Privacy policy

Privacy Policy

Last updated: December 27, 2024

1. Controller

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

DEVILS-ARTS Body Modification
Owner: Sandro Kreller
Rhein-Mosel-Straße 18 B
56281 Emmelshausen
Germany

Email: sandrokreller@web.de
VAT ID No.: DE327101977

2. General information on data processing

We take the protection of your personal data very seriously. Personal data is processed by us only to the extent necessary and in accordance with the statutory provisions.

This privacy policy informs you about which personal data we collect when you use our online shop DEVILS-ARTS | WEAR, how we use this data and which rights you have.

3. Hosting & shop system Shopify

Our online shop is operated via Shopify Inc., 151 O’Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada.

Shopify processes personal data on our behalf in order to provide the operation of the online shop, payment processing, order management and security-related functions.

In this context, personal data may be transferred to third countries, such as Canada or the USA. Shopify uses appropriate safeguards for this in accordance with Art. 46 GDPR, in particular standard contractual clauses.

Further information can be found at:
https://www.shopify.com/legal/privacy

4. Print-on-demand & shipping Printful

For the production and shipping of our products, we use the print-on-demand service provider:

Printful, Inc.
11025 Westlake Dr
Charlotte, NC 28273
USA

As part of order processing, the following personal data is transferred to Printful where necessary:

  • Name
  • Delivery address
  • Order data, such as product, size and quantity

This data is used exclusively for the production and delivery of the ordered goods.

Printful also processes data on the basis of appropriate safeguards in accordance with the GDPR.

Further information:
https://www.printful.com/privacy-policy

5. Personal data collected

Depending on how you use our shop, we process in particular the following data:

  • Contact data: name, address, email
  • Order data: products, sizes, prices, shipping data
  • Payment information: payment method, payment status, no storage of complete payment data
  • Technical data: IP address, browser information, device information
  • Usage data: pages visited, interactions within the shop

6. Purpose of data processing

Your data is processed for the following purposes:

  • Processing orders
  • Production and shipping of goods
  • Payment processing
  • Customer communication
  • Fulfilment of legal obligations
  • Ensuring the technical operation of the shop
  • Protection against misuse and fraud

7. Legal bases

Processing is carried out on the basis of:

Art. 6 (1) lit. b GDPR, performance of a contract

Art. 6 (1) lit. c GDPR, legal obligation

Art. 6 (1) lit. f GDPR, legitimate interest

8. Cookies & similar technologies

Shopify uses cookies that are technically necessary for the operation of the shop and that serve to analyse and improve the user experience.

You can restrict or deactivate cookies at any time via your browser settings. The functionality of the shop may be limited as a result.

9. Disclosure of data

Your data is disclosed exclusively to:

  • Shopify, shop operation
  • Printful, production & shipping
  • Payment service providers, such as PayPal or credit card providers
  • Authorities, where legally required

No further disclosure takes place.

10. Storage period

We store personal data only for as long as this is necessary for the respective purposes or statutory retention periods exist, such as tax-related obligations.

11. Your rights

You have the right at any time to:

  • Access, Art. 15 GDPR
  • Rectification, Art. 16 GDPR
  • Erasure, Art. 17 GDPR
  • Restriction of processing, Art. 18 GDPR
  • Data portability, Art. 20 GDPR
  • Object to processing, Art. 21 GDPR

Please send requests by email to:
sandrokreller@web.de

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The responsible authority is the supervisory authority of your federal state.

13. Changes to this privacy policy

We reserve the right to amend this privacy policy in the event of legal or technical changes. The current published version always applies.

14. Contact

If you have any questions about the processing of your personal data, please contact:

DEVILS-ARTS Body Modification
Owner: Sandro Kreller
Email: sandrokreller@web.de