Privacy policy

Privacy Policy

1) Introduction and Contact Details of the Controller

1.1

We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is any data by which you can be personally identified.

1.2

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Andre Weidl
Am Jessenapfel 3
60435 Frankfurt am Main
Germany
Phone: +49 151 29134800
Email: support@ukinkshop.info

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1

When you use our website for informational purposes only, meaning if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website:

  • Website visited

  • Date and time of access

  • Amount of data sent in bytes

  • Source/referrer from which you accessed the page

  • Browser used

  • Operating system used

  • IP address (possibly in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. However, we reserve the right to review server log files retrospectively if there are concrete indications of unlawful use.

2.2

For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” string and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

3.1 Shopify

For hosting our website and displaying page content, we use the system of the following provider:

Shopify International Limited
Victoria Buildings, 2nd Floor
1-2 Haddington Road
Dublin 4, D04 XN32
Ireland

Data may also be transferred to:

Shopify Inc.
150 Elgin St
Ottawa, ON K2P 1L4
Canada

All data collected on our website is processed on the provider’s servers. We have concluded a data processing agreement with the provider to ensure the protection of our visitors' data and to prohibit unauthorized disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

3.2 Shopify (Content Delivery Network)

We use a Content Delivery Network provided by:

Shopify International Limited
Dublin, Ireland

Data may also be transferred to:

  • Shopify Inc., Ottawa, Canada

  • Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA

This service enables faster delivery of large media files such as graphics, page content, or scripts via regionally distributed servers. Processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website.

For transfers to the USA, the recipient participates in the EU-US Data Privacy Framework.

4) Cookies

We use cookies to make visiting our website attractive and to enable the use of certain functions. Cookies are small text files stored on your device.

Some cookies are deleted automatically after closing your browser (“session cookies”). Others remain on your device longer (“persistent cookies”).

If personal data is processed through individual cookies, processing is carried out pursuant to:

  • Art. 6(1)(b) GDPR (contract performance)

  • Art. 6(1)(a) GDPR (consent)

  • Art. 6(1)(f) GDPR (legitimate interest)

You can configure your browser to inform you about cookie settings and decide individually whether to accept them or exclude them entirely.

5) Contacting Us

When contacting us (e.g., via contact form or email), personal data is processed solely for the purpose of handling your inquiry.

Legal basis:

  • Art. 6(1)(f) GDPR (legitimate interest)

  • Art. 6(1)(b) GDPR (contract-related inquiries)

Data is deleted once the matter has been conclusively clarified, unless statutory retention obligations apply.

6) Comment Function

When using the comment function, your comment, timestamp, chosen username, and IP address are stored and published.

Legal basis: Art. 6(1)(b) and (f) GDPR.

You may subscribe to follow-up comments via double opt-in (Art. 6(1)(a) GDPR). You can unsubscribe at any time.

7) Customer Account

When opening a customer account, personal data is processed pursuant to Art. 6(1)(b) GDPR.

You may request deletion of your account at any time. Data will be deleted after complete contract processing unless statutory retention obligations apply.

8) Use of Customer Data for Direct Advertising

Email Newsletter

If you subscribe to our newsletter, we will regularly send information about our offers.

Required: Email address
Legal basis: Art. 6(1)(a) GDPR (consent)

Double opt-in is used. You may unsubscribe at any time via the link in the newsletter or by contacting us.

9) Data Processing for Order Handling

9.1–9.3 Image File Transfers for Product Personalization

If you transmit image files (via email, message function, or upload function), these files are used exclusively for creating personalized products.

Legal basis: Art. 6(1)(b) GDPR.
Files are automatically deleted after order completion.

9.4 Data Transfer for Shipping and Payment

Data required for contract fulfillment is transferred to:

  • Shipping service providers

  • Payment service providers

Legal basis: Art. 6(1)(b) GDPR.

9.5 EasyDHL

Shipping labels are generated via:
247APPS UG (haftungsbeschränkt)
In der Goldgrube 28
56073 Koblenz
Germany

9.6 DHL

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

Email/phone may be transmitted with your consent (Art. 6(1)(a) GDPR).

9.7 Shopify Payments

Shopify International Limited
Dublin, Ireland

Payment data is transferred for transaction processing pursuant to Art. 6(1)(b) GDPR.

10) Web Analytics

10.1 Shopify Analytics

Uses pseudonymized visitor data.
Legal basis: Art. 6(1)(a) GDPR (consent).

10.2 Shopify Network Intelligence

Pseudonymized customer data used for statistical analysis.
Legal basis: Art. 6(1)(f) GDPR.

11) Google Translate

This website uses Google Translate (Google Ireland Limited).

Data (including IP address) may be transferred to Google servers in the USA.

Legal basis:

  • Art. 6(1)(a) GDPR (if cookies are used)

  • Art. 6(1)(f) GDPR (legitimate interest)

Google participates in the EU-US Data Privacy Framework.

12) Accounting – Lexware Office

Haufe-Lexware GmbH & Co. KG
Freiburg, Germany

Processing is based on Art. 6(1)(f) GDPR (legitimate interest).

13) Data Subject Rights

You have the following rights:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to withdraw consent (Art. 7(3) GDPR)

  • Right to lodge a complaint (Art. 77 GDPR)

Right to Object

You may object at any time to processing based on legitimate interest (Art. 21 GDPR).

You may object at any time to processing for direct marketing purposes.

14) Storage Duration

Personal data is stored:

  • Until consent is withdrawn (Art. 6(1)(a))

  • In accordance with statutory retention periods

  • Until objection is exercised (Art. 21 GDPR)

  • Until processing purposes no longer apply

Data will otherwise be deleted when no longer necessary.