Privacy policy

Beelonia · beelonia-shop.de · Last updated: 22 October 2026

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified. Detailed information on data protection can be found in our privacy policy set out below this text.

Data collection on our website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator's contact details in the legal notice of this website.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may be, for example, data that you enter in a contact form.

Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification, the restriction of processing or the erasure of this data. You can contact us at any time at the address given in the legal notice regarding this and any other questions on data protection. You also have the right to lodge a complaint with the competent supervisory authority.

In addition, under certain circumstances you have the right to request the restriction of the processing of your personal data. For details, please refer to the privacy policy under “Right to restriction of processing”.

Analytics tools and third-party tools

When you visit our website, your browsing behaviour may be statistically evaluated. This is done mainly with cookies and with so-called analytics programs. Your browsing behaviour is only analysed with your consent. The analysis is initially pseudonymous, that is, without your name; if we know your email address, for example from an order, we link the analysis to it (details in section 6). You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following privacy policy.

You can object to this analysis. We will inform you about the options for objecting in this privacy policy.

2. General information and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data is data by which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that data transmission over the internet (e.g. when communicating by email) may be subject to security gaps. Complete protection of data against access by third parties is not possible.

Information about the controller

The controller responsible for data processing on this website is:

Beelonia GmbH
Karl-Josef Vering
Warendorfer Str. 1
48361 Beelen, Germany
Telephone: +49 25 86 275
Fax: +49 25 86 16 95
Email: info@beelonia.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. An informal email to us is sufficient for this. The withdrawal does not affect the lawfulness of the data processing carried out before the withdrawal.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right at any time to object, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection under Art. 21(1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection under Art. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of your browser changes from “http://” to “https://” and by the padlock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, restriction of processing, erasure and rectification

Within the framework of the applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to rectification, restriction of processing or erasure of this data. You can contact us at any time at the address given in the legal notice regarding this and any other questions on personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us for this purpose at any time at the address given in the legal notice. The right to restriction of processing exists in the following cases:

• If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was or is unlawful, you can request the restriction of data processing instead of erasure.
• If we no longer need your personal data but you need it for the exercise, defence or establishment of legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
• If you have lodged an objection under Art. 21(1) GDPR, your interests and ours must be weighed against each other. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

3. Data collection on our website

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing computer
• time of the server request
• IP address

This data is not merged with other data sources.

This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – for this purpose, the server log files must be recorded.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.

The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time. An informal email to us is sufficient for this. The withdrawal does not affect the lawfulness of the data processing operations carried out before the withdrawal.

The data you enter in the contact form will remain with us until you ask us to erase it, withdraw your consent to its storage or the purpose for storing the data no longer applies (e.g. after your enquiry has been dealt with). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Enquiries by email, telephone or fax

If you contact us by email, telephone or fax, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of dealing with your request. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for taking pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6(1)(a) GDPR) and/or on our legitimate interests (Art. 6(1)(f) GDPR), as we have a legitimate interest in the effective processing of enquiries addressed to us.

The data you send to us via contact requests will remain with us until you ask us to erase it, withdraw your consent to its storage or the purpose for storing the data no longer applies (e.g. after your request has been dealt with). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

Electronic withdrawal function (withdrawal button)

We provide you on our website with an electronic withdrawal function (“withdrawal button”) through which you, as a consumer, can withdraw from a contract concluded with us. If you use this function, we process the data you provide – in particular your name, the details required to identify the contract (e.g. order number) and an email address for sending the acknowledgement of receipt. We also store the content of your withdrawal statement and the date and time of its receipt.

The purpose of the processing is to receive, process and document your withdrawal and to send you the acknowledgement of receipt required by law.

The legal basis is Art. 6(1)(c) GDPR in conjunction with § 356a BGB (German Civil Code) (compliance with a legal obligation to provide the withdrawal function). Insofar as the processing serves the performance or unwinding of the contract, it is based on Art. 6(1)(b) GDPR. We also base the documentation of the receipt of the withdrawal on our legitimate interest in being able to prove the process (Art. 6(1)(f) GDPR).

Your data is only passed on insofar as this is necessary for processing the contract or we are legally obliged to do so. The data collected in connection with the withdrawal will be erased as soon as it is no longer required for the stated purposes, unless statutory retention periods – in particular under commercial and tax law – prevent this.

4. Newsletter

Scope of processing

You can subscribe to our free newsletter on our website. In doing so, your email address and – if you provide it – your first name are transmitted to us. In addition, to prove your consent, we store the time of registration, the wording of the consent in the version displayed to you, the page from which you registered, your IP address and the identifier of your browser.

Confirmation procedure (double opt-in)

After registering, you will receive an email with a confirmation link. We will only add you to the mailing list once you click this link. This ensures that the registration actually comes from the holder of the email address. If you do not confirm, you will not receive a newsletter.

Purpose and legal basis

We use your data to send you offers, discount promotions, new products, recipes, smoking tips and information about events. The legal basis for the processing is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 7(2) No. 2 UWG (German Act against Unfair Competition).

Performance measurement

Our newsletters contain a tracking pixel and personalised links. This enables us to see whether and when you have opened an email and which links you have clicked. We use this evaluation to tailor the content to the interests of our recipients and to improve our newsletters. Performance measurement is part of your consent; you cannot object to it separately, but can only unsubscribe from the newsletter as a whole.

Recipients and processors

To send the newsletter, we use the Omnisend service of UAB Omnisend, legal entity code 302530363, Verkių g. 25C-1, LT-08223 Vilnius, Lithuania. Omnisend processes your data exclusively on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. Omnisend's group of companies also includes companies outside the European Economic Area; transfers to third countries are subject to the standard contractual clauses of the European Commission (Implementing Decision (EU) 2021/914, Module 2). You can contact Omnisend's data protection officer at privacy@omnisend.com; further information can be found in Omnisend's privacy policy at https://www.omnisend.com/privacy/.

Storage period and withdrawal

You can withdraw your consent at any time without giving reasons. To do so, use the unsubscribe link at the end of each newsletter email or send a message to info@beelonia-shop.de. The withdrawal does not affect the lawfulness of the processing carried out before the withdrawal.

After the withdrawal, we will delete your data from the mailing list. We keep the proof of your consent and of your withdrawal for up to three years after the end of the year in which the withdrawal took place; this serves solely to defend against possible claims for unlawful advertising. The legal basis in this respect is our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Registration via the smoking advisor

An AI-based smoking advisor is available on our website. If you ask it about the newsletter, it displays a registration field in the chat window. Everything stated above applies without change to the consent given there, including the confirmation procedure. If you do not ask the advisor about the newsletter, no data is collected for this purpose.

5. Prize draws

Scope of processing

If you take part in one of our prize draws, we process the data you provide on the prize draw page: email address and Instagram name and, on a voluntary basis, your first name and your answers to our questions (experience, intended use, interests, planned purchase). If you request a call back as a business participant, we also process your telephone number if you provide it. To protect against abuse, we store the time, IP address and browser identifier of your participation.

For the draw, we match your Instagram name with the comments under our prize draw post. For this purpose, we take the Instagram name, comment and time from our own Instagram account.

Purpose and legal basis

Conducting the prize draw, including notifying the winners and sending vouchers (Art. 6(1)(b) GDPR); protection against multiple and automated entries (legitimate interest, Art. 6(1)(f) GDPR); newsletter only with your separate consent in the double opt-in procedure (Art. 6(1)(a) GDPR, see section 4); call back regarding your enquiry (Art. 6(1)(b) GDPR).

Recipients and processors

We store the participation data with Supabase (Supabase Inc., server location Frankfurt am Main) as a processor. If you have ticked the newsletter box, we transmit your email address, first name, Instagram name and your answers to our newsletter service provider Omnisend. If you have consented to use for marketing purposes in the cookie banner, we report your participation as an event to Meta (Meta Pixel and Conversions API, with hashed email address) in order to measure the effectiveness of our advertising (Art. 6(1)(a) GDPR, § 25(1) TDDDG – German Telecommunications Digital Services Data Protection Act). We create the vouchers in our shop system Shopify.

Storage period

We delete the data of participants who did not win no later than three months after the prizes have been handed over. We keep the data of the winners insofar as statutory retention obligations exist. Your newsletter consent and the data required for it remain stored until you withdraw it.

Required information

Providing your email address and Instagram name is required for participation; without them, we cannot assign your entry. All other information is voluntary. Your rights as a data subject can be found in section 2.

6. Visitor analysis with our own audience measurement

Scope of processing

We measure ourselves how our website is used, rather than leaving this solely to third parties. To do this, on your first visit we assign a random identifier to the device and another one to the individual visit. The device identifier is stored in your browser (entry bee_vid in local storage and a cookie of the same name with a lifetime of 365 days), the visit identifier correspondingly as bee_sid. A visit ends after 30 minutes without activity.

We record the pages accessed and their titles, the previously visited page, campaign parameters from the request (such as utm_source, gclid or fbclid), device type, browser, screen size and language setting, the time spent and scroll depth on each page, and events such as viewing a product, adding to the cart, starting checkout, search terms and clicks on telephone numbers or email addresses.

If you add something to the cart, the device identifier is carried along as a hidden cart attribute and therefore appears in the order. As soon as we know your email address – for example through an order or a newsletter registration – we link the previous history with this address and your name. From this point on, the evaluation is no longer anonymous.

Purpose

We want to understand which paths through the shop lead to an order or enquiry and at which points visitors leave, in order to improve our product range, advice and website. It also allows us to attribute an order to the preceding visit instead of estimating it.

Legal basis and consent

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR; for storing and reading the identifiers on your device, additionally § 25(1) TDDDG. Measurement only starts once you have expressly consented to the analytics purposes in the website's privacy notice (consent banner). As long as you have not made a decision, nothing is stored on your device and nothing is transmitted to us.

Withdrawal

You can withdraw your consent at any time via the website's privacy settings. If you select “Decline” there, we immediately delete the identifiers from your browser's local storage and let the cookie expire; no further recording takes place. To have data that has already been transmitted deleted, a message to info@beelonia-shop.de is sufficient.

Storage location and processor

The data is stored in a database of our service provider Supabase; the contracting party is Supabase, Inc., a company incorporated under the laws of the US state of Delaware with an office at 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513. Processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR (supabase.com/legal/dpa). The database location we use is in a data centre in Frankfurt am Main (region eu-central-1). Insofar as access from a third country is required for operation and maintenance, the standard contractual clauses of the European Commission apply.

Storage period

We keep the visit data for as long as it is required for the evaluation described, but no longer than until you withdraw your consent. We then delete it. Identifiers on your device are removed immediately upon withdrawal; regardless of this, the cookie has a lifetime of 365 days.

7. AI smoking advisor

Scope of processing

An AI-based smoking advisor is available on our website, with which you can talk about products and smoking techniques in writing or by voice. Processing only takes place once you start the conversation yourself; for the voice function, your browser must also allow access to the microphone.

We process your input, in the case of voice use a recording of your voice and its transcription, the complete conversation history, the products discussed, the steps carried out by the advisor (such as opening a product page or adding a product to the cart), the page from which you started the conversation, and the duration of the conversation and how it was established. If you provide an email address for the newsletter during the conversation, section 4 also applies.

If you have consented to the analytics purposes under section 6, the device identifier described there is attached to the conversation. This allows us to attribute the conversation to your visit. Without this consent, the conversation remains separate.

Purpose

The advisor is intended to answer questions about smokers, accessories and food preparation and to help you choose the right device. We also review the conversation histories to identify where the advisor has answered incorrectly or incompletely, in order to improve it.

Legal basis

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR, which you give by clicking “Accept” in the chat window; when using voice, you also allow access to the microphone. You can withdraw your consent at any time with effect for the future, for example by sending a message to info@beelonia-shop.de, and you can end the conversation at any time.

Processor and transfer to the USA

To operate the advisor, we use the ElevenLabs service of Eleven Labs Inc., 169 Madison Ave #2484, New York, NY 10016, USA. ElevenLabs processes the data exclusively on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR (elevenlabs.io/dpa). In the process, your input is transferred to the USA; the server locations are the USA, the Netherlands and Singapore. Eleven Labs Inc. is certified under the EU-US Data Privacy Framework, so that the transfer is based on the adequacy decision of the European Commission pursuant to Art. 45 GDPR; the standard contractual clauses also apply. You can contact ElevenLabs' data protection officer at legal@elevenlabs.io.

Storage period

At ElevenLabs, voice recordings, conversation text and personal data are automatically deleted after 90 days. We additionally store the conversation text without the voice recording in our database in Frankfurt am Main in order to check the quality of the advice and to be able to assign follow-up questions; the storage period and deletion described in section 6 apply to this copy. On request, we will delete a conversation earlier – a message to info@beelonia-shop.de is sufficient.

8. Plugins and tools

YouTube

Our website uses plugins from YouTube, a site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our pages equipped with a YouTube plugin, a connection to YouTube's servers is established. The YouTube server is informed which of our pages you have visited.

Furthermore, YouTube may store various cookies on your device. With the help of these cookies, YouTube can obtain information about visitors to our website. This information is used, among other things, to collect video statistics, improve user-friendliness and prevent attempts at fraud. The cookies remain on your device until you delete them.

If you are logged into your YouTube account, you enable YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

Further information on the handling of user data can be found in YouTube's privacy policy at: https://policies.google.com/privacy?hl=de.

Google Web Fonts

For the uniform display of fonts, this site uses so-called web fonts provided by Google. When you access a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google's servers. This gives Google knowledge that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

If your browser does not support web fonts, a standard font from your computer will be used.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.

9. Instalment purchase with easyCredit

Instalment calculator on the product pages

Instalment purchase with easyCredit is offered only in our German-language shop and only to customers whose place of residence is in Germany. On product pages, we show the lowest monthly instalment at which you can finance a product with easyCredit instalment purchase. The provider of instalment purchase is TeamBank AG, Beuthener Str. 25, 90471 Nürnberg, Germany. For this display, your browser loads program code and the instalment calculation from TeamBank servers (ratenkauf.easycredit.de). In the process, TeamBank receives your IP address, the address of the page accessed and the price of the product. We have configured the integration so that nothing is stored on your device.

If you click to open the detailed instalment calculator, it is loaded directly from TeamBank in a window. TeamBank's privacy notices apply there.

The legal basis is our legitimate interest in informing you about the possibility of financing as early as on the product page (Art. 6(1)(f) GDPR).

Payment by instalment purchase

If you select “Ratenkauf mit easyCredit” at checkout, you apply for financing directly from TeamBank after placing your order. Via the link you receive from us for this purpose, we transfer the order amount and the order number. You provide all other information required for the application, such as details about yourself, your bank details and your income, to TeamBank yourself. TeamBank checks your application and your creditworthiness on its own responsibility. We receive from TeamBank the information about the transaction required for processing, in particular whether and in what amount the instalment purchase is concluded.

The legal basis is the performance of the purchase contract with you (Art. 6(1)(b) GDPR). TeamBank's privacy notices can be found (in German) at www.easycredit.de/datenschutz.

10. Enquiries about leasing and the outdoor kitchen

You can contact us directly via two forms on our product and promotion pages: as a business, to request a leasing or hire-purchase offer (10.1), and to request an offer for the outdoor kitchen (10.2).

10.1 Leasing enquiry for business customers

Scope of processing

Using the leasing calculator on the product pages, businesses can request a non-binding leasing or hire-purchase offer. In doing so, we process your details from the form (company, contact person, email address, telephone number, postcode and town, country and your message) as well as the product, the selected version, the price and the desired term. The calculator itself only calculates in your browser; data is only sent when you submit the enquiry.

Purpose and legal basis

We use the information to answer your enquiry and to obtain an offer for you from a leasing company, currently usually MMV Leasing GmbH, Koblenz. The legal basis is pre-contractual measures taken at your request (Art. 6(1)(b) GDPR) and our legitimate interest in processing business enquiries (Art. 6(1)(f) GDPR).

Recipients and processors

The enquiry is received by a server service that we operate with Vercel Inc. (USA). It forwards it by email via Omnisend (see section 4) to our sales team and to the marketing agency that supports us. Vercel and Omnisend process the data exclusively on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. Vercel Inc. is certified under the EU-US Data Privacy Framework, so that transfers to the USA are based on the adequacy decision of the European Commission pursuant to Art. 45 GDPR. The leasing company only receives your details to the extent necessary for the offer; its own privacy notices apply to its processing.

Storage period

We keep the enquiry for as long as it is necessary for processing it and for the possible initiation of a contract, and then delete it unless statutory retention obligations apply, for example for business letters under § 257 HGB (German Commercial Code).

Required information

We need the information marked with * in order to obtain an offer. Without it, an enquiry via the form is not possible; however, you can also reach us by telephone at any time.

10.2 Enquiry about the outdoor kitchen

Scope of processing

On the product page and the promotion page for the outdoor kitchen, you can use a form to request a non-binding offer for the kitchen you want. In doing so, we process your details from the form (name, email address, telephone number and postcode, if you provide them, the project status and your message) as well as the selected configuration (shape, grill position, fronts, pizza oven, surface and colour, worktop, equipment and, where available, the price). On the product page, your browser also generates an image of the kitchen as you have put it together in the 3D configurator when you submit the form; the image only shows the kitchen and contains no information about you. Data is only sent when you submit the enquiry.

Purpose and legal basis

We use the information to answer your enquiry and to make you a proposal with a price for your kitchen. The legal basis is pre-contractual measures taken at your request (Art. 6(1)(b) GDPR) and our legitimate interest in processing enquiries (Art. 6(1)(f) GDPR).

Recipients and processors

The enquiry is received by the same server service at Vercel Inc. (USA) as the leasing enquiry. It forwards it by email via Omnisend (see section 4) to our sales team and to the marketing agency that supports us. It stores the image of the configuration in the Vercel Blob storage service in a data centre in Frankfurt am Main so that it can be displayed in this email. What is stated under 10.1 applies to processing on our behalf and to the transfer to the USA. Your email address is not added to our newsletter mailing list. If the service cannot receive the enquiry, the page sends it to us instead via the contact form of our shop system (see section 11).

Storage period

We keep the enquiry for as long as it is necessary for processing it and for the possible initiation of a contract, and then delete it unless statutory retention obligations apply, for example for business letters under § 257 HGB.

Required information

We need your name and email address to be able to reply to you; all other information is voluntary. Without your name and email address, an enquiry via the form is not possible; however, you can also reach us by telephone at any time.

11. Shop system and customer account

Shop system

Our online shop runs on the Shopify shop system. The provider for merchants in the EU is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify provides the website and processes on our behalf the data you provide in the shop, for example when placing orders, in the contact form and in the customer account, as well as technical data when pages are accessed. The basis for this is a data processing agreement pursuant to Art. 28 GDPR. Shopify mainly processes the data on servers in the EU. Transfers to Shopify Inc. in Canada are based on the European Commission's adequacy decision for Canada; for other sub-processors in third countries, the standard contractual clauses of the European Commission apply.

The legal basis is our legitimate interest in a secure and reliable online shop (Art. 6(1)(f) GDPR) and, where orders and enquiries are concerned, the performance of the contract or pre-contractual measures (Art. 6(1)(b) GDPR).

Customer account

You can create a customer account. For this purpose, we store your email address and your password (encrypted), your first and last name if you provide them, and your orders and addresses. With the account, you can view your orders and order more quickly. The legal basis is the performance of the contract regarding the customer account (Art. 6(1)(b) GDPR). You can have your account deleted at any time; an informal message to us is sufficient. We keep information on orders insofar as statutory retention obligations exist.

Source (base template): e-recht24.de · Supplemented by the section “Electronic withdrawal function” pursuant to § 356a BGB (in force from 19 June 2026) and the sections “Newsletter”, “Prize draws”, “Visitor analysis”, “AI smoking advisor”, “Instalment purchase with easyCredit”, “Enquiries about leasing and the outdoor kitchen” and “Shop system and customer account” (as of 22 October 2026). This English version is a translation by Beelonia GmbH.