Privacy Policy
Last updated: September 2026
This Privacy Policy explains how we collect, use, disclose and otherwise process personal data when you visit, use or make a purchase from our online store.
1. Data Controller
The controller responsible for the processing of personal data through this online store is:
Nick Jersman
Gartenstraße 7
24103 Kiel
Germany
Email: silverweissclo@gmail.com
If you have any questions regarding this Privacy Policy or the processing of your personal data, you can contact us using the details above.
⸻
2. General Information
We process personal data only where necessary to operate our online store, process orders and payments, provide digital products, communicate with customers, maintain the security of our services, prevent fraud, comply with legal obligations or where you have provided your consent.
Where the General Data Protection Regulation (“GDPR”) applies, personal data is processed on the basis of one or more of the following legal grounds:
- Article 6(1)(a) GDPR – your consent;
- Article 6(1)(b) GDPR – processing necessary for the performance of a contract or to take steps at your request prior to entering into a contract;
- Article 6(1)(c) GDPR – processing necessary to comply with a legal obligation; and
- Article 6(1)(f) GDPR – processing necessary for our legitimate interests or those of a third party, provided that your interests or fundamental rights do not override those interests.
⸻
3. Personal Data We May Process
Depending on how you interact with our online store, we may process the following categories of personal data:
- name;
- email address;
- billing address;
- order information;
- products purchased;
- payment and transaction information;
- customer communications;
- IP address;
- browser and device information;
- technical and security information;
- website interaction information;
- cookie and consent information;
- information relating to the delivery and download of digital products; and
- information necessary to detect and prevent fraud or misuse.
We only process personal data that is reasonably necessary for the respective purpose.
⸻
4. Orders and Contract Performance
When you place an order through our online store, we process the information necessary to:
- process and administer your order;
- process or verify payment;
- provide the purchased digital product;
- provide access to download links;
- send order and transaction confirmations;
- provide customer service;
- prevent fraud and misuse;
- handle complaints or contractual claims; and
- comply with accounting, tax and other legal obligations.
Where the GDPR applies, processing necessary to fulfil your purchase is generally based on Article 6(1)(b) GDPR.
Where information must be processed or retained in order to comply with applicable legal obligations, processing is based on Article 6(1)(c) GDPR.
⸻
5. Shopify
Our online store is operated using the ecommerce platform Shopify.
Shopify provides the technical infrastructure required to operate our store and may process personal data in connection with services including:
- website hosting;
- shopping cart functionality;
- checkout;
- order processing;
- customer functionality;
- store administration;
- security;
- fraud prevention;
- analytics;
- privacy and consent management; and
- other technical services necessary to operate and improve the online store.
When you visit or interact with our store, certain personal data may therefore be transmitted to and processed by Shopify and its service providers.
Depending on the relevant processing activity, Shopify may process personal data on our behalf or under its own legal responsibilities.
Because Shopify operates internationally, personal data may be processed outside Germany or the European Economic Area. Where required under applicable data-protection law, appropriate safeguards for international transfers are used.
Further information about Shopify’s processing of consumer personal data is available in the Shopify Consumer Privacy Policy.
⸻
6. Shopify Network Intelligence
Shopify Network Intelligence is currently enabled for this online store.
When Shopify Network Intelligence is enabled, Shopify may use information relating to customer interactions with our store, Shopify and other merchants to generate insights and provide enhanced Shopify services.
Depending on the services and settings used, this processing may support functionality relating to:
- personalization;
- store and service improvement;
- analytics and insights;
- fraud detection and prevention;
- security;
- advertising measurement;
- marketing optimization; and
- other enhanced Shopify services.
This means that certain information generated when you interact with our store may be processed by Shopify together with information from interactions with Shopify or other Shopify merchants in accordance with Shopify’s applicable privacy terms.
Other merchants do not thereby receive direct access to our customer data.
Where consent is required by applicable law for cookies or similar technologies used for these purposes, such technologies are subject to the consent and privacy choices made through the privacy controls provided on our website.
You can manage available privacy and cookie preferences through our website’s privacy or cookie settings.
Further information is available in the Shopify Consumer Privacy Policy.
⸻
7. Digital Product Delivery – Shopify Digital Products
We use Shopify Digital Products to provide digital products purchased through our online store.
The application enables digital content and download links to be associated with orders and electronically provided to customers following a purchase.
For this purpose, information necessary to fulfil your order and provide access to your purchased digital content may be processed.
This may include:
- your email address;
- order information;
- order number;
- purchased product;
- order and payment status;
- information relating to the relevant digital product;
- information relating to delivery of the download link; and
- technical information necessary to provide access to the purchased digital content.
The information is processed for the purpose of fulfilling your purchase and electronically delivering the digital product you ordered.
Where the GDPR applies, processing necessary for digital delivery is generally based on Article 6(1)(b) GDPR.
Because the digital-product functionality is integrated with our Shopify store, Shopify may process relevant information in connection with providing this functionality.
⸻
8. Payments – Stripe
Payments through our online store are processed using Stripe, where Stripe is the payment processor for the payment method selected by you.
When you make a payment, personal and transaction information necessary to process, authenticate and secure the payment may be transmitted to Stripe.
Depending on the transaction and payment method, this may include:
- name;
- email address;
- billing address;
- payment information;
- transaction amount;
- currency;
- order information;
- IP address;
- device and browser information;
- transaction identifiers; and
- information used for fraud detection and payment security.
Payment information is processed for the purpose of completing the transaction, authenticating payments, preventing fraud and complying with applicable financial and legal requirements.
Where processing is necessary to complete your purchase, the relevant processing is generally based on Article 6(1)(b) GDPR.
Where processing is necessary to comply with legal requirements, Article 6(1)(c) GDPR may apply.
Processing necessary for fraud prevention and transaction security may also be based on legitimate interests under Article 6(1)(f) GDPR, where applicable.
Stripe may process certain personal data under its own legal responsibilities and in accordance with its own privacy information.
⸻
9. Customer Communications
If you contact us by email at:
silverweissclo@gmail.com
we process the personal data contained in your communication in order to respond to your request.
This may include your:
- name;
- email address;
- order number;
- message;
- attachments; and
- other information you voluntarily provide.
Where your communication concerns an existing or potential purchase, processing is generally based on Article 6(1)(b) GDPR.
For other legitimate inquiries, processing may be based on our legitimate interest in responding to communications pursuant to Article 6(1)(f) GDPR.
⸻
10. Cookies and Similar Technologies
Our online store uses cookies and similar technologies.
Certain technologies are necessary for the operation and security of the store and may be used for purposes including:
- shopping cart functionality;
- checkout;
- payment processing;
- website security;
- fraud prevention;
- authentication;
- maintaining sessions;
- remembering privacy preferences; and
- providing functionality expressly requested by users.
Where permitted by applicable law, technologies that are strictly necessary for providing the website or a service expressly requested by you may be used without your consent.
Other technologies used for analytics, advertising, personalization or comparable non-essential purposes are used only where an appropriate legal basis exists and, where legally required, after you have provided your consent.
⸻
11. Cookie Banner and Consent Management
Our online store uses Shopify’s customer privacy and cookie consent functionality.
Visitors in regions where consent is required, including Germany, may be presented with a cookie banner or other privacy controls.
Through these controls, you may be able to accept, reject or otherwise manage non-essential cookies and similar technologies.
Where your consent is required, relevant non-essential technologies will be subject to the consent choices made through these controls.
You may withdraw or change your consent through the available privacy or cookie settings.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
⸻
12. Analytics, Advertising and Tracking
At the time of this Privacy Policy, we have not intentionally added separate third-party advertising or analytics pixels such as Meta Pixel, TikTok Pixel or Google Analytics to the store.
However, Shopify itself provides technical, analytics, security, fraud-prevention, personalization and other platform functionality that may involve the processing of technical and website interaction information.
In particular, Shopify Network Intelligence is enabled, as described above.
Where cookies or similar technologies used for non-essential analytics, personalization or advertising purposes require consent under applicable law, their use is subject to the consent choices provided through our privacy controls.
If we add additional analytics, advertising or tracking services in the future, this Privacy Policy will be updated where required.
⸻
13. Fraud Prevention and Security
We and our service providers may process personal data where necessary to protect our store, customers, transactions and systems against:
- fraud;
- unauthorized transactions;
- misuse;
- security incidents;
- unauthorized access;
- malicious activity; and
- other unlawful activities.
This may include processing transaction information, IP addresses, device information and other technical or security-related information.
Where applicable, such processing may be based on Article 6(1)(f) GDPR, reflecting our legitimate interest in protecting our business, customers and systems.
Processing may also be based on legal obligations where applicable.
⸻
14. Recipients of Personal Data
Where necessary for the purposes described in this Privacy Policy, personal data may be disclosed to or processed by:
- Shopify;
- Stripe;
- Shopify’s digital-product delivery functionality;
- hosting and infrastructure providers;
- payment and fraud-prevention providers;
- technical and IT service providers;
- security providers;
- tax and accounting service providers;
- professional advisers; and
- public authorities where disclosure is required by law.
Only information reasonably necessary for the respective purpose is disclosed.
⸻
15. International Data Transfers
Some of the service providers used to operate our online store operate internationally.
As a result, personal data may be processed in countries outside Germany and the European Economic Area (“EEA”).
Where the GDPR applies and personal data is transferred to a country outside the EEA, appropriate safeguards or another legally recognized transfer mechanism will be used where required.
Depending on the recipient and destination country, these mechanisms may include an adequacy decision of the European Commission, appropriate contractual safeguards such as Standard Contractual Clauses, or another transfer mechanism permitted under applicable data-protection law.
⸻
16. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected or where continued retention is required by applicable law.
In particular, order, payment, invoice, accounting and tax-related information may be retained for applicable statutory retention periods.
Customer communications may be retained where necessary to:
- process inquiries;
- fulfil contractual obligations;
- handle complaints;
- comply with legal requirements; or
- establish, exercise or defend legal claims.
When personal data is no longer required and no statutory retention obligation applies, it will be deleted or anonymized where appropriate.
⸻
17. Your Rights Under the GDPR
Where the GDPR applies, you may have the following rights:
Right of Access
You may request information about whether and how we process your personal data and obtain a copy of personal data concerning you.
Right to Rectification
You may request the correction of inaccurate personal data and completion of incomplete personal data.
Right to Erasure
You may request deletion of your personal data where the applicable legal requirements are satisfied.
Right to Restriction of Processing
You may request that processing of your personal data be restricted in certain circumstances.
Right to Data Portability
Where the applicable requirements are satisfied, you may receive certain personal data in a structured, commonly used and machine-readable format and request transmission to another controller.
Right to Object
Where processing is based on legitimate interests pursuant to Article 6(1)(f) GDPR, you may have the right to object to the processing for reasons arising from your particular situation.
Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw your consent at any time with effect for the future.
Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.
⸻
18. Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable data-protection law, you have the right to lodge a complaint with a competent data-protection supervisory authority.
You may in particular contact the supervisory authority responsible for your place of residence, place of work or the location of the alleged infringement.
⸻
19. Data Protection Requests
To exercise your applicable data-protection rights or ask questions regarding the processing of your personal data, please contact:
Nick Jersman
Gartenstraße 7
24103 Kiel
Germany
Email: silverweissclo@gmail.com
We may request information reasonably necessary to verify your identity before fulfilling certain requests.
⸻
20. Data Security
We and the service providers involved in operating this online store use technical and organizational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access.
However, no electronic transmission or storage method can guarantee absolute security.
⸻
21. Children’s Privacy
Our online store and digital products are not intentionally directed at children where parental consent would be required under applicable data-protection law.
We do not knowingly seek to collect personal data from children in violation of applicable law.
If we become aware that personal data has been collected unlawfully from a child, appropriate steps will be taken in accordance with applicable law.
⸻
22. Changes to this Privacy Policy
We may update this Privacy Policy where necessary to reflect changes to:
- our online store;
- the services we use;
- our data-processing activities;
- Shopify functionality;
- payment providers;
- digital-product delivery;
- applicable technologies; or
- legal requirements.
The current version of this Privacy Policy will be published on our website.
The date of the most recent revision is stated at the beginning of this Privacy Policy.
⸻
23. Contact
For questions about this Privacy Policy or the processing of personal data, please contact:
Nick Jersman
Gartenstraße 7
24103 Kiel
Germany
Email: silverweissclo@gmail.com
