Datenschutzerklärung

This Privacy Policy describes how info@thecommense.shop ("we", "us", or "our") collects, uses, discloses, stores, and protects personal data when you visit, use, make a purchase from, or otherwise interact with our Shopify-powered online store.

We respect your privacy and are committed to processing personal data responsibly and in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable German data protection and privacy laws.

By using our website, you acknowledge the data processing practices described in this Privacy Policy.

1. Data Controller

For the purposes of the GDPR and other applicable data protection laws, the controller responsible for the processing of personal data through this online store is:

info@thecommense.shop
Email: info@info@thecommense.shop

Questions, requests, objections, withdrawals of consent, and other privacy-related inquiries may be submitted to the email address above.

2. Personal Data We Collect

Depending on how you interact with our store, we may collect and process the following categories of personal data.

Information You Provide Directly

When you place an order, create an account, contact us, subscribe to marketing communications, submit a form, or otherwise communicate with us, we may collect:

Full name
Billing address
Shipping address
Email address
Telephone number
Order information
Products purchased or returned
Account information
Customer service communications
Return and refund information
Marketing preferences
Information you voluntarily provide when contacting us

Payment Information

When you make a purchase, payment information may be collected and processed by Shopify and the payment service provider selected during checkout.

Depending on the payment method, this information may include payment card details, billing information, payment account information, transaction identifiers, payment status, and fraud-prevention information.

We generally do not directly store complete payment card numbers.

Information Collected Automatically

When you visit or interact with our website, certain technical and usage information may be collected automatically, including:

IP address
Browser type and version
Device type
Operating system
Device identifiers
Language settings
Time zone
Referring website
Pages viewed
Products viewed
Shopping cart activity
Checkout activity
Date and time of access
Website interactions
Cookie and similar technology identifiers
Diagnostic and security information

3. How We Collect Personal Data

We may collect personal data:

Directly from you;
Automatically through your use of our website;
Through cookies and similar technologies;
From Shopify;
From payment processors;
From shipping and logistics providers;
From fraud prevention and security providers;
From analytics providers;
From advertising or marketing providers where permitted;
From applications and services connected to our Shopify store; and
From other third parties where permitted by applicable law.

4. How We Use Personal Data

We may use personal data for the following purposes.

Processing and Fulfilling Orders

We process personal data to:

Process purchases;
Confirm orders;
Process payments;
Arrange shipping and delivery;
Provide order tracking;
Process returns;
Issue refunds;
Handle exchanges;
Communicate about orders; and
Fulfill our contractual obligations to customers.

The legal basis for this processing is generally the performance of a contract or taking steps at your request before entering into a contract.

Customer Service

We use personal data to respond to questions, provide support, investigate complaints, resolve order issues, and communicate with customers.

Depending on the circumstances, this processing may be necessary for the performance of a contract or based on our legitimate interests in providing effective customer service.

Security and Fraud Prevention

We may process personal data to:

Protect our website;
Detect suspicious activity;
Prevent fraud;
Prevent unauthorized transactions;
Protect customer accounts;
Protect our legal rights;
Investigate misuse; and
Maintain the security and integrity of our services.

This processing may be based on our legitimate interests in protecting our business, customers, website, and transactions, or on legal obligations where applicable.

Legal and Regulatory Compliance

We may process and retain personal data where necessary to:

Comply with tax and accounting obligations;
Maintain legally required business records;
Respond to lawful requests from authorities;
Comply with consumer protection requirements;
Establish, exercise, or defend legal claims; and
Meet other applicable legal obligations.

The legal basis for such processing is generally compliance with a legal obligation or, where appropriate, our legitimate interests in protecting our legal rights.

Marketing Communications

Where required by law, we will send marketing emails or similar electronic marketing communications only after obtaining appropriate consent.

You may withdraw your consent at any time by using the unsubscribe option contained in a marketing communication or by contacting us at:

info@info@thecommense.shop

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Legal Bases for Processing

Where the GDPR applies, we process personal data only when an appropriate legal basis exists.

Depending on the circumstances, our legal bases may include:

Performance of a Contract

Processing is necessary to process and fulfill your order, deliver products, process payments, handle returns or refunds, and provide services requested by you.

Legal Obligation

Processing is necessary for us to comply with applicable tax, accounting, consumer protection, regulatory, or other legal obligations.

Legitimate Interests

We may process personal data where necessary for legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms.

Such interests may include:

Preventing fraud;
Protecting website security;
Protecting our legal rights;
Improving customer service;
Operating our business efficiently;
Detecting misuse;
Maintaining records; and
Understanding the performance of our services where permitted by law.

Consent

Where required, we rely on your consent for activities such as certain marketing communications, advertising technologies, analytics technologies, and non-essential cookies.

You may withdraw consent at any time.

6. Shopify

Our online store is hosted and supported by Shopify.

Shopify provides the e-commerce technology that enables us to operate our online store, process orders, manage customers, facilitate checkout, and provide related commerce functionality.

As part of providing these services, Shopify may process personal data relating to customers and website visitors.

Depending on the processing activity, Shopify may process information on our behalf as a service provider or processor and may also process certain information for its own legally permitted purposes.

Customers can learn more about Shopify's handling of personal data and privacy rights through Shopify's Consumer Privacy Policy and Shopify's privacy portal.

7. Service Providers and Third Parties

We may disclose personal data to third parties where reasonably necessary to operate our store and provide our services.

These parties may include:

Shopify;
Payment processors;
Banks and payment networks;
Shipping carriers;
Fulfillment providers;
Logistics providers;
Customer service providers;
IT and hosting providers;
Security providers;
Fraud prevention providers;
Analytics providers;
Advertising and marketing providers where legally permitted;
Professional advisers;
Accountants;
Legal advisers; and
Government authorities where disclosure is legally required.

We do not authorize service providers acting on our behalf to use personal data for purposes unrelated to providing their contracted services, except where otherwise permitted or required by law.

8. Payment Processing

Payments made through our store are processed through payment providers available through Shopify.

Payment providers may independently collect and process payment data according to their own privacy notices and legal obligations.

We recommend reviewing the privacy information presented by the applicable payment provider when selecting a payment method.

9. Shipping and Delivery

To fulfill an order, we may provide necessary personal data to shipping, fulfillment, postal, courier, and logistics providers.

The information disclosed may include:

Name;
Shipping address;
Telephone number;
Email address;
Order reference; and
Other information reasonably required to deliver your order.

Such information is used for purposes including delivery, shipment tracking, delivery notifications, customs processing where applicable, and resolving delivery problems.

10. Cookies and Similar Technologies

Our website may use cookies, pixels, local storage, tags, and similar technologies.

These technologies may be used to:

Keep the website functioning;
Maintain shopping cart functionality;
Enable secure checkout;
Remember preferences;
Prevent fraud;
Measure website performance;
Understand website usage;
Provide analytics; and
Support advertising or marketing where permitted.

Strictly Necessary Technologies

Certain cookies and technologies are required for essential website functions, such as security, shopping cart functionality, checkout, authentication, fraud prevention, and providing services specifically requested by the user.

These technologies may be used without consent where permitted by applicable law.

Non-Essential Technologies

Where required by German or EU law, non-essential cookies and similar technologies used for purposes such as analytics, personalization, or advertising will only be activated after appropriate consent has been obtained.

You may accept, reject, or modify your cookie preferences through the cookie consent controls made available on our website.

Withdrawing or changing consent does not affect the lawfulness of processing that occurred before the change.

11. Analytics

Where legally permitted and, where required, only after receiving your consent, we may use analytics technologies to understand how visitors interact with our website.

Analytics information may help us understand:

Website traffic;
Pages visited;
Product interest;
Website performance;
Technical errors;
Customer journeys; and
General interaction patterns.

We use this information to improve the operation and usability of our store.

12. Advertising and Personalization

Where we use advertising, remarketing, or personalization technologies, these technologies may process information about interactions with our website.

Where applicable law requires consent, such processing will only occur after consent has been obtained.

You may withdraw consent or adjust applicable privacy preferences through the controls available on our website.

13. International Data Transfers

Some service providers used to operate our store may process or store personal data outside Germany or the European Economic Area.

Where personal data is transferred to a country that does not provide a level of data protection recognized as adequate under applicable EU law, appropriate safeguards will be used where required.

Such safeguards may include:

European Commission adequacy decisions;
Standard Contractual Clauses;
Other legally recognized transfer mechanisms; or
Other safeguards permitted under applicable data protection law.

14. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy and to meet applicable legal requirements.

Retention periods may depend on:

The duration of our relationship with you;
Whether you maintain a customer account;
The nature of a transaction;
Tax and accounting requirements;
Consumer protection requirements;
Fraud prevention needs;
Contractual obligations;
Legal limitation periods;
Ongoing disputes; and
Requirements to establish, exercise, or defend legal claims.

When personal data is no longer required, we will delete, anonymize, or otherwise dispose of it in accordance with applicable law.

15. Data Security

We take reasonable technical and organizational measures designed to protect personal data against:

Unauthorized access;
Accidental loss;
Destruction;
Alteration;
Unauthorized disclosure; and
Unlawful processing.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Customers are responsible for maintaining the confidentiality of any account credentials and should notify us if they suspect unauthorized access to their account.

16. Your GDPR Rights

Where the GDPR applies, you may have the following rights in relation to your personal data:

Right of Access

You may request confirmation as to whether we process your personal data and request access to personal data concerning you.

Right to Rectification

You may request correction of inaccurate personal data or completion of incomplete personal data.

Right to Erasure

You may request deletion of personal data where the legal requirements for deletion are satisfied.

Right to Restriction of Processing

You may request restriction of processing in circumstances provided by applicable law.

Right to Data Portability

Where applicable, you may request certain personal data in a structured, commonly used, and machine-readable format and may have the right to transmit that information to another controller.

Right to Object

Where processing is based on legitimate interests, you may have the right to object to that processing based on your particular situation.

You may object at any time to processing of personal data for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

17. Exercising Your Privacy Rights

To exercise an applicable privacy right, please contact:

Email: info@info@thecommense.shop

Please clearly describe your request.

To protect personal data from unauthorized disclosure, we may take reasonable steps to verify your identity before fulfilling a request.

We will handle valid requests within the periods required by applicable law.

Some rights are subject to legal conditions, exceptions, and limitations. We may therefore retain or continue processing certain information where required or permitted by law.

18. Marketing Preferences

You may unsubscribe from marketing emails at any time through the unsubscribe mechanism provided in the communication or by contacting us.

Even after opting out of marketing communications, we may continue sending non-marketing communications that are necessary in connection with your purchases, account, returns, refunds, customer service requests, security matters, or other transactional matters.

19. Children's Privacy

Our store is intended for a general adult audience and is not directed toward children.

We do not knowingly seek to collect personal data from children for marketing purposes.

If you believe that a child has provided personal data to us in circumstances where parental or guardian authorization is legally required, please contact us at info@info@thecommense.shop so that we can review the matter and take appropriate action.

20. Business Transactions

If our business is involved in a merger, acquisition, restructuring, financing, sale of assets, insolvency proceeding, or similar business transaction, personal data may be disclosed or transferred as part of that transaction where permitted by law.

Any recipient will remain subject to applicable data protection requirements.

21. Legal Disclosures

We may disclose personal data where reasonably necessary to:

Comply with applicable law;
Respond to lawful requests from courts or authorities;
Enforce our agreements;
Investigate fraud or security incidents;
Protect our rights and property;
Protect customers or other individuals; or
Establish, exercise, or defend legal claims.

Any such disclosure will be limited to what is reasonably necessary and permitted by law.

22. Automated Processing

We may use automated tools for purposes such as security, fraud prevention, payment processing, and website operation.

Where automated decision-making produces legal effects or similarly significantly affects an individual and specific legal requirements apply, we will provide the information and safeguards required by applicable law.

23. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices of independent third-party websites. When you leave our website, we recommend reviewing the privacy policy of the relevant third-party service.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

Our services;
Our data processing practices;
Technology;
Shopify functionality;
Legal requirements; or
Regulatory requirements.

The updated version will be published on our website with a revised effective date where appropriate.

We encourage customers to review this Privacy Policy periodically.

25. Contact Us

If you have questions about this Privacy Policy, our processing of personal data, or your privacy rights, please contact: