Privacy Policy

Privacy Policy

Last updated: June 2026

1. Controller

Yahan Wu
Lindenstr. 6
70563 Stuttgart
Deutschland
E-Mail: yahanwu0501@gmail.com

2. What Data We Collect

When you place an order we collect: name, delivery address, e-mail address, phone number (optional), and payment information. Payment data is processed exclusively by Shopify Payments / PayPal and is not stored on our systems.

When you visit the shop, Shopify automatically logs technical data (IP address, browser type, pages visited, date and time). This data is used solely for technical operation and security.

3. Purpose and Legal Basis

We process your personal data to fulfil your order (Art. 6(1)(b) GDPR), to comply with legal obligations such as tax and commercial law (Art. 6(1)(c) GDPR), and to operate and improve the shop (Art. 6(1)(f) GDPR — legitimate interest).

4. Recipients

Your data is shared with:

  • Shopify Inc. (e-commerce platform & hosting) — Shopify processes data under a Data Processing Agreement in accordance with GDPR.
  • Shipping providers (e.g. DHL, DPD) — name and delivery address only, for order fulfilment.
  • PayPal — if you choose PayPal as payment method.

No data is sold to third parties.

5. International Transfers

Shopify Inc. is based in Canada and the USA. Data transfers are covered by Shopify’s Standard Contractual Clauses and their EU-US Data Privacy Framework certification.

6. Retention

Order-related data is retained for 10 years as required by German commercial and tax law. You may request deletion of data not subject to statutory retention obligations at any time.

7. Your Rights (GDPR Art. 15–22)

You have the right to:

  • Access your personal data (Art. 15)
  • Rectification of inaccurate data (Art. 16)
  • Erasure (“right to be forgotten”) (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)

To exercise your rights, contact us at yahanwu0501@gmail.com.

You also have the right to lodge a complaint with the competent supervisory authority: Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, www.baden-wuerttemberg.datenschutz.de.

8. Cookies

Shopify uses technically necessary cookies to operate the shop (shopping cart, session management). No tracking or advertising cookies are set without your consent.