Privacy policy

for The German Gift Shop

Last updated: 7 October 2026

1. Controller

Nadine Rautenstrauch
The German Gift Shop
Schmetterlingsweg 5 1/2
86199 Augsburg
Germany

2. General Information on Data Processing

We process personal data exclusively in accordance with applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable data protection regulations.

Personal data means any information relating to an identified or identifiable natural person.

Please read this Privacy Policy carefully.

3. Hosting / Shop System / Technical Provision

Our online shop is operated via Shopify.

When you visit our shop, Shopify processes technical usage data, your IP address, browser data, device information, and data required for order processing.

Further information can be found in Shopify’s Privacy Policy:
https://www.shopify.com/legal/privacy

3.1 Shopify Network Intelligence

We use Shopify Network Intelligence. In this context, Shopify may process information about the use of our online shop together with data from interactions with Shopify and other Shopify merchants in order to provide so-called enhanced services. These may include personalising the shopping experience, improving products and shop features, analysing customer interactions, and optimising and delivering relevant advertising.

Information about activities in our shop may be processed for these purposes by Shopify and other service providers and, where applicable, may also be processed in countries outside the European Union or the European Economic Area.

Further information about the processing of personal data by Shopify can be found in Shopify’s Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers

Information about exercising your data protection rights vis-à-vis Shopify, including options for withdrawing consent or objecting to certain processing activities, can be found in the Shopify Privacy Portal:
https://privacy.shopify.com/

4. Server Log Files

When you access this website, the hosting provider or technical infrastructure automatically collects information in so-called server log files. This includes in particular:

IP address
Date and time of access
Browser type / browser version
Operating system
Referrer URL
Pages / files accessed
Access status

Processing is carried out to ensure the technical operation and security of the system and for error analysis on the basis of Art. 6(1)(f) GDPR.

5. Orders and Contract Processing

When you place an order, we process in particular:

Name
Billing and delivery address
Email address
Telephone number, if provided
Order data
Payment information
Shipping information

Processing is carried out in order to take steps prior to entering into a contract and to perform the contract pursuant to Art. 6(1)(b) GDPR.

Providing the data required for ordering, payment and delivery is necessary for entering into and performing the contract. Without this data, we may not be able to accept or fulfil an order.

6. Payment Service Providers

We use external payment service providers and payment networks to process payments. Depending on the payment method you select, the data required for payment processing will be transmitted to the respective provider.

This may include in particular:

Name and billing address
Email address and, where applicable, telephone number
Payment and transaction data
Order amount and currency
Technical information
Depending on the payment method, other information required for payment processing, authentication or fraud prevention

Processing is generally carried out for the performance of the contract pursuant to Art. 6(1)(b) GDPR. Where processing is additionally required to comply with legal obligations or to prevent fraud, further statutory legal bases may apply.

We currently offer, in particular, the following payment methods and payment services:

Shopify Payments / Shopify

Some of our payments are processed via Shopify or Shopify Payments. Payment and transaction data may be processed by Shopify as well as by the payment service providers and card networks involved in the respective payment.

Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers

PayPal

If you select PayPal, the data required for payment processing will be transmitted to PayPal. PayPal processes, among other things, identification, account, card and transaction data for payment processing as well as fraud and risk prevention.

Klarna

If you select a Klarna payment method, contact, identification, payment, device and transaction data in particular may be transmitted to Klarna. Klarna may process this data for purposes including payment processing, identity verification, credit checks and fraud prevention.

Apple Pay

When using Apple Pay, the data required for payment is processed via Apple Pay, the respective card company, the card-issuing bank and our payment service provider. Apple states that the actual card number is not transmitted to the merchant when making an Apple Pay payment.

Apple Pay Privacy Information:
https://www.apple.com/de/legal/privacy/data/de/apple-pay/

Google Pay

When using Google Pay, account, payment, transaction, device and, where applicable, location information may be processed by Google or the payment providers involved.

Google Payments Privacy Notice:
https://payments.google.com/payments/apis-secure/get_legal_document?ldl=de&ldo=0&ldt=privacynotice

Shop Pay

Shop Pay is a payment and checkout service provided by Shopify. When using Shop Pay, Shopify processes account, contact, order and payment information in particular in accordance with its privacy provisions.

Visa

For card payments using Visa, payment and transaction data may be processed via the Visa payment network.

Mastercard

For card payments using Mastercard, information including the card number, merchant, location, date and transaction amount may be processed via the Mastercard payment network.

American Express

For payments using American Express, payment and transaction data may be processed by American Express.

Privacy Centre:
https://www.americanexpress.com/amex/de-de/firma/legal/datenschutz-center/

UnionPay

For payments via UnionPay, payment and transaction data may be processed by UnionPay International and other parties involved in the payment.

The specific data processed depends on the payment method you select and on the terms and conditions of the respective payment service provider, card-issuing bank and payment network.

7. Shipping Service Providers

For the delivery of your order, we transmit the personal data required for shipping to the shipping and logistics service providers we use.

This may include in particular:

Name
Delivery address
Email address, where required for shipping information
Telephone number, where required for delivery
Order and shipment information
Shipment and tracking numbers

Processing is carried out for the performance of the contract and delivery of your order pursuant to Art. 6(1)(b) GDPR.

We currently use, in particular, the following shipping service providers:

DHL / Deutsche Post

For shipping with DHL or Deutsche Post, the data required for transport and delivery will be transmitted to the respective responsible company of the DHL Group or Deutsche Post AG. For international shipments, data may also be passed on to foreign postal and logistics service providers where this is necessary for delivery.

Privacy Information:
https://www.deutschepost.de/datenschutz

UPS

For shipping via UPS, the data required for processing and delivering the shipment will be transmitted to United Parcel Service or the respective responsible UPS company. UPS processes, among other things, contact and shipping data as well as shipment tracking information.

Privacy Notice:
https://www.ups.com/de/de/support/shipping-support/legal-terms-conditions/privacy-notice

For international deliveries, it may be necessary to transmit personal data to shipping partners, customs authorities or other parties involved in transportation in the respective recipient country. Such processing takes place to the extent necessary to carry out the delivery and comply with legal obligations.

For the technical processing of shipments, we may also use the Shopify apps “Post & DHL Shipping”, “DHL Express Commerce” and “UPS Shipping (Official)”. In this context, order, recipient and shipping data required for generating shipping labels, shipment tracking and delivery may be exchanged between Shopify and the respective shipping service provider.

8. Product Reviews / Judge.me

We use Judge.me to display and manage product reviews.

Following a purchase, order data and the email address may be processed to manage product reviews in the shop and – where the relevant consent has been given or the statutory requirements for permissible contact have been met – to send an invitation to submit a review.

Depending on the purpose, processing is based on Art. 6(1)(a) GDPR, Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Further information:
https://judge.me/privacy

9. Live Chat / Customer Communication

Where a live chat or messaging service, such as Shopify Inbox or comparable chat functions, is offered on this website, personal data may be processed when you use it, including in particular:

Name
Email address
Message content
Technical usage data
Time of the enquiry

Processing is carried out to handle your enquiry and for customer communication pursuant to Art. 6(1)(b) GDPR and/or Art. 6(1)(f) GDPR.

When using Shopify-based chat functions, Shopify’s privacy information also applies:
https://www.shopify.com/legal/privacy

10. Withdrawal Processing / EU Withdrawal Button

For the technical provision and processing of declarations of withdrawal, we use the Shopify app “EU Widerrufsbutton” provided by 401layers UG (haftungsbeschränkt), Dorothea-Erxleben-Str. 1a, 40721 Hilden, Germany.

When using the withdrawal function, data including name, email address, order and return data as well as technical information such as IP address, browser and device information may be processed. The processing serves to receive, document and process declarations of withdrawal and to send the required confirmation of receipt.

Processing is carried out pursuant to Art. 6(1)(b) GDPR for the performance or reversal of the contract and, where statutory documentation or retention obligations apply, pursuant to Art. 6(1)(c) GDPR.

Further information about data processing by the provider can be found at:

EU Widerrufsbutton Privacy Policy:
https://euwiderrufsbutton.de/privacypolicy

11. Invoices and Shipping Documents / Order Printer

For the creation and provision of invoices, delivery notes, shipping documents and other order documents, we use Order Printer Pro and Order Printer Templates provided by Order Printer / Shop Circle.

For the creation of the respective documents, data including name, billing and delivery address, email address, telephone number, order information, product data, payment information and other data required for document creation may be processed.

Processing is carried out for contract performance pursuant to Art. 6(1)(b) GDPR and to fulfil statutory commercial and tax documentation obligations pursuant to Art. 6(1)(c) GDPR.

Further information:

Shop Circle Privacy Policy:
https://shopcircle.co/pages/privacy-policy

12. Payment Reconciliation and Accounting / PayData Integration

For the automated processing and allocation of payment transactions and to support our accounting, we use PayData Integration, a service provided by NetConnections GmbH.

In this context, payment and transaction data, payment status, amounts, payment providers, order references and other information required for payment reconciliation may be processed.

Processing is carried out for contract performance pursuant to Art. 6(1)(b) GDPR, to fulfil commercial and tax obligations pursuant to Art. 6(1)(c) GDPR and, where necessary, on the basis of our legitimate interest in efficient and proper accounting pursuant to Art. 6(1)(f) GDPR.

Further information:

PayData / NetConnections Privacy Information:
https://paydata-api.com/datenschutz/

13. Shopify Messaging / Email Marketing

Where we use Shopify to send newsletters, product information or email marketing, we process in particular:

Email address
Name, where applicable
Interaction data such as opens and clicks
Information provided voluntarily

Where legally required, registration takes place using a double opt-in procedure.

Processing for email marketing purposes is generally based on your consent pursuant to Art. 6(1)(a) GDPR. Where contact without consent is legally permissible, in particular under the conditions of Section 7(3) of the German Unfair Competition Act (UWG), it may be carried out on the basis of the applicable statutory provisions.

Further information:
https://www.shopify.com/legal/privacy

For certain contact, registration or marketing forms, we use Shopify Forms. The data you enter into the respective form is processed via Shopify in accordance with the stated purpose.

14. Product Labels / Algoshop Promo Label

We use the Shopify app Algoshop Promo Label & Badge by algoshop.ai to display product labels, badges and promotional information.

As part of the technical integration, the app may have access to shop and product data and – depending on the respective Shopify permissions – personal customer data. Processing is carried out for the technical provision and display of the product labels used, based on our legitimate interest in presenting our product range in a clear and sales-promoting manner pursuant to Art. 6(1)(f) GDPR.

The provider is based in Singapore. Where personal data is transferred to a third country, such transfer is carried out in compliance with the requirements of Art. 44 et seq. GDPR.

Further information:

Algoshop Privacy Policy:
https://algoshop.ai/privacypolicy/

15. Documentation of Consent to Terms

To display and document consent to our General Terms and Conditions and other legal notices, we use the Shopify app RA Terms AGB Checkbox by Relentless Apps.

In connection with the ordering process, order information and information about whether and at what time required consent was given may be processed.

Processing is carried out for the performance of the contract pursuant to Art. 6(1)(b) GDPR and on the basis of our legitimate interest in legally compliant documentation of declarations of consent pursuant to Art. 6(1)(f) GDPR.

Further information:

Relentless Apps Privacy Policy:
https://www.relentlessapps.com/privacy-policy

16. Sales via Agentic Storefronts / AI-Powered Sales Channels

We use Shopify features that allow products to be additionally displayed, recommended or sold via digital sales channels, search systems, AI-powered shopping assistants or chat-based shopping environments, such as Agentic Storefronts.

Product-related information such as product titles, prices, product images, variants, availability or shipping information may be transmitted to technical partners or platforms.

If an order is placed, personal data is processed for the purpose of contract performance.

Legal basis:

Art. 6(1)(b) GDPR
Art. 6(1)(f) GDPR

Further information:
https://www.shopify.com/legal/privacy
https://www.shopify.com/legal/terms-agentic-storefronts

17. Channable – Feed Management and Product Data Optimisation

We use the Channable service provided by ProductImpulse B.V., Kromme Nieuwegracht 66, 3512 HL Utrecht, the Netherlands, to manage, optimise and distribute our product data across various sales, advertising and marketing channels.

As part of its use, product and shop data such as product titles, descriptions, prices, availability, variants, product images and other product information may be transmitted to and processed by Channable.

Where personal data is processed as part of the Channable functions we use, such processing is carried out in particular for the technical provision, management and optimisation of the connected services. Channable may act as a processor on our behalf. Channable states that it stores personal data in encrypted form and implements appropriate technical and organisational measures to protect the data.

According to Channable, the main database and product feeds are stored in European data centres.

Where personal data is concerned, processing is based on Art. 6(1)(b) GDPR where it is required for contract performance and/or Art. 6(1)(f) GDPR based on our legitimate interest in the efficient management and optimisation of our product data and sales channels.

Further information about data processing by Channable can be found in Channable’s Privacy Policy:

Further information about data security at Channable:
https://www.channable.com/de/data-security

18. Cookies / Tracking / Analytics

Our website may use cookies, similar technologies, as well as analytics and marketing tools.

Where legally required, these are used exclusively after you have given your consent via the consent management tool in use.

Legal basis:

Art. 6(1)(a) GDPR
Section 25 TDDDG

19. Google Services

We use various services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), in particular Google Analytics, Google Ads including Conversion Tracking, Google Merchant Center and YouTube.

When using these services, personal data may be processed and transmitted to Google. This may include in particular:

IP address
Browser and device information
Pages and products viewed
Referrer URL
Time and duration of page views
Interactions with our online shop
Shopping cart, checkout and purchase events
Technical usage and diagnostic data
Depending on the function used, other information required for analytics, reach measurement, conversion measurement or advertising

Google states that websites using Google services such as Google Ads, Google Analytics or embedded YouTube content may transmit, among other things, the URL of the page visited and the IP address to Google. Depending on the services used and your consent, cookies or comparable technologies may also be used.

Further information can be found in Google’s Privacy Policy:
https://policies.google.com/privacy?hl=de

Google Analytics

We use Google Analytics to analyse the use of our online shop and improve our services.

In this context, information including page views, interactions, devices used, browsers, approximate location and other usage data may be processed.

Where Google Analytics uses cookies or comparable technologies or processes personal data for analytical purposes, this is carried out – where legally required – on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25 TDDDG.

Further information can be found in the following privacy information:

Google Privacy Policy:
https://policies.google.com/privacy?hl=de

Information about data use on websites using Google services:
https://policies.google.com/technologies/partner-sites?hl=de

Google Analytics – Data Processing Terms:
https://support.google.com/analytics/answer/3379636?hl=de

Google Ads / Conversion Tracking

We use Google Ads and conversion measurement functions to measure the effectiveness of our advertisements and optimise our advertising activities.

If you access our online shop via a Google advertisement or perform certain actions there, information about these actions may be transmitted to Google. This may include page views, product interactions, shopping cart and purchase events as well as technical information about your browser and device.

Where cookies or comparable technologies are used for this purpose or personal data is transmitted to Google for advertising or measurement purposes, this is carried out – where legally required – only after you have given your consent pursuant to Art. 6(1)(a) GDPR and Section 25 TDDDG.

Further information can be found in the following privacy information:

Google Privacy Policy:
https://policies.google.com/privacy?hl=de

Google Ads – Information on Privacy and Consent:
https://support.google.com/google-ads/answer/13802165?hl=de

Google Ads – Customer Data Policies:
https://support.google.com/google-ads/answer/7475709?hl=de

Google Merchant Center

We use Google Merchant Center to transmit product information such as product titles, product descriptions, prices, availability, images and other product data to Google and to display our products in Google services.

Where personal data is processed or linked to advertising and analytics functions in connection with its use, processing is carried out in accordance with the applicable legal requirements and – where required – on the basis of your consent.

Further information can be found in the following privacy information:

Google Privacy Policy:
https://policies.google.com/privacy?hl=de

Google Merchant Center – Data Collection and Use:
https://support.google.com/merchants/answer/6150122?hl=de

Google Merchant Center – Terms of Service:
https://support.google.com/merchants/answer/160173?hl=de

YouTube

Content from the YouTube service may be embedded on our website.

When you access a page containing embedded YouTube content, technical information such as your IP address, browser and device information as well as information about the page accessed may be transmitted to Google or YouTube.

Where cookies or comparable technologies are used or personal data is processed for this purpose, this is carried out – where legally required – only after you have given your consent pursuant to Art. 6(1)(a) GDPR and Section 25 TDDDG.

Further information can be found in the following privacy information:

Google / YouTube Privacy Policy:
https://policies.google.com/privacy?hl=de

Information about the use of data on websites using Google services:
https://policies.google.com/technologies/partner-sites?hl=de

International Data Transfers

When using Google services, personal data may be processed outside the European Union or European Economic Area, in particular in the United States.

Where required, such transfers are carried out in compliance with the statutory requirements of Art. 44 et seq. GDPR, in particular on the basis of an adequacy decision or appropriate safeguards such as the Standard Contractual Clauses adopted by the European Commission.

Final Information

Further information about how Google processes personal data can be found here:

Google Privacy Policy:
https://policies.google.com/privacy?hl=de

How Google uses data from websites and apps that use Google services:
https://policies.google.com/technologies/partner-sites?hl=de

20. Pinterest

We may use services provided by Pinterest.

Further information:
https://policy.pinterest.com/de/privacy-policy

21. Social Media Profiles

We maintain public profiles and/or business presences on the following platforms:

LinkedIn: https://www.linkedin.com/legal/privacy-policy
Facebook / Instagram: https://www.facebook.com/privacy/policy/
X: https://x.com/de/privacy
YouTube / Google: https://policies.google.com/privacy

When you visit these profiles, the respective platform operators process personal data under their own responsibility.

Further information can be found in the privacy information provided by the respective providers.

22. Meta Services (Facebook & Instagram)

We use the Shopify app “Facebook & Instagram by Meta” as well as services provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”), to present our products on Facebook and Instagram, display advertisements and measure and optimise their success.

For data sharing, we currently use the “Enhanced” setting. This includes, in particular, the Meta Pixel, Advanced Matching and the Meta Conversions API. In addition to browser-based collection, the Conversions API enables server-side transmission of certain events between Shopify and Meta.

In this context, the following data in particular may be processed and transmitted to Meta:

Pages and products viewed
Searches and interactions with our online shop
Shopping cart, checkout and purchase events
Order and transaction information
Browser, device and connection information
Personal data such as name, location, email address and telephone number

This data may be used to match users within the Meta network, measure conversions, create audiences, and optimise and personalise advertisements.

Where cookies or comparable technologies are used on your device or personal data is processed for marketing purposes, this is carried out – where legally required – on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25 TDDDG. You can withdraw your consent at any time via the cookie or privacy settings on our website.

When using Meta services, personal data may be processed outside the European Union or European Economic Area, in particular in the United States.

Further information can be found in Meta’s Privacy Policy and the Meta Business Tools Terms:

Meta Privacy Policy:
https://www.facebook.com/privacy/policy/

Meta Business Tools Terms:
https://www.facebook.com/legal/technology_terms

23. Contacting Us

When you contact us by email, form or chat, we process the information you provide in order to handle your enquiry.

Legal basis:

Art. 6(1)(b) GDPR
Art. 6(1)(f) GDPR

24. International Data Transfers

When using external services, personal data may also be processed outside the European Union, in particular in the United States or Canada.

Where no adequacy decision exists, the Standard Contractual Clauses adopted by the European Commission pursuant to Art. 46(2)(c) GDPR may in particular be used as appropriate safeguards.

25. Storage Period

We store personal data only for as long as necessary for contract processing, compliance with statutory retention obligations or legitimate interests.

26. Your Rights

You have the right to:

Access
Rectification
Erasure
Restriction of processing
Data portability
Object to processing
Withdraw consent previously given
Lodge a complaint with a data protection supervisory authority

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is, in particular, the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht – BayLDA), Promenade 18, 91522 Ansbach, Germany:
www.lda.bayern.de

27. AI-Assisted Visual Content

Our website may contain visual content that has been created or edited in part using modern design software or artificial intelligence.

This does not involve automated decision-making or profiling based on visitors’ personal data.

28. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy where necessary due to legal, technical or organisational changes.

Search

Trending searches

Products

Language

Privacy policy

1. Controller

2. General Information on Data Processing

3. Hosting / Shop System / Technical Provision

3.1 Shopify Network Intelligence

4. Server Log Files

5. Orders and Contract Processing

6. Payment Service Providers

Shopify Payments / Shopify

PayPal

Klarna

Apple Pay

Google Pay

Shop Pay

Visa

Mastercard

American Express

UnionPay

7. Shipping Service Providers

DHL / Deutsche Post

UPS

8. Product Reviews / Judge.me

9. Live Chat / Customer Communication

10. Withdrawal Processing / EU Withdrawal Button

11. Invoices and Shipping Documents / Order Printer

12. Payment Reconciliation and Accounting / PayData Integration

13. Shopify Messaging / Email Marketing

14. Product Labels / Algoshop Promo Label

15. Documentation of Consent to Terms

16. Sales via Agentic Storefronts / AI-Powered Sales Channels

17. Channable – Feed Management and Product Data Optimisation

18. Cookies / Tracking / Analytics

19. Google Services

Google Analytics

Google Ads / Conversion Tracking

Google Merchant Center

YouTube

International Data Transfers

Final Information

20. Pinterest

21. Social Media Profiles

22. Meta Services (Facebook & Instagram)

23. Contacting Us

24. International Data Transfers

25. Storage Period

26. Your Rights

27. AI-Assisted Visual Content

28. Changes to this Privacy Policy