Privacy policy

The data controller responsible for data processing is:

Francesca Novak (sole proprietorship)
Herzbergstr. 44
61440 Oberursel
Germany
Email: hello@amarithestore.de

We process personal data in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).

Personal data refers to any information relating to an identified or identifiable individual, such as name, address, and email address.

We process your data for the following purposes:

• Processing and fulfilling orders and contracts

• Providing and operating the online shop

• Communication with customers

• Compliance with legal obligations (e.g. tax regulations)

Data processing is based on the GDPR:

• Art. 6 (1) (b) GDPR – performance of a contract

• Art. 6 (1) (c) GDPR – legal obligation

• Art. 6 (1) (f) GDPR – legitimate interests (e.g. secure operation of the website

This online shop is operated using Shopify:

Shopify Inc.
151 O’Connor Street
Ground Floor
Ottawa, Ontario, K2P 2L8
Canada

Shopify processes personal data on our behalf and stores data on servers in Canada and the United States.

Data transfers to third countries are based on the EU Commission’s Standard Contractual Clauses to ensure an adequate level of data protection.

For more information, please refer to Shopify’s privacy policy:
https://www.shopify.com/legal/privacy

Payment Service Providers

To process payments, we use various payment service providers, including Shopify Payments, PayPal, Klarna, Apple Pay, and Google Pay. Depending on the payment method selected, personal data (such as your name, billing address, and payment information) may be transferred to the respective payment service provider. This processing is carried out for the purpose of fulfilling the contract in accordance with Art. 6(1)(b) GDPR.

We work with Printify for product production and shipping:

Printify, Inc.
108 West 13th Street
Wilmington, Delaware 19801
USA

Printify processes personal data (such as name, shipping address, and ordered products) strictly for order fulfillment and delivery purposes.

Depending on the product, Printify uses regional production partners for manufacturing and shipping.

Data transfers to the United States are based on the EU Commission’s Standard Contractual Clauses pursuant to Art. 46 GDPR.

When placing an order, we process the following data:

• Name

• Billing and shipping address

• Email address

• Payment information

• Order history

This data is required for contract fulfillment.

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations (e.g. tax law retention periods of 6–10 years).

Our online shop uses cookies.

Cookies are used to ensure the technical functionality of the website and to improve the user experience.

If analytics or marketing cookies are used (e.g. Shopify Analytics, Meta Pixel, Google Analytics), this will only occur with your explicit consent via a cookie banner.

You have the following rights:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

You may withdraw any consent given at any time with effect for the future

You have the right to lodge a complaint with a supervisory authority.

The competent authority for Hesse, Germany is:

The Hessian Commissioner for Data Protection and Freedom of Information (HBDI)

For questions regarding data protection, please contact us at:

Email: hello@amarithestore.de