Privacy policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide your data. Failure to provide the data will have no consequences. This applies only insofar as no other provision is made in the following processing operations.

“Personal data” means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our websites without providing any personal information.

Whenever you access our website, usage data is transmitted to us or to our web host / IT service provider by your internet browser and stored in protocol data (so-called server log files). The data stored includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.

The processing is carried out on the basis of Article 6(1)(f) GDPR, based on our overriding legitimate interest in ensuring the smooth operation of our website and improving our services.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the United States. The European Commission has issued an adequacy decision for Canada. For the United States, an adequacy decision exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.

Contact

Controller

If you wish, you may contact us. The controller responsible for data processing is:

Danielle Kerntopf
Grimmer Str. 84-85
17489 Greifswald
Germany
+49 3834 854639
info@daniellekerntopf.com

Customer-Initiated Contact by Email

If you contact us by email on your own initiative for business purposes, we collect your personal data (name, email address, message text) only to the extent provided by you. The processing of this data serves to process and respond to your inquiry.

If the contact is made for the purpose of carrying out pre-contractual measures (e.g. consultation regarding an intended purchase, preparation of a quotation) or concerns a contract already concluded between you and us, the processing of this data is based on Article 6(1)(b) GDPR.

If the contact is made for other reasons, the processing is based on Article 6(1)(f) GDPR, due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(f) GDPR.

We use your email address only to process your inquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and Processing When Using the Contact Form

When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The processing of this data serves the purpose of contacting you.

If the contact is made for the purpose of carrying out pre-contractual measures (e.g. consultation regarding an intended purchase, preparation of a quotation) or concerns a contract already concluded between you and us, the processing of this data is based on Article 6(1)(b) GDPR.

If the contact is made for other reasons, the processing is based on Article 6(1)(f) GDPR, due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(f) GDPR.

We use your email address only to process your inquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and Processing When Images Are Sent by Email

You have the option of sending us images by email in connection with an order for a personalized product.

When you send us images, we may collect personal data (images depicting identifiable persons) only to the extent provided by you. The processing of this data serves the purpose of creating personalized products. The image you send serves as a template for the product and is used for this purpose (e.g. printing on a T-shirt). The processing is based on Article 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data will not be disclosed to third parties.

We use the image you send only within the scope of providing the service. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Customer Account

When opening a customer account, we collect your personal data to the extent specified there. The processing of this data serves the purpose of improving your shopping experience and simplifying order processing.

The processing is based on Article 6(1)(a) GDPR, with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent prior to its withdrawal.

Your customer account will subsequently be deleted.

Collection, Processing and Disclosure of Personal Data When Placing Orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries.

The provision of this data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded.

The processing is based on Article 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data may be disclosed, for example, to shipping companies, dropshipping and fulfillment providers, payment service providers, service providers involved in order processing, and IT service providers. In all cases, we strictly comply with statutory requirements. The scope of data transferred is limited to the minimum necessary.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the United States. The European Commission has issued an adequacy decision for Canada. For the United States, an adequacy decision exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.

Advertising

Use of Email Address for Sending Newsletters

We use your email address to send information and offers by newsletter, provided that you have expressly consented to this.

The processing of your data serves exclusively the purpose of sending advertising communications. For this purpose, we process your email address and, where applicable, other data that you voluntarily provided when subscribing to our newsletter.

The processing is based on Article 6(1)(a) GDPR, with your consent. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of your consent prior to its withdrawal.

You may unsubscribe from the newsletter at any time using the relevant link in the newsletter or by notifying us.

Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address on a so-called blacklist to prevent you from receiving newsletter emails from us in the future.

This storage is based on Article 6(1)(f) GDPR, due to our and your legitimate interest in preventing the renewed use of your email address for sending our newsletter.

You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data.

Use of Email Address for Direct Marketing

We use the email address obtained from you in connection with the sale of a product or service to electronically send you advertising for our own products or services that are similar to those you have already purchased from us, unless you have objected to this use.

The provision of your email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded.

The processing is based on Article 6(1)(f) GDPR due to our overriding legitimate interest in direct marketing.

You may object to the use of your email address at any time by notifying us. The contact details for exercising your right to object can be found in the Imprint.

You may also use the designated link in the advertising email. No costs other than the transmission costs according to the basic rates will be incurred for this.

Payment Service Providers

Creditworthiness Check

Use of Klarna Payment Options

We use the payment service of Klarna Bank AB (publ.) (Sveavägen 46, 111 34 Stockholm, Sweden; “Klarna”) on our website.

When you select and use payment via Klarna, the data required for payment processing is transmitted to Klarna in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) GDPR.

Cookies may be stored that enable your browser to be recognized. The resulting data processing is based on Article 6(1)(f) GDPR due to our overriding legitimate interest in offering customers a range of convenient payment methods.

You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data.

“Pay Later” (invoice), “Pay Now” (direct debit, credit card, instant bank transfer), “Financing” (installment purchase)

For individual payment methods such as “Pay Later” (invoice), “Pay Now” (direct debit, credit card, instant bank transfer), and “Financing” (installment purchase), Klarna reserves the right, where applicable, to obtain a credit report based on mathematical-statistical procedures using credit reference agencies.

For this purpose, Klarna transmits the personal data required for the credit assessment, such as first and last name, address, gender, email address, IP address, and data relating to the order, to a credit reference agency for the purpose of identity and creditworthiness verification. Klarna uses the information received regarding the statistical probability of payment default to make a balanced decision concerning the establishment, performance, or termination of the contractual relationship.

The credit report may contain probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical procedures, which may include address data.

Your legitimate interests are taken into account in accordance with statutory provisions.

The processing of data serves the purpose of assessing creditworthiness when initiating a contract. The processing is based on Article 6(1)(f) GDPR due to our overriding legitimate interest in protecting against payment defaults where Klarna makes an advance payment.

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data by Klarna based on Article 6(1)(f) GDPR by notifying Klarna.

The provision of the data is necessary for concluding the contract using the payment method you have selected. Failure to provide the data means that the contract cannot be concluded using the payment method you have chosen.

Further information, in particular regarding the credit reference agencies to which Klarna discloses personal data, can be found for Germany at the relevant Klarna credit reference agency information page and for Austria at the corresponding Austrian page.

General information about Klarna is available on Klarna’s websites for Germany and Austria.

Your personal data is processed by Klarna in accordance with applicable data protection regulations and as described in Klarna’s privacy policies for Germany and Austria.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user’s computer system.

When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent cookies from being stored and the data they contain from being transmitted.

Cookies that have already been stored can be deleted at any time. However, please note that you may then not be able to use all functions of this website to their full extent.

You can find information on how to manage and, where applicable, disable cookies in the most common browsers via the following links:

• Chrome
• Microsoft Edge
• Mozilla Firefox
• Safari

Technically Necessary Cookies

Unless otherwise stated in the privacy policy below, we use only technically necessary cookies for the purpose of making our services more user-friendly, effective, and secure.

Furthermore, cookies enable our systems to recognize your browser even after you change pages and to provide you with services.

Some functions of our website cannot be provided without the use of cookies. For these functions, it is necessary for the browser to be recognized again after changing pages.

The use of cookies or comparable technologies is based on Section 25(2) TDDDG.

The processing of your personal data is based on Article 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and designing our services in a user-friendly and effective manner.

You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data.

Plug-ins and Other Services

Use of YouTube

We use the function for embedding YouTube videos on our website provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”).

YouTube is an affiliated company of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

The function displays videos hosted on YouTube in an iFrame on our website. The “Enhanced Privacy Mode” option is activated.

As a result, YouTube does not store information about website visitors. Only when you watch a video is information transmitted to YouTube and stored there.

Your data may be transferred to the United States. For the United States, the European Commission has issued an adequacy decision in the form of the Trans-Atlantic Data Privacy Framework (TADPF). YouTube is certified under the TADPF and has therefore undertaken to comply with European data protection principles.

The use of cookies or comparable technologies takes place with your consent on the basis of Section 25(1), sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR.

The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) GDPR.

You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent prior to its withdrawal.

Further information regarding the collection and use of data by YouTube and Google, as well as your rights and options for protecting your privacy, can be found in YouTube’s privacy information.

Rights of Data Subjects and Storage Period

Storage Period

After the contract has been fully performed, the data will initially be stored for the duration of the statutory warranty period. It will then be stored in accordance with statutory retention periods, in particular those under tax and commercial law, and subsequently deleted once the relevant retention period has expired, unless you have consented to further processing and use.

Rights of the Data Subject

Where the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR: the right of access, rectification, erasure, restriction of processing, and data portability.

In addition, pursuant to Article 21(1) GDPR, you have the right to object to processing based on Article 6(1)(f) GDPR, as well as to processing for direct marketing purposes.

Right to Lodge a Complaint with a Supervisory Authority

Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful.

Among other options, you may lodge a complaint with the supervisory authority responsible for us at the following contact details:

Land Commissioner for Data Protection and Freedom of Information Mecklenburg-Western Pomerania
Werderstraße 74a
19055 Schwerin
Germany
Tel.: +49 385 594940
Fax: +49 385 5949458
Email: info@datenschutz-mv.de

Right to Object

If the personal data processing listed here is based on our legitimate interest pursuant to Article 6(1)(f) GDPR, you have the right, for reasons arising from your particular situation, to object to such processing at any time with effect for the future.

Following an objection, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

If personal data is processed for the purposes of direct marketing, you may object to such processing at any time by notifying us. Following an objection, we will cease processing the data concerned for direct marketing purposes.

Last updated: 07/09/2026