1. Controller

The controller responsible for the processing of personal data in the context of this online shop is:

Gabriel Janik
Insterburger Str. 5
53117 Bonn
Germany

Phone: 01631862202
E-mail: zapfzeichen@gmail.com

2. General information on data processing

We take the protection of your personal data seriously.

Personal data is any information that can be used to identify you personally or that relates to an identified or identifiable natural person.

We process personal data in particular to provide our online shop, to execute and process orders, to handle payments and shipping, for customer communication, to fulfill legal obligations, and – provided that appropriate consent has been given – for analysis and marketing purposes.

Processing is carried out primarily on the basis of Art. 6(1) points (a), (b), (c), and (f) of the GDPR, depending on the respective purpose of processing.

3. Hosting and Shopify

Our online shop is operated via the e-commerce platform Shopify.

The provider for merchants in Europe is in particular:

Shopify International Limited
2nd Floor, 1–2 Victoria Buildings
Haddington Road
Dublin 4, D04 XN32
Ireland

Shopify provides us with the technical infrastructure for our online shop.

When using our shop, the following data may be processed in particular:

• IP address

• Device and browser information

• Contact details

• Name and address

• E-mail address

• Order information

• Payment information or information on payment processing

• Information about the use of the online shop

• Cookie and device identifiers

• Customer account data

Processing is carried out for the provision and security of the shop as well as for the execution of orders and contracts.

Shopify may also transfer data to affiliated companies and service providers outside the European Economic Area, in particular to Canada and the USA. The necessary data protection safeguards are applied for international data transfers.

Further information on data processing by Shopify can be found in Shopify's privacy policy.

4. Orders and contract execution

When you place an order via our online shop, we process the data required to carry out the order.

This may include in particular:

• First and last name

• Billing address

• Delivery address

• E-mail address

• if applicable, telephone number

• ordered products

• order number

• payment information

• shipping information

Processing is carried out for the performance of pre-contractual measures as well as for the fulfillment of the sales contract concluded with you in accordance with Art. 6(1)(b) GDPR.

Where statutory retention obligations exist, further storage takes place on the basis of Art. 6(1)(c) GDPR.

5. Print-on-demand and production service providers

We use an external production service provider for the manufacture and processing of our print-on-demand products.

This is:

MarketConsultive GmbH
Allgäuerstraße 35
87719 Mindelheim
Germany

Insofar as is necessary for production, order processing, or shipping, the customer's personal data may be transmitted to the service provider.

This may include, in particular, name, delivery address, and the order data required for the order and shipment.

The transfer is for the purpose of fulfilling the sales contract in accordance with Art. 6(1)(b) GDPR.

6. Shipping service provider DHL

We use DHL in particular for the delivery of our goods.

Insofar as this is necessary for delivery, the required shipping data will be transmitted to the shipping service provider. This includes in particular the name and delivery address, as well as – if required and permitted for the specific shipping process – other contact details.

Data transfer is for the purpose of contract fulfillment in accordance with Art. 6(1)(b) GDPR.

7. Payment processing

We use external payment service providers for payment processing, depending on the payment method chosen by the customer.

Shopify Payments

When paying via Shopify Payments, the data required for payment processing is transmitted to Shopify and the payment or banking partners used within the scope of Shopify Payments.

This may include, in particular, payment, transaction, order, and contact data.

Processing is carried out for the execution of payment and thus for contract fulfillment in accordance with Art. 6(1)(b) GDPR as well as, where relevant, for the fulfillment of legal obligations.

PayPal

When selecting a PayPal payment method, the data required for payment processing is transmitted to PayPal.

This may include in particular name, e-mail address, billing and payment information, and order information.

Data processing is carried out in particular for the purpose of payment processing and contract fulfillment.

Klarna / Sofort

When selecting a payment method offered by Klarna, the personal data required for payment processing is transmitted to Klarna.

Depending on the chosen payment method, Klarna may process further data and, if necessary, carry out checks, insofar as this is necessary for the provision of the chosen payment method.

Data transfer is for the purpose of payment processing and contract fulfillment.

8. Customer account

If our online shop allows the creation or use of a customer account, we process the data provided by the customer for this purpose to provide and manage the customer account.

This may include in particular name, e-mail address, address, and order information.

Insofar as processing is necessary for the performance of a contract or pre-contractual measures, it is based on Art. 6(1)(b) GDPR.

9. Contacting us

When you contact us by e-mail or via the contact form, we process the information you provide to handle your request.

This may include in particular name, e-mail address, order number, and the content of your message.

If the request is related to an existing or intended contract, processing is based in particular on Art. 6(1)(b) GDPR.

For other inquiries, processing may be based on our legitimate interest in properly handling communication in accordance with Art. 6(1)(f) GDPR.

10. Cookies and consent management

Our online shop uses cookies and similar technologies.

Technically necessary cookies may be used insofar as they are required for the operation of the online shop, the provision of the shopping cart, the execution of the checkout, security, or other functions expressly requested by the user.

In addition, analysis, statistics, and marketing technologies may be used. Insofar as consent is legally required for this, these technologies will only be activated after corresponding consent has been given.

We use the cookie banner provided by Shopify to manage cookie consents.

Users can manage or change their consent decisions via the cookie settings.

Consent once given can be revoked with effect for the future.

11. Google Analytics

We use Google Analytics to analyze the use of our online shop.

In this context, information about page views, interactions, devices and browsers used, technical information, IP-related information, as well as cookie or device identifiers may be processed.

Google Analytics is only used for analysis purposes if the required consent has been given.

Processing is carried out to that extent on the basis of your consent in accordance with Art. 6(1)(a) GDPR.

Consent once given can be revoked at any time with effect for the future via the cookie settings.

Within the scope of using Google services, personal data may be transferred to third countries, in particular the USA.

12. Google Tag Manager

We use Google Tag Manager to manage and control website tags.

Google Tag Manager allows analytical and marketing services to be technically integrated and controlled.

Insofar as personal data is processed or non-essential technologies are used in connection with the Tag Manager or the services integrated through it, their activation only takes place in accordance with the required consent.

13. Google Ads

We use Google Ads for advertising and marketing purposes.

Provided you have given your consent, technologies may be used to measure the success of our advertisements and, if applicable, to attribute interactions and purchases to advertising campaigns.

In this process, device information, browser information, usage and interaction data, as well as cookie or similar identifiers may be processed.

Processing is carried out, insofar as consent is required, on the basis of Art. 6(1)(a) GDPR.

14. Meta Pixel / Facebook / Instagram

We use – provided that appropriate consent has been given – technologies from Meta, in particular the Meta Pixel.

These technologies are used in particular to measure the success of advertising campaigns and to analyze and optimize our advertising on Facebook and Instagram.

In this process, information about visited pages, interactions with our shop, purchases, device and browser information, as well as cookie or similar identifiers may be processed.

The provider is in particular Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Insofar as consent is required for this, processing is carried out on the basis of Art. 6(1)(a) GDPR.

Within the scope of using Meta services, data may be transferred to other Meta companies or third countries.

15. TikTok Pixel

We use – provided that appropriate consent has been given – the TikTok Pixel.

The TikTok Pixel is used in particular to analyze the use of our shop and the success of advertising campaigns on TikTok and to optimize advertising measures.

In this process, information about page views, interactions, purchases, device and browser information, as well as cookie or device identifiers may be processed.

Processing is carried out, insofar as consent is required, on the basis of Art. 6(1)(a) GDPR.

Within the scope of using the service, personal data may also be transferred to recipients outside the European Economic Area.

16. Storage duration

In principle, we only store personal data for as long as is necessary for the respective processing purpose.

Insofar as statutory retention and documentation obligations exist, the relevant data will be kept for the duration prescribed by law.

After the respective processing purpose has ceased to apply and relevant statutory retention periods have expired, the data will be deleted, provided that there is no other legal basis for further processing.

17. Disclosure of personal data

Personal data will only be disclosed if this is necessary for the performance of the contract, payment or shipping processing, the production of ordered goods, due to a legal obligation, or on the basis of another permissible legal basis.

Recipients may be in particular:

• Shopify and affiliated service providers

• Print-on-demand and production service providers

• Shipping service providers

• Payment service providers

• IT and hosting service providers

• Analysis and marketing service providers, provided that appropriate consent has been given

• Authorities or other public bodies, insofar as there is a legal obligation to transmit data

18. Data subject rights

In accordance with legal requirements, you have the following rights in particular:

• Right of access to your processed personal data

• Right to rectification of inaccurate personal data

• Right to erasure of your personal data

• Right to restriction of processing

• Right to data portability

• Right to object to certain types of processing

• Right to withdraw consent given with effect for the future

To exercise your rights, you can contact us in particular at the following e-mail address:

zapfzeichen@gmail.com

19. Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with a competent data protection supervisory authority regarding the processing of your personal data.

20. Withdrawal of consent and cookie settings

Insofar as processing is based on your consent, you can withdraw your consent at any time with effect for the future.

Cookie and tracking consents can be changed or withdrawn in particular via the cookie settings provided in our online shop.

The legality of the processing carried out until the withdrawal remains unaffected.

21. Security

We take appropriate technical and organizational measures to protect personal data against loss, manipulation, unauthorized access, and other impermissible processing.

Data transmission between your browser and our online shop is generally encrypted.

22. Changes to this privacy policy

We reserve the right to adapt this privacy policy if the services used, the data processing, or legal requirements change.

The current version published on our website shall apply.

As of: October 2026