Datenschutzerklärung

This Privacy Policy describes how petitemendigotex.shop collects, uses, discloses, stores, and otherwise processes personal data when individuals visit our website, make purchases, contact us, or otherwise interact with our online store.

This policy is intended to provide transparent information relevant to customers and visitors in Germany and the European Economic Area.

The GDPR requires controllers to provide information including controller contact details, processing purposes and legal bases, categories of recipients, applicable international transfers, retention information, and data-subject rights.

1. Data Controller

For personal data processed in connection with this store, the store contact is:

petitemendigotex.shop
Website: petitemendigotex.shop
Email: info@petitemendigotex.shop

Where petitemendigotex.shop determines the purposes and means of processing personal data, it acts as the data controller for that processing.

2. Personal Data We May Collect

Depending on how you interact with our store, we may process identification and contact information such as your name, email address, telephone number, billing details, shipping details, and other information you provide.

We may process order and transaction information including products purchased, order value, payment status, refunds, returns, delivery status, customer service correspondence, and transaction history.

Payment information may be processed through Shopify, payment processors, financial institutions, or other payment-service providers. We generally do not need to store complete payment-card details ourselves when they are securely handled by authorized payment providers.

We may also process technical information such as IP address, browser type, device information, operating system, website activity, cookie identifiers, interaction information, and security-related data.

3. Information You Provide Directly

You may provide personal information when you place an order, create or use a customer account, contact customer support, request a return or refund, submit information through our website, subscribe to marketing communications, participate in a promotion, or otherwise communicate with us.

Certain information is necessary to enter into or perform a purchase contract.

If required information such as a valid delivery address is not provided, we may be unable to process or deliver an order.

4. Purposes of Processing

We may use personal information to operate our online store, process transactions, accept and manage orders, arrange shipment and delivery, provide order confirmations, manage customer accounts, handle refunds and returns, respond to inquiries, prevent fraud, protect account and website security, maintain business records, comply with legal obligations, improve store operations, and provide marketing communications where legally permitted.

Personal information is not used for unrelated purposes without an appropriate legal basis.

5. Legal Bases Under the GDPR

Where the GDPR applies, processing may rely on one or more legal bases.

Processing necessary to accept, manage, fulfill, deliver, return, or refund an order may be based on the necessity of processing for the performance of a contract or steps taken at the customer's request before entering into a contract.

Processing necessary to comply with accounting, tax, consumer protection, fraud prevention, record-keeping, or other legal requirements may be based on compliance with a legal obligation.

Certain security, fraud prevention, business administration, service improvement, and similar processing may rely on legitimate interests, provided those interests are not overridden by the rights and freedoms of affected individuals.

Marketing or non-essential tracking activities may rely on consent where consent is legally required.

The GDPR expressly requires privacy information to identify both processing purposes and relevant legal bases.

6. Shopify

Our store is hosted and supported through Shopify.

As part of providing its commerce services, Shopify may process personal information associated with website visits, checkout, orders, transactions, customer accounts, fraud prevention, analytics, and other store functionality.

Shopify provides merchants with privacy features including privacy policies, cookie banners, consent controls, and other customer privacy settings. Shopify states that non-essential data in configured EEA cookie-banner regions is collected only after the relevant consent choices are obtained through configured privacy tools.

7. Service Providers and Recipients

We may disclose personal information to service providers when reasonably necessary to operate our business.

These categories may include Shopify and its processors, payment processors, financial institutions, shipping carriers, fulfillment providers, technology providers, fraud-prevention providers, security providers, analytics providers, professional advisers, customer support providers, and marketing providers where applicable.

Service providers are expected to process information only in accordance with applicable contractual and legal requirements.

8. Shipping and Fulfillment

To deliver purchased products, relevant information such as recipient name, delivery address, telephone number where necessary, email address, order reference, and shipment information may be provided to fulfillment partners and shipping carriers.

Such information is used to arrange transportation, customs procedures where applicable, delivery notifications, tracking, delivery confirmation, and related services.

9. Payment Processing

Payment information may be submitted directly to payment providers or processed through Shopify-supported payment systems.

Payment providers may independently process personal information for fraud prevention, transaction authorization, regulatory compliance, payment settlement, chargeback management, and other purposes governed by their respective legal obligations and privacy terms.

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies for essential site functions, security, checkout functionality, customer preferences, analytics, personalization, and marketing.

Where German or EEA law requires consent before storing or accessing non-essential information on a user's device, applicable consent mechanisms should be used.

Shopify provides cookie-banner functionality for EEA markets and explains that third-party pixels or cookies installed separately may require additional consent-management configuration.

Visitors can use the privacy or cookie controls made available on our store to manage applicable consent preferences.

11. Marketing

Where permitted by applicable law, we may send customers information regarding products, store updates, offers, or promotions.

Where consent is required, marketing communications will be based on the customer's consent.

Customers may withdraw marketing consent at any time through an unsubscribe mechanism where provided or by contacting:

info@petitemendigotex.shop

Withdrawal of marketing consent does not affect processing that occurred lawfully before withdrawal.

12. International Data Transfers

Some service providers involved in operating an international e-commerce platform may process personal information outside Germany or the European Economic Area.

Where personal data protected by the GDPR is transferred internationally, applicable legal transfer mechanisms and safeguards will be used where required, such as an applicable adequacy decision, approved contractual safeguards, or another lawful mechanism.

The GDPR requires transparency regarding transfers to third countries and the applicable safeguards where relevant.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and as required by applicable law.

Retention periods may depend on the type of information, contractual requirements, tax and accounting requirements, legal claims, dispute-resolution requirements, fraud-prevention needs, and other legitimate purposes.

The GDPR requires the privacy notice to specify the retention period or, where a fixed period cannot be specified, the criteria used to determine it.

14. Data Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, accidental loss, misuse, alteration, or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Customers should also protect their own passwords, devices, email accounts, and other authentication credentials.

15. Your GDPR Rights

Subject to applicable conditions and exceptions, individuals may have the right to request access to personal data, correction of inaccurate data, deletion of data, restriction of processing, data portability, and objection to certain processing.

Where processing relies on consent, individuals may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

Individuals also have the right to lodge a complaint with a competent supervisory authority.

GDPR requests generally must be handled without undue delay and normally within one month, subject to the extensions and exceptions permitted by law.

Requests may be submitted to:

info@petitemendigotex.shop

We may request reasonable information necessary to verify identity before acting on a privacy request.

16. Children's Privacy

Our store is intended for customers capable of entering into legally valid purchasing arrangements or acting with appropriate authorization.

We do not knowingly seek to collect unnecessary personal data from children.

If personal information relating to a child has been provided improperly, a parent or guardian may contact us.

17. Legal Disclosure

We may disclose information where reasonably necessary to comply with applicable law, a valid legal process, regulatory obligations, court orders, protect legal rights, investigate suspected fraud, protect customers, or defend legal claims.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in legal requirements, Shopify functionality, business practices, service providers, or processing activities.

The latest version will be made available on our website with an updated revision date.

Shopify also recommends that merchants regularly review their privacy policies and privacy settings so that the disclosures accurately reflect actual store practices.

19. Contact

For questions about this Privacy Policy or requests relating to personal data, contact:

petitemendigotex.shop
Email: info@petitemendigotex.shop