Datenschutzerklärung

 

This Privacy Policy explains how petalandpupi.shop collects, uses, discloses, stores and protects personal data when you visit our website, purchase products, create an account, communicate with us or otherwise use our services.

For the purposes of applicable data-protection law, petalandpupi.shop acts as the controller of the personal data described in this policy unless another party is expressly identified as an independent controller.

1. Contact Details

Website and data controller: petalandpupi.shop
Email: info@petalandpupi.shop

Questions about this Privacy Policy or requests concerning personal data may be sent to the email address above.

2. Personal Data We Collect

Depending on how you interact with our website, we may collect the following categories of personal data.

Identity and contact information

This may include:

  • Name

  • Billing address

  • Shipping address

  • Email address

  • Telephone number

  • Account username or profile information

  • Recipient information supplied for delivery

Order and transaction information

This may include:

  • Products purchased or returned

  • Order number

  • Purchase price

  • Discount and promotional information

  • Payment status

  • Delivery status

  • Return and refund history

  • Communications relating to an order

  • Fraud-prevention and transaction-verification information

Payment information

Payments are generally processed by third-party payment providers. Depending on the payment method selected, the payment provider may collect card, bank-account, digital-wallet or authentication information.

We generally receive transaction confirmation, payment status and limited payment details rather than complete payment-card information.

Technical and device information

This may include:

  • Internet Protocol address

  • Browser type and version

  • Device type

  • Operating system

  • Language and time-zone settings

  • Cookie identifiers

  • Session information

  • Website activity

  • Referring website

  • Approximate location derived from an IP address

  • Security and diagnostic data

Customer-service information

When you contact us, we may collect:

  • The content of your message

  • Order information

  • Photographs or videos submitted to demonstrate a product issue

  • Records of our correspondence

  • Information required to investigate and resolve the enquiry

Marketing and preference information

This may include:

  • Newsletter subscription status

  • Marketing preferences

  • Product interests

  • Responses to promotions

  • Cookie and advertising preferences

3. How We Collect Personal Data

We collect personal data:

  • Directly from you when you place an order, create an account, complete a form or contact us

  • Automatically through cookies, pixels, server logs and similar technologies

  • From payment providers when they confirm a transaction

  • From delivery and fulfilment partners when they provide shipping updates

  • From fraud-prevention, security and identity-verification providers

  • From marketing, analytics or advertising providers where permitted

  • From publicly available sources where lawful and relevant

4. Purposes and Legal Bases

We process personal data only where we have an appropriate legal basis.

Processing and fulfilling orders

We use identity, contact, transaction and delivery information to:

  • Process purchases

  • Receive or confirm payments

  • Prepare and dispatch orders

  • Provide delivery updates

  • Handle returns, withdrawals and refunds

  • Respond to order-related questions

The legal basis is generally performance of a contract or taking steps requested before entering into a contract.

Customer service

We process communications and relevant order information to answer questions, investigate complaints and resolve product or delivery issues.

The legal basis may be performance of a contract, compliance with legal obligations or our legitimate interest in providing effective customer service.

Legal and accounting obligations

We may process and retain invoices, transaction records, tax information, withdrawal notices and related documents to comply with legal, tax, accounting, consumer-protection and recordkeeping obligations.

The legal basis is compliance with a legal obligation.

Website operation and security

We use technical information to operate the website, maintain sessions, prevent unauthorised access, detect fraud, identify technical errors and protect customers and our systems.

The legal basis may be our legitimate interest in maintaining a secure and functional online store or, where required, consent.

Fraud prevention

We may process transaction, device, account and payment-related information to identify suspicious activity, prevent fraud and protect our rights and customers.

The legal basis may be our legitimate interest in preventing fraud, compliance with legal obligations or performance of a contract.

Analytics and website improvement

Where permitted, we may use analytics information to understand how visitors use the website, measure performance and improve navigation, products and services.

Where non-essential cookies or similar technologies are used, processing is based on consent where required.

Marketing

Where you have provided consent or where another lawful basis applies, we may use your contact details and preferences to send newsletters, product announcements, promotional messages or personalised offers.

You may withdraw marketing consent at any time by using the unsubscribe mechanism in the communication or contacting info@petalandpupi.shop.

Withdrawal of consent does not affect processing carried out before consent was withdrawn.

5. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Essential cookies

Essential cookies are necessary for functions such as:

  • Shopping-cart operation

  • Checkout

  • Login and account security

  • Remembering privacy preferences

  • Fraud prevention

  • Website load balancing and security

These technologies may be used without consent where they are strictly necessary to provide a service requested by the user.

Analytics, personalisation and advertising cookies

Subject to applicable consent requirements, optional technologies may be used to:

  • Measure website traffic

  • Understand customer interaction

  • Remember preferences

  • Analyse campaign performance

  • Personalise content or advertising

  • Limit repeated advertising

Where required, optional cookies are not activated until you provide consent through the cookie-preference interface.

You may adjust your choices through the cookie banner or settings made available on the website. You may also configure your browser to restrict cookies, although disabling essential cookies may prevent parts of the website from working correctly.

6. Shopify

Our online store is hosted and supported through Shopify.

Shopify processes certain personal data to provide website hosting, checkout, security, analytics, customer-account, payment-support and ecommerce functionality.

Depending on the service and context, Shopify may act as our processor, subprocessor or independent controller.

Shopify may process data in countries outside Germany or the European Economic Area. Where required, appropriate transfer safeguards are used.

7. Payment Providers

When you select a payment method, personal data may be provided directly to the relevant payment provider.

Payment providers may process data for:

  • Payment authorisation

  • Authentication

  • Fraud screening

  • Chargeback handling

  • Regulatory compliance

  • Transaction administration

The relevant provider may act as an independent controller under its own privacy notice. Customers should review the privacy information presented by the selected payment provider.

8. Fulfilment, Shipping and Delivery Partners

We may share the minimum information necessary with fulfilment centres, warehouses, carriers, postal operators and delivery-service providers.

This information may include:

  • Recipient name

  • Delivery address

  • Telephone number

  • Email address

  • Order reference

  • Product and package information

  • Customs or import information where required

These parties use the information to prepare, transport, track and deliver orders and to manage delivery problems.

9. Professional and Technical Service Providers

We may disclose personal data to service providers that assist with:

  • Website hosting

  • Cloud storage

  • Email delivery

  • Customer support

  • Information security

  • Fraud prevention

  • Accounting and tax administration

  • Legal advice

  • Analytics

  • Marketing, where permitted

Service providers are permitted to process personal data only for authorised purposes and subject to appropriate contractual and security obligations.

10. Legal Disclosures

We may disclose personal data where reasonably necessary to:

  • Comply with applicable law

  • Respond to a lawful court, regulatory or government request

  • Enforce our terms and policies

  • Investigate fraud or security incidents

  • Protect the rights, property or safety of customers, the public or petalandpupi.shop

  • Establish, exercise or defend legal claims

11. Business Changes

If the ownership or organisation of the store changes through a merger, acquisition, restructuring, financing, asset sale or similar transaction, personal data may be transferred as part of that transaction where permitted by law.

Any recipient will be required to process the data consistently with applicable data-protection requirements.

12. International Data Transfers

Some service providers may process personal data outside Germany or the European Economic Area.

Where the receiving country is not recognised as providing an adequate level of data protection, transfers may rely on safeguards such as:

  • European Commission standard contractual clauses

  • Additional technical and organisational safeguards

  • An applicable adequacy decision

  • Another legally recognised transfer mechanism

You may contact info@petalandpupi.shop for further information about applicable safeguards.

13. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy.

Retention periods depend on:

  • The duration of the customer relationship

  • Contract-performance requirements

  • Statutory tax, accounting and commercial retention obligations

  • Product warranty and consumer-law periods

  • Fraud-prevention and security requirements

  • Limitation periods for legal claims

  • Whether consent remains valid

When personal data is no longer required, it is deleted, anonymised or restricted unless continued retention is legally required.

Marketing data is generally retained until consent is withdrawn, an objection is made or the data is no longer needed for the relevant marketing purpose.

14. Your Data-Protection Rights

Subject to applicable conditions and exceptions, you may have the right to:

  • Request access to your personal data

  • Request correction of inaccurate or incomplete personal data

  • Request deletion of personal data

  • Request restriction of processing

  • Object to processing based on legitimate interests

  • Object to direct marketing at any time

  • Request data portability

  • Withdraw consent at any time

  • Request information about international-transfer safeguards

  • Lodge a complaint with a competent supervisory authority

Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. We will stop the relevant processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms or the processing is required for legal claims.

15. Exercising Your Rights

To exercise a data-protection right, contact:

Email: info@petalandpupi.shop

Please clearly describe your request.

We may ask for information reasonably necessary to verify your identity and prevent unauthorised access to personal data. We will respond within the period required by applicable law.

Requests are generally handled without charge. A reasonable fee may be charged, or a request may be refused, where legally permitted and the request is manifestly unfounded or excessive.

16. Right to Complain

You have the right to lodge a complaint with the competent data-protection supervisory authority in Germany or, where applicable, the authority in the EU or EEA country of your habitual residence, place of work or place of the alleged infringement.

We encourage you to contact info@petalandpupi.shop first so that we have an opportunity to address the matter.

17. Automated Decision-Making

We do not intend to make decisions that produce legal or similarly significant effects solely through automated processing unless this is necessary for a contract, authorised by law or based on explicit consent.

Automated systems may assist with fraud screening, payment verification and website security. Where applicable, customers may request human review as required by law.

18. Children’s Privacy

Our website and products are not directed to children.

We do not knowingly collect personal data directly from children below the applicable age of digital consent for marketing or optional data-processing activities.

If you believe a child has provided personal data without appropriate authorisation, contact info@petalandpupi.shop.

19. Data Security

We use reasonable technical and organisational measures designed to protect personal data against:

  • Unauthorised access

  • Accidental loss

  • Improper alteration

  • Unlawful disclosure

  • Destruction

  • Misuse

No internet transmission or storage system can be guaranteed to be completely secure. Customers should protect their account credentials and contact us if they suspect unauthorised account activity.

20. Third-Party Links

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices of third parties. Customers should review the privacy notice of any external website they visit.

21. Changes to This Privacy Policy

We may update this Privacy Policy to reflect operational, legal, regulatory or technical changes.

The current version will be published on petalandpupi.shop with an updated revision date. Material changes may also be communicated through the website or another appropriate method where required.

22. Contact

For questions, objections, consent withdrawals or data-rights requests, contact:

petalandpupi.shop
Email: info@petalandpupi.shop