Datenschutzerklärung

This Privacy Policy describes how boogdazeg.shop collects, uses, stores, discloses, and otherwise processes personal data when you visit our website, place an order, contact us, or otherwise use our services.

For purposes of applicable data-protection law, boogdazeg.shop is responsible for the processing described in this policy unless another party is identified as independently responsible.

Privacy contact: info@boogdazeg.shop

Personal Data We Collect

Depending on how you use the store, we may process:

  • name, billing address, delivery address, email address, and telephone number;
  • account information and login credentials;
  • order details, products purchased, returns, refunds, and customer-service history;
  • transaction information and limited payment-related information;
  • device type, browser type, IP address, time zone, language, operating system, and technical identifiers;
  • website activity, pages viewed, links selected, referring pages, session information, and shopping-cart activity;
  • cookie preferences and consent records;
  • marketing preferences and interactions with promotional communications;
  • fraud-prevention, security, and risk-assessment information;
  • reviews, messages, photographs, and other content you submit; and
  • information required to comply with legal, accounting, tax, or regulatory obligations.

We generally do not receive complete payment-card details where payments are processed by an independent payment provider.

Sources of Personal Data

We may receive personal data:

  • directly from you;
  • automatically from your device when you use the website;
  • from Shopify and services integrated into the store;
  • from payment providers;
  • from delivery, logistics, and fulfilment providers;
  • from fraud-prevention and security providers;
  • from analytics or advertising providers where permitted; and
  • from publicly available sources or parties authorised to provide the information.

Purposes and Legal Bases

We process personal data for the following purposes:

Contract Performance

We process data necessary to:

  • accept and manage orders;
  • process payments;
  • deliver products;
  • provide order confirmations and delivery updates;
  • manage withdrawals, returns, refunds, and warranty claims; and
  • respond to pre-contractual requests.

The legal basis is Article 6(1)(b) GDPR.

Legal Obligations

We process information needed to comply with tax, accounting, product-safety, consumer-protection, regulatory, and other legal obligations.

The legal basis is Article 6(1)(c) GDPR.

Legitimate Interests

Where appropriate, we process personal data to:

  • protect the website, customers, and business from fraud and misuse;
  • secure systems and investigate incidents;
  • establish, exercise, or defend legal claims;
  • improve store operations and customer service;
  • maintain business records; and
  • obtain aggregated or limited operational analytics.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests include secure and efficient business operations, fraud prevention, service improvement, and protection of legal rights. We consider the interests and fundamental rights of affected individuals before relying on this basis.

Consent

Where required, we rely on consent for:

  • non-essential cookies;
  • personalised advertising;
  • certain analytics technologies;
  • electronic direct marketing; and
  • other optional processing presented at the time consent is requested.

The legal basis is Article 6(1)(a) GDPR and, where applicable, German rules governing access to or storage of information on a user’s device. Consent may be withdrawn at any time without affecting processing carried out before withdrawal.

Shopify

Our store is hosted through Shopify. Shopify processes information required to provide the e-commerce platform and related functionality.

Shopify may process data as our processor for certain activities and may act under its own responsibility for other activities. Shopify’s processing is also governed by its applicable privacy documentation and contractual terms.

Payment Processing

Payment information is transmitted to the relevant payment provider to authorise and complete the transaction, prevent fraud, handle disputes, and comply with financial-law obligations.

The payment methods shown at checkout determine which provider receives the information. A provider may process information under its own privacy policy and legal responsibilities.

Order Fulfilment and Delivery

We may disclose necessary data to suppliers, warehouses, fulfilment partners, carriers, customs authorities, and logistics providers to prepare, ship, track, and deliver orders and manage delivery issues.

Only information reasonably necessary for those activities is disclosed.

Cookies and Similar Technologies

The website may use cookies, pixels, local storage, and related technologies.

Strictly necessary technologies may be used to:

  • keep the website operational;
  • remember shopping-cart contents;
  • provide checkout and payment functions;
  • preserve security;
  • balance website traffic; and
  • remember privacy selections.

Non-essential analytics, advertising, and personalisation technologies will be used only where a valid legal basis exists and consent is obtained when required.

You can manage non-essential cookie choices through the consent tool displayed on the website. You may also configure your browser to restrict cookies, although disabling necessary cookies may affect store functionality.

Marketing Communications

We send promotional emails or similar electronic marketing only where permitted by law.

You may unsubscribe through the link in a marketing message or by contacting info@boogdazeg.shop. Unsubscribing from marketing does not prevent service messages relating to orders, security, legal notices, or customer-support requests.

Disclosure of Personal Data

We may disclose personal data to:

  • Shopify and providers supporting the store;
  • payment processors and financial institutions;
  • fulfilment, warehouse, postal, courier, and logistics providers;
  • IT hosting, security, fraud-prevention, analytics, and customer-support providers;
  • professional advisers such as accountants, auditors, insurers, and legal advisers;
  • public authorities where disclosure is required by law;
  • a purchaser, successor, or adviser involved in a genuine corporate transaction; and
  • other recipients where you have consented or instructed us to make the disclosure.

Service providers may process personal data only for authorised purposes and subject to applicable contractual and legal safeguards.

We do not sell personal data in the ordinary meaning of selling customer information for money.

International Data Transfers

Some recipients may process data outside Germany or the European Economic Area.

Where required, transfers are based on an adequacy decision, European Commission standard contractual clauses, or another recognised legal transfer mechanism. Supplementary safeguards may be used where appropriate.

You may contact info@boogdazeg.shop for information about the safeguards relevant to a particular transfer.

Data Retention

We retain personal data only for as long as reasonably necessary for the relevant purpose and applicable legal obligations.

Order, invoice, payment, tax, and accounting records may be retained for statutory retention periods. Customer-service and legal-claim records may be retained until relevant limitation periods expire. Consent records may be kept for as long as necessary to demonstrate compliance.

When data is no longer required, it will be deleted, anonymised, or securely restricted unless continued retention is legally required.

Security

We use reasonable technical and organisational measures intended to protect personal data from unauthorised access, loss, alteration, misuse, or disclosure.

No internet transmission or storage system is completely secure. Customers should protect account credentials, use unique passwords, and notify us if they suspect unauthorised account activity.

Your Data-Protection Rights

Subject to applicable requirements, you may have the right to:

  • obtain confirmation of whether your personal data is processed;
  • access your personal data;
  • correct inaccurate or incomplete data;
  • request erasure;
  • request restriction of processing;
  • receive data in a structured, commonly used, machine-readable format;
  • transmit eligible data to another controller;
  • object to processing based on legitimate interests;
  • object at any time to direct-marketing processing;
  • withdraw consent at any time;
  • request information about relevant international-transfer safeguards; and
  • lodge a complaint with a competent data-protection supervisory authority.

Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. We will stop the relevant processing unless compelling legitimate grounds override your interests, rights, and freedoms or processing is necessary for legal claims.

Requests may be sent to info@boogdazeg.shop. We may request information reasonably necessary to verify identity and protect personal data.

Automated Decision-Making

We do not intend to make decisions producing legal or similarly significant effects solely through automated processing unless this is disclosed, legally permitted, and accompanied by required safeguards.

Automated fraud-screening tools may flag an order for review. Where an automated process produces a legally significant effect, applicable rights to human intervention, expression of views, and contesting the decision will be respected.

Children

The store is not directed at children below the age at which they may independently consent to the relevant data processing. We do not knowingly collect children’s personal data for targeted marketing. A parent or guardian who believes a child provided personal data improperly may contact us.

Complaints

You may contact info@boogdazeg.shop with a privacy concern.

You also have the right to lodge a complaint with the data-protection supervisory authority responsible for your habitual residence, place of work, or the place of the alleged infringement.

Changes to This Policy

We may update this Privacy Policy to reflect legal, operational, or technical changes. The current version and its update date will be published on this website. Material changes will be communicated where required by law.