Datenschutzerklärung

 

This Privacy Policy describes how petalandpupy.shop collects, uses, stores, shares, and protects personal data when individuals visit our website, communicate with us, create an account, place an order, or otherwise use our services.

For the purposes of applicable data-protection law, the party operating petalandpupy.shop determines the purposes and means of processing personal data and acts as the data controller for the processing described in this policy.

Privacy contact:

info@petalandpupy.shop

1. Personal Data We Collect

Depending on how a customer interacts with our website, we may collect the following categories of personal data.

Identity and Contact Information

  • Full name

  • Billing address

  • Shipping address

  • Email address

  • Telephone number

  • Account username or login details

  • Communication preferences

Order and Transaction Information

  • Products ordered

  • Product size, color, and quantity

  • Order number

  • Order value

  • Payment status

  • Shipping and delivery status

  • Returns, refund requests, and customer-service history

  • Discount codes and promotional information

Payment Information

Payments may be processed by third-party payment service providers.

Depending on the payment method selected, payment providers may process:

  • Cardholder name

  • Payment card details

  • Bank or payment-account information

  • Billing details

  • Transaction identifiers

  • Fraud-prevention information

petalandpupy.shop does not necessarily receive or store complete payment-card numbers. Payment information is generally processed directly by the applicable payment provider.

Device and Technical Information

When a visitor uses the website, certain information may be collected automatically, including:

  • Internet Protocol address

  • Browser type

  • Device type

  • Operating system

  • Language settings

  • Time zone

  • Cookie identifiers

  • Pages viewed

  • Links clicked

  • Referring website

  • Date and time of visits

  • Session and interaction information

  • Approximate location derived from technical data

  • Website performance and error data

Communications

When a customer contacts us, we may collect:

  • The contents of emails and messages

  • Customer-service requests

  • Product questions

  • Return and refund information

  • Photographs or documents voluntarily submitted

  • Records necessary to respond to the request

Marketing Information

Where permitted, we may collect:

  • Marketing consent

  • Newsletter subscription status

  • Responses to promotional campaigns

  • Advertising interaction information

  • Product interests and browsing behavior

2. How We Collect Personal Data

We may collect personal data:

  • Directly from customers

  • Through website forms and checkout

  • Through customer accounts

  • Through cookies and similar technologies

  • From Shopify and Shopify-related services

  • From payment providers

  • From delivery and logistics providers

  • From fraud-prevention and security providers

  • From marketing and analytics service providers

  • From publicly available sources where legally permitted

3. Purposes and Legal Bases

We process personal data only where a lawful basis applies.

Contractual Necessity

We process information when necessary to:

  • Accept and manage orders

  • Process payments

  • Arrange delivery

  • Provide order confirmations and tracking information

  • Handle returns, refunds, and cancellations

  • Respond to order-related questions

  • Provide products and customer service

The legal basis is the performance of a contract or taking steps requested before entering into a contract.

Legal Obligations

We may process and retain information to:

  • Maintain tax and accounting records

  • Comply with consumer-protection requirements

  • Respond to lawful regulatory or judicial requests

  • Meet product-safety and recall obligations

  • Prevent unlawful transactions

  • Comply with financial and record-keeping duties

The legal basis is compliance with a legal obligation.

Legitimate Interests

We may process information where necessary for legitimate business interests, provided those interests are not overridden by the rights and freedoms of the affected person.

These interests may include:

  • Protecting the website and customers

  • Preventing fraud and abuse

  • Improving products and services

  • Managing customer relationships

  • Measuring website performance

  • Maintaining business records

  • Establishing, exercising, or defending legal claims

  • Conducting limited direct marketing where legally permitted

Consent

Where consent is required, we may rely on consent for:

  • Non-essential cookies

  • Certain analytics technologies

  • Personalized advertising

  • Email marketing

  • Other optional processing activities

Consent may be withdrawn at any time without affecting processing lawfully carried out before withdrawal.

4. Shopify

Our online store is hosted using Shopify’s commerce platform.

Shopify may process customer and visitor information to provide hosting, checkout, security, fraud prevention, analytics, platform functionality, and other commerce-related services.

Depending on the services and settings enabled for the store, Shopify may act as a processor, independent controller, or other legally recognized party for particular processing activities.

Shopify and its affiliated entities or subprocessors may process data in countries outside the customer’s country of residence, subject to applicable data-protection requirements.

5. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, local storage, and similar technologies.

These technologies may be used for:

  • Essential website operation

  • Shopping-cart functionality

  • Secure checkout

  • User authentication

  • Fraud prevention

  • Remembering preferences

  • Website analytics

  • Performance measurement

  • Marketing and advertising

  • Measuring campaign effectiveness

Strictly necessary technologies may be used without consent where legally permitted because they are required to provide a service requested by the user or to operate the website securely.

Non-essential technologies are used only where an appropriate legal basis exists. Where consent is required, customers may accept, reject, or manage optional cookies through the consent controls provided on the website.

Withdrawing consent does not affect the lawfulness of processing performed before withdrawal.

Browser settings may also allow users to block or delete cookies. Blocking essential cookies may prevent parts of the website, shopping cart, or checkout from functioning correctly.

6. How We Share Personal Data

We may share personal data only where necessary and legally permitted.

Recipients may include:

  • Shopify and Shopify affiliates

  • Website hosting and technology providers

  • Payment processors

  • Banks and financial institutions

  • Fraud-prevention and identity-verification providers

  • Shipping carriers and logistics partners

  • Warehousing and order-fulfillment providers

  • Customer-support service providers

  • Analytics providers

  • Marketing and advertising providers where permitted

  • Professional advisers, including accountants, auditors, insurers, and legal advisers

  • Government authorities, courts, law-enforcement agencies, or regulators where legally required

  • Successors involved in a lawful merger, acquisition, restructuring, or transfer of business assets

Service providers are permitted to process information only for authorized purposes and subject to applicable contractual and legal safeguards.

We do not disclose personal data merely in exchange for money. Certain advertising or analytics activities may nevertheless be treated as a sale, sharing, or targeted-advertising disclosure under the law of some jurisdictions.

7. International Data Transfers

Some service providers may process information outside Germany or the European Economic Area.

Where personal data is transferred to a country that has not been recognized as providing an adequate level of data protection, appropriate safeguards may be used, such as:

  • European Commission standard contractual clauses

  • Supplementary technical or organizational safeguards

  • An applicable adequacy decision

  • Another legally recognized transfer mechanism

Customers may contact us for more information about safeguards relevant to their personal data.

8. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy.

Retention periods depend on:

  • The duration of the customer relationship

  • Contract performance

  • Tax, accounting, and commercial record-keeping obligations

  • Consumer-protection requirements

  • Fraud-prevention needs

  • Product-safety requirements

  • Limitation periods for legal claims

  • The need to resolve disputes

  • Consent status and marketing preferences

When personal data is no longer required, it may be deleted, anonymized, or securely restricted from further use, subject to legal retention duties.

9. Customer Rights

Subject to applicable law, individuals may have the right to:

  • Request access to personal data

  • Request correction of inaccurate data

  • Request completion of incomplete data

  • Request deletion of personal data

  • Request restriction of processing

  • Object to processing based on legitimate interests

  • Object to direct marketing

  • Receive certain data in a structured, commonly used, machine-readable format

  • Request transmission of eligible data to another controller

  • Withdraw consent

  • Lodge a complaint with a competent data-protection supervisory authority

  • Obtain information about relevant international-transfer safeguards

  • Request human review where a decision with significant effects is based solely on automated processing, where applicable

To exercise a privacy right, contact:

info@petalandpupy.shop

We may need to verify the requester’s identity before completing a request. We will not request more information than reasonably necessary for verification.

Some rights may be limited where retaining or processing information is required by law or necessary for legal claims, fraud prevention, or the protection of others.

10. Marketing Communications

We may send promotional emails only where legally permitted.

Customers may unsubscribe by:

Unsubscribing from marketing does not prevent us from sending necessary transactional messages concerning orders, payments, shipping, security, returns, or account administration.

11. Automated Processing and Fraud Prevention

We and our service providers may use automated tools to identify potentially fraudulent, abusive, or unauthorized transactions.

These tools may evaluate factors such as:

  • Transaction patterns

  • Device information

  • Payment information

  • Shipping and billing inconsistencies

  • Account history

  • Technical indicators of fraud

Where applicable law grants a right to request human intervention or challenge a significant automated decision, customers may contact us.

12. Data Security

We use reasonable administrative, technical, and organizational measures intended to protect personal data against:

  • Unauthorized access

  • Unlawful disclosure

  • Accidental loss

  • Alteration

  • Destruction

  • Misuse

No online system, transmission method, or storage system can be guaranteed to be completely secure. Customers should protect their account credentials and contact us if they suspect unauthorized activity.

13. Children’s Privacy

Our website and products are not directed specifically toward children under the age of 16.

We do not knowingly collect personal data from a child where parental authorization is legally required. A parent or legal guardian who believes that a child has provided personal data without appropriate authorization may contact us.

14. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy, security, or content practices of independent third parties. Customers should review the privacy policies of those services before providing personal data.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

  • Our services

  • Website features

  • Technology

  • Legal requirements

  • Service providers

  • Data-processing practices

The updated version will be published on the website with a revised effective date. Material changes may also be communicated through the website or other appropriate methods.

16. Contact

Questions, requests, objections, or complaints concerning privacy may be sent to:

petalandpupy.shop

Email: info@petalandpupy.shop