubscribe from promotional emails using the unsubscribe mechanism contained in those emails or by contacting:

info@info@shopakiraa.shop

Transactional communications concerning orders, payments, shipping, returns, security, or other service-related matters are not promotional communications and may still be sent where necessary to provide our services or comply with legal obligations.

16. Automated Processing and Fraud Prevention

We and our service providers may use automated systems to help detect fraud, suspicious activity, security threats, and other risks associated with transactions or use of the website.

Where a decision based solely on automated processing produces legal effects or similarly significantly affects you, we will comply with any additional requirements applicable under the GDPR, including applicable safeguards and rights.

17. Third-Party Websites and Services

Our website may contain links to websites, applications, or services operated by third parties.

We are not responsible for the privacy practices of independent third-party websites or services. If you follow a third-party link, personal data you provide to that third party will be processed according to that third party's own privacy practices.

We encourage you to review the privacy information provided by third-party services before providing personal data.

18. Children's Privacy

Our store is intended for general online shopping and is not specifically directed at children.

We do not knowingly seek to collect personal data from children in circumstances where parental consent or another legal authorization would be required but has not been obtained.

If you believe that a child has provided personal data to us unlawfully, please contact us at info@info@shopakiraa.shop so that we can review the matter and take appropriate action.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our business practices;

• Our services;

• Technologies used by our store;

• Legal or regulatory requirements;

• Operational or security requirements.

When this Privacy Policy is updated, the revised version will be published on our website with an updated “Last Updated” date.

Where required by applicable law, we will provide additional notice or obtain consent before materially changing how personal data is processed.

20. Contact Information

If you have questions about this Privacy Policy, the processing of your personal data, or your privacy rights, please contact:

Data Controller: info@shopakiraa.shop
Email: info@info@shopakiraa.shop

We will handle privacy-related enquiries and requests in accordance with applicable German and European Union data protection law.