Data protection
1. Controller
NR UG (haftungsbeschränkt)
Managing Director: Nadine Doege-Radschunat
Marktbreiter Straße 11
97318 Kitzingen
Germany
Phone: +49 9321 3882760
Email: nrug@radschunat.de
2. General information on data processing
We process personal data exclusively in compliance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other relevant data protection provisions.
Personal data is any data with which you can be personally identified.
3. Legal basis for processing
The processing of your personal data is based on the following legal grounds:
- Art. 6 (1) lit. b GDPR – performance of a contract
- Art. 6 (1) lit. c GDPR – legal obligations
- Art. 6 (1) lit. f GDPR – legitimate interest
- Art. 6 (1) lit. a GDPR – consent
4. Hosting and Platform (Shopify)
Our website is operated via Shopify Inc., 151 O’Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada.
Shopify provides the e-commerce platform through which we offer and sell our products.
Data processing takes place on Shopify's servers. This may involve the transfer of personal data to Canada or the USA.
Canada has an adequate level of data protection recognized by the European Commission.
For data transfers to the USA, Shopify uses appropriate safeguards in accordance with Art. 44 et seq. GDPR, in particular standard contractual clauses.
We have concluded a data processing agreement (DPA) with Shopify.
Legal basis: Art. 6 (1) lit. b and lit. f GDPR
5. Collection and storage of personal data
a) When visiting the website (server log files)
When you visit our website, the following data is automatically collected:
- IP address
- Date and time of access
- Browser type and version
- Operating system
- Referrer URL
This data is technically necessary to display the website correctly and to ensure its security and stability.
No merging with other data sources takes place.
Legal basis: Art. 6 (1) lit. f GDPR
b) Contacting us
If you contact us by email or via the contact form, we will store your information to process the inquiry and for possible follow-up questions.
Legal basis: Art. 6 (1) lit. b GDPR
c) Customer account
When registering a customer account, we process:
- First and last name
- Billing and shipping address
- Email address
- Password (stored encrypted)
The data will be stored as long as the customer account exists. After deletion, it will be removed unless there are statutory retention obligations.
d) Order processing
To process your order, we process:
- Order data
- Address data
- Payment data
- Communication data
This data is necessary for the performance of the contract.
6. Payment service providers
Payments are processed by the following providers:
Shopify Payments
Provider: Shopify International Ltd., Dublin, Ireland
PayPal
Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
Klarna (if used)
Provider: Klarna Bank AB, Sweden
A credit check may be performed if used.
Stripe (if used)
Provider: Stripe Payments Europe Ltd., Dublin, Ireland
Data processing takes place exclusively for the purpose of payment processing.
We have concluded corresponding data processing agreements with the providers or use their GDPR-compliant systems.
Legal basis: Art. 6 (1) lit. b GDPR
7. Shipping service provider
Shipping is handled by DHL.
For delivery, we pass on your name and shipping address.
Legal basis: Art. 6 (1) lit. b GDPR
8. Newsletter
If you subscribe to our newsletter, we will use your email address exclusively for sending information about our products and offers.
Registration is done using the double opt-in procedure.
You can unsubscribe from the newsletter at any time.
Legal basis: Art. 6 (1) lit. a GDPR
9. Cookies and Cookie Banner
Our website uses cookies.
We use:
- technically necessary cookies (e.g. shopping cart, login)
- analysis and marketing cookies (only with consent)
When you visit our website, a cookie banner will appear, through which you can manage your consent.
Legal bases:
- technically necessary: Art. 6 (1) lit. f GDPR
- requiring consent: Art. 6 (1) lit. a GDPR
10. Analysis and tracking tools
If you have given your consent, we use analysis and marketing tools, e.g.:
- Shopify Analytics
- Google Analytics (if used)
- Meta Pixel (Facebook) (if used)
These enable the evaluation of user behavior to optimize our offer.
Legal basis: Art. 6 (1) lit. a GDPR
You can revoke your consent at any time.
11. Data transfer to third countries
In the context of using Shopify and payment services, data transfers to third countries (e.g. USA) may occur.
These transfers are based on:
- EU standard contractual clauses
- Adequacy decisions
12. Storage period
We store personal data only for as long as necessary:
- Order and invoice data: up to 10 years
- Customer accounts: until deleted
- Communication data: after processing
13. Data security
This website uses SSL/TLS encryption.
14. Your rights
You have the right to:
- Information
- Rectification
- Erasure
- Restriction of processing
- Data portability
- Objection (Art. 21 GDPR)
- Withdrawal of consent
Contact: nrug@radschunat.de
15. Right to complain
You can lodge a complaint with a data protection supervisory authority.
16. Automated decision-making
No automated decision-making takes place.
17. Changes to this privacy policy
We reserve the right to amend this privacy policy.