Privacy Policy

Last updated: June 3, 2026

1. General Information

The protection of your personal data is very important to us at Perlenburg.

We treat your personal data confidentially and in accordance with the applicable data protection laws, including the General Data Protection Regulation (GDPR), as well as this Privacy Policy.

This Privacy Policy explains what personal data we collect, how we use it, and what rights you have when you visit our Shopify online store, place an order, contact us, or use our services.

2. Controller

The controller responsible for data processing is:

Elena Miller Perlenburg Hauptstr. 117 89233 Neu-Ulm Germany

Phone: +49 151 23603246 Email: info@perlenburg.de

3. Collection and Storage of Personal Data

a) When Visiting Our Online Store

When you visit our online store, certain information is automatically transmitted by your browser or device. This may include: IP address, date and time of the request, name and URL of the accessed file, referrer URL, browser type and version, operating system, and device and usage information.

This data is processed to ensure the technical operation, security, and stability of our online store.

Legal basis: Art. 6(1)(f) GDPR.

Our online store is operated through Shopify. Shopify may process technical and usage data in order to provide, secure, and improve the shop platform.

b) When Contacting Us

If you contact us by email, contact form, or another communication channel, we process the information you provide in order to respond to your request. This may include your name, email address, order number, message content, and any additional information you choose to provide.

Legal basis: Art. 6(1)(b) GDPR, if your request relates to an order or contract, and Art. 6(1)(f) GDPR for general communication.

c) When Placing an Order

When you place an order in our online store, we process the personal data necessary to complete and ship your order. This may include: name, billing and shipping address, email address, phone number (if provided), order details, and payment and transaction information.

Legal basis: Art. 6(1)(b) GDPR.

Payment data is processed by the selected payment provider. We do not store full credit card details ourselves.

d) Customer Account

If you create a customer account, we process the data required to create and manage your account, such as your name, email address, address details, and order history.

Legal basis: Art. 6(1)(b) GDPR.

4. Shopify

Our online store is hosted and operated through Shopify. Shopify provides the technical platform that allows us to offer our products and services online. In this context, Shopify may process personal data such as customer information, order information, payment-related information, device data, and usage data.

Shopify may process data in countries outside the European Union. Where required, appropriate safeguards are used to protect your personal data.

For more information, please refer to Shopify's Privacy Policy.

5. Payment Providers

To process payments, we use external payment providers, such as Shopify Payments, PayPal, credit card providers, or other payment methods offered at checkout. The payment provider you choose processes the data required for payment processing, including name, billing information, payment details, and transaction information.

Legal basis: Art. 6(1)(b) GDPR.

6. Shipping Providers

For the delivery of your order, we may share the necessary delivery data with shipping providers. This may include your name, shipping address, and, if required for delivery, your email address or phone number.

Legal basis: Art. 6(1)(b) GDPR.

7. WhatsApp Business

We may use WhatsApp Business for customer communication. The use of WhatsApp is voluntary. Please note that when using WhatsApp, personal data may be processed by WhatsApp Ireland Limited and may also be transferred to servers outside the European Union. Please do not send sensitive personal data via WhatsApp.

For more information, please refer to WhatsApp's Privacy Policy.

8. Cookies and Cookie Consent

Our online store uses cookies and similar technologies. Some cookies are technically necessary to operate the online store. Other cookies, such as analytics or marketing cookies, are only used with your consent, where required by law.

When you first visit our online store, you may be asked to manage your cookie preferences via a cookie banner. You can change or withdraw your consent at any time through the cookie settings, if available.

Legal basis for technically necessary cookies: Art. 6(1)(f) GDPR. Legal basis for consent-based cookies: Art. 6(1)(a) GDPR.

9. Newsletter and Marketing Emails

If you subscribe to our newsletter, we process your email address in order to send you news, creative inspiration, product updates, tutorials, and special offers. You can unsubscribe at any time by using the unsubscribe link in the email or by contacting us.

Legal basis: Art. 6(1)(a) GDPR.

10. Social Media and External Links

Our online store may contain links to our social media profiles, such as Instagram and Pinterest. When you click on these links, you will be redirected to the respective platform. The privacy policy of the respective provider applies.

11. Embedded Content: YouTube and Vimeo

Our online store may include embedded videos from YouTube or Vimeo. When you play such a video, a connection to the servers of the respective provider may be established. This may involve the transfer of personal data, including your IP address, to providers outside the European Union.

Providers:

• YouTube / Google Ireland Limited
• Vimeo.com, Inc.

Please refer to the privacy policies of the respective providers for more information.

12. Disclosure of Personal Data

We only share your personal data where necessary for the operation of our online store, the fulfilment of your order, legal obligations, or with your consent. Data may be shared with: Shopify, payment providers, shipping providers, IT and hosting service providers, email and newsletter service providers, tax advisors or accounting service providers, and authorities where legally required.

13. Storage Period

We store personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Order and invoice data may be stored for the statutory retention periods required under tax and commercial law.

14. Your Rights

You have the following rights under the GDPR:

• Right of access – Art. 15 GDPR
• Right to rectification – Art. 16 GDPR
• Right to erasure – Art. 17 GDPR
• Right to restriction of processing – Art. 18 GDPR
• Right to data portability – Art. 20 GDPR
• Right to object – Art. 21 GDPR
• Right to withdraw consent at any time – Art. 7(3) GDPR

To exercise your rights, please contact us at: info@perlenburg.de

15. Right to Object

You have the right to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR, if there are reasons arising from your particular situation.

16. Right to Lodge a Complaint

You also have the right to lodge a complaint with a data protection supervisory authority.

The competent supervisory authority for private companies in Bavaria is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18 91522 Ansbach Germany

Website: www.lda.bayern.de

17. Data Security

We use appropriate technical and organisational measures to protect your personal data against loss, destruction, unauthorised access, alteration, or disclosure.

18. Updates to This Privacy Policy

This Privacy Policy is current as of June 3, 2026. We may update this Privacy Policy from time to time if our online store, services, legal requirements, or data processing practices change.