Datenschutzerklärung

 

At unique-vintage.shop, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how unique-vintage.shop collects, uses, stores, shares, and otherwise processes personal data when you visit our website, browse our products, create or use an account, communicate with us, make a purchase, request customer support, exercise your legal rights, or otherwise interact with our online store.

This Privacy Policy is intended to provide transparent information in accordance with applicable data protection laws, including the General Data Protection Regulation of the European Union ("GDPR") and applicable German data protection and privacy requirements.

For questions regarding this Privacy Policy or the processing of your personal data, please contact:

Data Controller: unique-vintage.shop
Email: info@unique-vintage.shop

1. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed in connection with unique-vintage.shop, including personal data collected when you:

  • Visit or browse our website

  • View products

  • Add products to your shopping cart

  • Place or attempt to place an order

  • Complete checkout

  • Create or use a customer account

  • Contact customer support

  • Subscribe to marketing communications

  • Participate in promotions where offered

  • Request a return, refund, or exchange

  • Submit a privacy request

  • Interact with website functionality, cookies, pixels, or similar technologies

  • Otherwise communicate or interact with unique-vintage.shop

This Privacy Policy does not necessarily govern independent websites, platforms, or services operated by third parties that may be accessible through our website.

Third-party services may process personal data according to their own privacy policies and legal responsibilities.

2. Data Controller

For personal data that unique-vintage.shop determines the purposes and means of processing, the data controller is:

unique-vintage.shop
Email: info@unique-vintage.shop

You may contact us at this email address regarding privacy questions or to exercise applicable data protection rights.

3. Personal Data We May Collect

Depending on how you interact with our store, we may collect and process different categories of personal data.

Identification and Contact Information

This may include:

  • First name

  • Last name

  • Email address

  • Telephone number where provided

  • Billing address

  • Shipping address

  • Country or region

  • Other contact details you voluntarily provide

Order and Transaction Information

This may include:

  • Order number

  • Products ordered

  • Product quantities

  • Purchase value

  • Discounts

  • Shipping method

  • Delivery information

  • Transaction status

  • Returns

  • Refunds

  • Exchanges

  • Order history

  • Communications relating to an order

Payment-Related Information

When you make a purchase, payment information may be processed by Shopify and the payment providers made available during checkout.

Depending on the payment method, information may include:

  • Payment method

  • Payment status

  • Billing information

  • Transaction identifiers

  • Limited payment card information

  • Fraud-prevention information

We do not require customers to send full payment card numbers, security codes, banking passwords, or authentication credentials to us by email.

Payment providers may independently process certain payment information under their own privacy policies and legal obligations.

4. Account Information

If customer account functionality is available and you create or use an account, we may process information associated with that account, including:

  • Name

  • Email address

  • Account identifier

  • Saved addresses

  • Order history

  • Account preferences

  • Login-related information

  • Customer account activity

Account functionality may be provided in whole or in part through Shopify.

5. Customer Service Information

When you contact us, we may collect information contained in your communication.

This may include:

  • Name

  • Email address

  • Order number

  • Message content

  • Product information

  • Photographs you send us

  • Return or refund information

  • Delivery information

  • Complaint details

  • Records of communications with our customer support team

We use this information to respond to your enquiry and manage the relevant customer service matter.

6. Technical and Device Information

When you use our website, certain technical information may be collected automatically.

Depending on your device, browser, settings, consent choices, and the technologies active on our store, this information may include:

  • Internet Protocol address

  • Browser type

  • Browser version

  • Device type

  • Operating system

  • Device identifiers

  • Cookie identifiers

  • Network information

  • General location derived from technical information

  • Website pages visited

  • Referring website

  • Date and time of access

  • Shopping activity

  • Cart activity

  • Website interactions

  • Session information

  • Technical error information

This information may be required to operate, secure, maintain, and improve the website.

Where consent is legally required for non-essential technologies, such technologies are intended to operate subject to the applicable consent mechanism.

7. Information About How You Use Our Store

We may process information about your interaction with unique-vintage.shop, including information about:

  • Products you view

  • Searches you perform

  • Products added to or removed from your cart

  • Checkout activity

  • Purchases

  • Website navigation

  • Preferences

  • Marketing interactions where applicable

  • Session activity

  • Referral sources

The purposes and legal basis for this processing depend on the particular activity and technology involved.

8. Sources of Personal Data

We may obtain personal data from several sources.

Directly From You

For example, when you:

  • Place an order

  • Create an account

  • Contact us

  • Request customer service

  • Subscribe to communications

  • Submit information through our website

  • Exercise a privacy right

Automatically Through the Website

Technical information may be collected when you interact with our website, subject to applicable legal requirements and your consent choices.

From Service Providers

We may receive information from service providers involved in operating our business, including Shopify, payment providers, shipping providers, fraud-prevention providers, technical service providers, and other service providers where applicable.

From Other Parties

Where legally permitted, we may receive information from other sources required to operate, secure, or protect our business and customers.

9. Why We Process Personal Data

We process personal data only where we have an appropriate purpose and legal basis.

The principal purposes are described below.

10. Processing Orders

We process personal data to:

  • Receive orders

  • Confirm purchases

  • Process transactions

  • Arrange fulfilment

  • Arrange shipping

  • Provide order updates

  • Process returns

  • Process refunds

  • Handle cancellations

  • Resolve order-related problems

  • Provide customer service

Where necessary to fulfil an order or take steps requested by you before entering into a contract, processing is generally based on the performance of a contract or pre-contractual measures.

11. Customer Support

We process personal data when responding to:

  • Product questions

  • Order enquiries

  • Delivery enquiries

  • Returns

  • Refunds

  • Complaints

  • Account questions

  • Privacy enquiries

  • Other customer service requests

Depending on the circumstances, processing may be necessary to perform a contract, comply with a legal obligation, or pursue our legitimate interests in providing effective customer service.

12. Legal and Regulatory Compliance

We may process personal data when necessary to comply with applicable legal obligations.

This can include obligations concerning:

  • Taxation

  • Accounting

  • Commercial records

  • Consumer protection

  • Product safety

  • Fraud investigations

  • Regulatory enquiries

  • Court proceedings

  • Lawful government requests

  • Data protection obligations

Where processing is required by law, the legal basis is compliance with a legal obligation.

13. Fraud Prevention and Security

We may process relevant information to:

  • Detect suspicious activity

  • Prevent fraudulent transactions

  • Protect customer accounts

  • Prevent misuse of our website

  • Protect our systems

  • Investigate security incidents

  • Enforce applicable contractual rights

  • Establish, exercise, or defend legal claims

Depending on the circumstances, this processing may be based on our legitimate interests, legal obligations, or another lawful basis.

Our legitimate interests include protecting our customers, website, business, transactions, and information systems from fraud, abuse, and security threats.

14. Website Operation and Improvement

We may process information necessary to:

  • Operate the website

  • Maintain website functionality

  • Identify technical errors

  • Improve performance

  • Improve navigation

  • Understand how essential website functions are used

  • Maintain security

  • Prevent service disruption

Where appropriate, this processing may be based on legitimate interests or may be necessary to provide a service requested by you.

Analytics or other non-essential technologies that require consent are subject to consent requirements where applicable.

15. Marketing Communications

Where permitted by applicable law, we may use contact information to send marketing communications concerning products, offers, or other commercial information.

Where consent is legally required, we will rely on your consent.

You may withdraw your consent or unsubscribe from marketing communications at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

You can also contact:

info@unique-vintage.shop

to request assistance with marketing preferences.

Transactional communications concerning an order, payment, delivery, return, security issue, or customer service matter are not necessarily marketing communications and may continue where required to provide the requested service or comply with legal obligations.

16. Legal Bases Under the GDPR

Depending on the circumstances, we may rely on one or more of the following legal bases.

Performance of a Contract

We may process personal data when processing is necessary to perform a contract with you or take steps at your request before entering into a contract.

Examples include:

  • Processing an order

  • Arranging delivery

  • Processing payment-related information

  • Handling a return

  • Processing a refund

  • Responding to contractual customer service matters

Legal Obligation

We may process information where necessary to comply with obligations imposed by applicable law.

Legitimate Interests

We may process information where necessary for our legitimate interests or those of another party, provided that those interests are not overridden by your rights and freedoms.

Relevant interests may include:

  • Protecting our website

  • Preventing fraud

  • Maintaining security

  • Providing customer support

  • Managing business operations

  • Establishing or defending legal claims

  • Improving essential website functions

Consent

Where required, we may process information based on your consent.

Examples may include:

  • Certain marketing communications

  • Certain analytics activities

  • Certain advertising activities

  • Non-essential cookies or similar technologies

You may withdraw consent at any time where processing is based on consent.

17. Shopify

Our online store operates using Shopify's commerce platform.

Shopify may process customer personal data to provide services necessary for the operation of our online store.

Depending on the Shopify services and features being used, Shopify may process categories of data such as:

  • Contact information

  • Order information

  • Transaction information

  • Shipping information

  • Device information

  • Browsing activity

  • Customer account information

  • Privacy preferences

For certain processing performed on our instructions to operate the store, Shopify may act as a processor or service provider.

For certain Shopify services and functions, Shopify may separately determine purposes and means of processing and may act as an independent controller as permitted by applicable data protection law.

Shopify provides its own Consumer Privacy Policy describing how Shopify processes personal data, privacy choices, and the rights available in relation to processing for which Shopify is responsible.

18. Payment Providers

Payments may be processed through payment services available at checkout.

Payment providers may receive information necessary to:

  • Authorise payments

  • Complete transactions

  • Prevent fraud

  • Process refunds

  • Comply with financial regulations

  • Resolve disputes

Payment providers may act as independent controllers for certain processing activities.

Their processing is also governed by their own privacy notices and applicable legal requirements.

19. Shipping and Fulfilment Providers

To deliver purchases, we may disclose necessary information to shipping, logistics, fulfilment, or delivery providers.

This information may include:

  • Customer name

  • Shipping address

  • Contact information

  • Order or shipment identifier

  • Information necessary for delivery

Such information is disclosed only to the extent reasonably necessary for fulfilment and delivery or as otherwise permitted by law.

20. Other Service Providers

We may use service providers to support the operation of our store.

Depending on the services actually used, categories of providers may include:

  • E-commerce infrastructure providers

  • Hosting providers

  • Payment processors

  • Shipping and fulfilment providers

  • Customer support providers

  • IT providers

  • Security providers

  • Fraud-prevention providers

  • Analytics providers

  • Marketing service providers

  • Professional advisers

Service providers that process personal data on our behalf are expected to process that information subject to applicable contractual and data protection requirements.

Where a service provider acts independently as a controller, its own privacy practices may also apply.

21. Disclosure Required by Law

We may disclose personal data where disclosure is necessary or permitted to:

  • Comply with applicable law

  • Respond to lawful court orders

  • Respond to legally valid government or regulatory requests

  • Protect legal rights

  • Investigate suspected fraud

  • Protect customers or other persons

  • Prevent security threats

  • Establish, exercise, or defend legal claims

Any disclosure will be limited to what is reasonably necessary in the relevant circumstances and subject to applicable law.

22. Business Transactions

If all or part of our business is reorganised, transferred, sold, merged, financed, or otherwise involved in a legitimate corporate transaction, relevant personal data may be disclosed or transferred as permitted by applicable law.

We will continue to apply applicable data protection requirements to personal data involved in such transactions.

23. International Data Transfers

Because our store uses Shopify and may rely on service providers operating internationally, personal data may be processed outside Germany or outside the European Economic Area.

Where personal data protected by the GDPR is transferred to a country outside the European Economic Area, we take or rely on appropriate safeguards as required by applicable law.

Depending on the destination and recipient, these safeguards may include:

  • An adequacy decision issued by the European Commission

  • Standard Contractual Clauses

  • Binding Corporate Rules

  • Other legally recognised transfer mechanisms

  • A lawful derogation applicable to a specific transfer

Additional safeguards may be applied where required.

Shopify may process data in countries in which Shopify, its affiliated companies, or its service providers operate, subject to the applicable international data transfer requirements.

24. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies are small data files or comparable technologies that may be stored on or accessed from a user's device.

These technologies may be used for purposes such as:

  • Maintaining website functionality

  • Remembering shopping cart contents

  • Supporting checkout

  • Maintaining security

  • Remembering preferences

  • Measuring website performance

  • Analytics

  • Personalisation

  • Advertising, where applicable

The exact technologies used may change as our store, Shopify functionality, and installed applications change.

25. Strictly Necessary Technologies

Certain cookies or similar technologies may be necessary to provide functionality expressly requested by the user.

Examples may include technologies required to:

  • Maintain shopping cart functionality

  • Provide checkout

  • Maintain security

  • Prevent fraud

  • Maintain sessions

  • Remember essential privacy settings

  • Transmit communications

  • Provide essential website functionality

Where applicable law permits such technologies without prior consent because they are strictly necessary, they may operate without separate consent.

26. Non-Essential Cookies and Consent

Where German or European law requires consent before information is stored on or accessed from your device, we seek the required consent before using the relevant non-essential technologies.

This may apply to certain:

  • Analytics technologies

  • Advertising technologies

  • Personalisation technologies

  • Marketing cookies

  • Tracking technologies

  • Pixels

Where available, you can use our cookie banner or cookie preference controls to accept, reject, or modify relevant choices.

Refusing non-essential technologies should not prevent you from accessing essential store functionality, although some optional features may be affected.

You may change or withdraw your consent through the available cookie preference mechanism.

27. Shopify Customer Privacy Features

Our store may use Shopify customer privacy functionality to manage privacy and consent preferences.

Depending on your location and the configuration of the store, a cookie banner or privacy preference control may be displayed.

Where available, you can use these controls to manage consent for relevant data collection activities.

Shopify-managed pixels and other Shopify technologies may respond to customer consent choices in configured regions.

Third-party technologies installed separately may require additional consent controls.

28. Analytics

We may use analytics functionality to understand website performance and customer interaction.

Analytics information may include:

  • Pages visited

  • Session information

  • Product views

  • Device information

  • Browser information

  • Approximate location

  • Referral information

  • Website interaction information

Where analytics technologies require consent, they are intended to operate only after the required consent has been obtained.

Where analytics processing is performed without consent, we will only do so where another lawful basis is available and all applicable requirements are satisfied.

29. Advertising and Personalisation

If advertising or personalisation technologies are used, information about website interactions may be processed to measure campaigns, understand marketing effectiveness, or provide relevant content.

Where consent is required under applicable law, this processing will be based on consent.

You may withdraw consent through the available privacy or cookie controls.

We do not intend to rely on this Privacy Policy itself as a substitute for obtaining consent where consent is legally required.

30. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or as required or permitted by applicable law.

Retention periods may depend on factors including:

  • The duration of our contractual relationship with you

  • Completion of an order

  • Returns or refund processing

  • Customer support requirements

  • Legal retention obligations

  • Accounting obligations

  • Tax requirements

  • Fraud prevention

  • Security requirements

  • Limitation periods

  • Potential or existing legal claims

  • Regulatory obligations

Where data is no longer required and there is no legal basis for continued retention, it will be deleted, anonymised, or otherwise handled in accordance with applicable data protection requirements.

31. Security

We take reasonable technical and organisational measures designed to protect personal data against:

  • Unauthorised access

  • Unlawful processing

  • Accidental loss

  • Destruction

  • Alteration

  • Unauthorised disclosure

  • Misuse

Security measures may include administrative, organisational, and technical controls appropriate to the nature of the information and associated risks.

However, no internet transmission, electronic storage method, or information system can be guaranteed to be completely secure.

Customers should also take appropriate steps to protect account credentials and devices.

32. Your GDPR Rights

Subject to applicable conditions and exceptions, individuals protected by the GDPR may have the following rights.

Right of Access

You may request information about whether we process your personal data and request access to personal data concerning you.

Right to Rectification

You may request correction of inaccurate personal data and completion of incomplete personal data.

Right to Erasure

You may request deletion of personal data in circumstances where the legal requirements for erasure are satisfied.

This right is not absolute, and we may retain information where continued processing is required or permitted by law.

Right to Restriction of Processing

You may request restriction of processing where applicable legal conditions are met.

Right to Data Portability

Where applicable, you may have the right to receive personal data you provided to us in a structured, commonly used, and machine-readable format and to transmit that information to another controller.

Right to Object

Where personal data is processed on the basis of legitimate interests, you may have the right to object to that processing based on circumstances relating to your particular situation.

Right to Object to Direct Marketing

You may object at any time to the processing of personal data for direct marketing purposes.

Where you object to direct marketing, we will cease processing your personal data for that purpose as required by law.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

33. Exercising Your Privacy Rights

To exercise an applicable privacy right, contact:

info@unique-vintage.shop

Please clearly describe the right you wish to exercise and provide sufficient information for us to identify the relevant personal data.

For security and privacy reasons, we may need to verify your identity before completing certain requests.

We will only request information reasonably necessary for verification.

We will respond to valid privacy requests within the period required by applicable law.

Rights may be subject to legal limitations, exemptions, or conditions.

34. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority.

Under the GDPR, you may generally contact a supervisory authority in the European Union Member State of:

  • Your habitual residence

  • Your place of work

  • The place of the alleged infringement

You may contact us first at:

info@unique-vintage.shop

if you would like us to review a privacy concern directly.

Your right to contact a supervisory authority is not affected by contacting us first.

35. Automated Decision-Making

We do not intend to subject customers to decisions producing legal effects or similarly significant effects based solely on automated processing unless such processing is permitted by applicable law.

Certain providers, including payment or fraud-prevention providers, may use automated systems to assess transactions or security risks.

Where automated decision-making subject to specific GDPR requirements applies, the legally required information and safeguards will be provided where applicable.

36. Children's Privacy

Our store is intended for customers capable of entering into legally valid purchasing arrangements or using the store with appropriate legal authorisation.

We do not knowingly seek to collect personal data from children for purposes that would require parental or guardian consent without taking the legally required steps.

If you believe a child has provided personal data to us in circumstances that violate applicable law, please contact:

info@unique-vintage.shop

We will review the matter and take appropriate action where required.

37. Links to Third-Party Websites

Our website may contain links to third-party websites or services.

When you leave unique-vintage.shop and use a third-party service, that third party may process information under its own privacy policy.

We do not control the independent privacy practices of third parties.

We encourage customers to review the privacy information provided by third-party services before providing personal data.

38. Social Media and External Platforms

If you interact with us or content relating to our store through a third-party social media or external platform, that platform may independently collect and process information.

Such processing is governed by the relevant platform's privacy practices.

Where information is transmitted to us through such services, we will process information received by us in accordance with this Privacy Policy and applicable law.

39. Email Communications

When you send an email to:

info@unique-vintage.shop

we process the information contained in your email to:

  • Respond to your request

  • Provide customer support

  • Manage an order

  • Handle complaints

  • Exercise or defend legal rights

  • Process privacy requests

  • Maintain appropriate business records

Please do not send sensitive authentication credentials, complete payment card numbers, security codes, or account passwords by email.

40. Order Communications

We may send service-related communications necessary to manage your purchase or customer relationship.

These may include:

  • Order confirmations

  • Payment confirmations

  • Shipping notifications

  • Delivery information

  • Cancellation information

  • Refund information

  • Return information

  • Customer service responses

  • Security notices

  • Important policy or service information

Such communications may be necessary to perform our contract with you or satisfy legal or legitimate operational requirements.

41. Marketing Opt-Out

You may unsubscribe from marketing communications using the unsubscribe mechanism contained in an applicable marketing message where available.

You may also contact:

info@unique-vintage.shop

to request that direct marketing communications stop.

An unsubscribe request will not prevent us from sending non-marketing communications that are necessary in connection with an active order, legal obligation, customer service request, security matter, or other legitimate service requirement.

42. Do Not Send Sensitive Information Unnecessarily

When contacting us, please provide only information reasonably necessary to handle your request.

Unless specifically necessary and supported by an appropriate secure procedure, please do not email:

  • Full payment card numbers

  • Card security codes

  • Online banking passwords

  • Account passwords

  • Authentication codes

  • Copies of identification documents

  • Special category personal data

If identity verification is legally required for a particular request, we will provide appropriate instructions.

43. Data Accuracy

We ask customers to provide accurate and up-to-date information when placing orders or using our services.

If your personal information changes or is inaccurate, you may contact us at:

info@unique-vintage.shop

Where account functionality allows you to edit information directly, you may also use the available account controls.

44. Legitimate Interests Assessment

Where we rely on legitimate interests under applicable data protection law, we consider whether:

  • There is a legitimate purpose for the processing

  • The processing is necessary for that purpose

  • Your interests, fundamental rights, and freedoms override our interests

We do not rely on legitimate interests where the rights and freedoms of the individual clearly require protection that overrides the relevant business interest.

You may object to processing based on legitimate interests where applicable.

45. Consent Withdrawal

Where processing is based on your consent, you may withdraw that consent at any time.

Depending on the processing concerned, withdrawal may be available through:

Withdrawal is effective for future processing and does not retroactively affect processing lawfully performed before the withdrawal.

46. Privacy Preferences

Where privacy preference controls are available on unique-vintage.shop, customers may use those controls to review or update relevant choices.

Changing your privacy preferences may affect certain optional analytics, personalisation, or marketing functions.

Essential processing required to operate the store, complete transactions, maintain security, fulfil legal obligations, or provide functionality specifically requested by you may continue where permitted by law.

47. Data Breaches

We maintain procedures intended to identify and respond to personal data security incidents.

Where a personal data breach occurs and notification is required under applicable data protection law, we will take the legally required steps, which may include notifying the competent supervisory authority and affected individuals where applicable.

48. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our services

  • Changes to website functionality

  • Changes to Shopify functionality

  • Changes to service providers

  • Changes in data processing practices

  • Changes to applicable law

  • Regulatory developments

  • Security requirements

When we update this Privacy Policy, we may revise the "Last Updated" date displayed at the beginning of the policy.

Where applicable law requires additional notice or consent for a material change, we will take the required steps.

49. Previous Processing and Policy Updates

Updates to this Privacy Policy do not retrospectively create a new legal basis for processing that previously lacked a lawful basis.

Personal data will continue to be processed subject to the legal requirements applicable to the relevant processing activity.

50. Relationship With Other Store Policies

This Privacy Policy should be read together with other applicable policies published by unique-vintage.shop, including where relevant:

  • Terms of Service

  • Return and Refund Policy

  • Shipping Policy

  • Contact Information

  • Legal Notice

Those policies may contain additional information relating to transactions and use of our website.

Where mandatory data protection law provides greater protection than a contractual store policy, the mandatory legal requirements prevail.

51. Contact Us About Privacy

If you have questions about:

  • This Privacy Policy

  • Personal data we process

  • Data access

  • Correction

  • Deletion

  • Restriction

  • Portability

  • Objections

  • Consent withdrawal

  • Marketing preferences

  • Cookies

  • Privacy settings

  • Security concerns

  • Other data protection matters

please contact:

unique-vintage.shop
Email: info@unique-vintage.shop

Please include sufficient information for us to understand and respond to your request, but do not send unnecessary sensitive information.

52. Final Privacy Statement

unique-vintage.shop is committed to processing personal data transparently and responsibly.

We aim to collect and use only information that is reasonably necessary for legitimate purposes, protect personal information using appropriate safeguards, respect applicable privacy choices, and provide customers with the opportunity to exercise their data protection rights.

If you have any questions regarding the processing of your personal data, please contact:

unique-vintage.shop
Email: info@unique-vintage.shop