Datenschutzerklärung

 

1. Data Controller

For the processing activities described in this Privacy Policy, the online store operating under the name reefb.shop acts as the data controller unless another party is identified as an independent controller.

Questions, requests, or complaints concerning personal data may be sent to:

Email: info@reefb.shop

2. Scope of This Privacy Policy

This Privacy Policy applies when an individual:

• Visits reefb.shop;

• Creates or uses a customer account;

• Places or attempts to place an order;

• Contacts customer support;

• Subscribes to marketing communications;

• Participates in a promotion;

• Uses store features, forms, or interactive services; or

• Otherwise provides personal data to reefb.shop.

Third-party websites, payment services, social networks, or other services linked from reefb.shop may operate under their own privacy policies.

3. Personal Data We Collect

Depending on how the website is used, reefb.shop may collect the following categories of personal data.

Identity and contact information

This may include:

• Full name;

• Billing address;

• Delivery address;

• Email address;

• Telephone number; and

• Account login information.

Order and transaction information

This may include:

• Products ordered;

• Product size, colour, and quantity;

• Order number;

• Purchase amount;

• Discounts used;

• Payment status;

• Refund and return information;

• Delivery status; and

• Customer communications relating to an order.

Payment information

Payments are generally processed through authorised payment service providers.

reefb.shop may receive limited payment-related information, such as:

• Payment method;

• Payment status;

• Transaction reference;

• Card type;

• Limited card details, such as the last digits; and

• Fraud-prevention results.

reefb.shop does not normally receive or store complete payment card numbers when payments are processed by an external payment provider.

Device and technical information

This may include:

• Internet Protocol address;

• Browser type and version;

• Device type;

• Operating system;

• Language settings;

• Time zone;

• Cookie identifiers;

• Pages viewed;

• Referring website;

• Session information; and

• Website interaction data.

Customer-service information

This may include:

• Emails and messages;

• Return requests;

• Product reviews;

• Photographs or videos submitted in support of a claim;

• Complaints;

• Customer preferences; and

• Records of our responses.

Marketing information

This may include:

• Marketing consent;

• Subscription status;

• Communication preferences;

• Advertising interactions; and

• Information about whether a marketing message was opened or selected.

4. How Personal Data Is Collected

Personal data may be collected:

• Directly from the customer;

• Automatically through cookies and similar technologies;

• Through Shopify and its ecommerce infrastructure;

• From payment processors;

• From shipping and fulfilment providers;

• From fraud-prevention and security providers;

• From advertising and analytics partners, where permitted;

• From social media platforms, where the customer interacts with our content; and

• From publicly available sources where permitted by law.

5. Purposes and Legal Bases for Processing

Personal data is processed only where a lawful basis is available.

Processing orders and performing contracts

Personal data may be processed to:

• Accept and manage orders;

• Process payments;

• Provide order confirmations;

• Arrange shipping and delivery;

• Process withdrawals, returns, and refunds;

• Provide customer support; and

• Enforce applicable contractual terms.

The legal basis is generally the performance of a contract or taking steps at the customer’s request before entering into a contract.

Compliance with legal obligations

Personal data may be processed to:

• Maintain accounting and tax records;

• Respond to lawful authority requests;

• Comply with consumer-protection obligations;

• Document withdrawals and refunds;

• Meet product-safety requirements; and

• Prevent unlawful transactions.

The legal basis is compliance with applicable legal obligations.

Legitimate interests

Personal data may be processed for legitimate business interests, including:

• Preventing fraud and misuse;

• Protecting the website and customers;

• Improving products and services;

• Analysing website performance;

• Managing legal claims;

• Maintaining business records;

• Detecting technical errors; and

• Providing non-intrusive customer communications.

Before relying on legitimate interests, reefb.shop considers whether the processing is necessary and whether the individual’s rights and interests override those interests.

Consent

Where required, consent may be requested for:

• Non-essential cookies;

• Personalised advertising;

• Certain analytics activities;

• Email marketing;

• SMS marketing; or

• Other optional processing.

Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Shopify

reefb.shop uses Shopify to provide the ecommerce infrastructure needed to operate the online store.

Shopify may process personal data in connection with:

• Website hosting;

• Checkout;

• Order management;

• Store security;

• Fraud detection;

• Customer accounts;

• Analytics;

• Payment functionality; and

• Other ecommerce services.

Shopify may process information in countries outside the customer’s country of residence, subject to applicable data-protection safeguards.

Customers may also review Shopify’s own privacy information to understand how Shopify processes personal data in connection with its services.

7. Payment Providers

Payment information may be processed by the payment providers shown during checkout.

The payment provider may act as an independent controller for certain processing activities, including:

• Payment authorisation;

• Identity verification;

• Fraud prevention;

• Regulatory compliance; and

• Chargeback management.

Customers should review the privacy information provided by their chosen payment provider.

8. Shipping, Fulfilment, and Logistics Providers

To deliver an order, reefb.shop may share necessary information with:

• Warehouses;

• Fulfilment providers;

• Postal operators;

• Courier companies;

• Customs intermediaries; and

• Delivery partners.

The information shared may include the customer’s name, delivery address, telephone number, email address, order contents, and shipment reference.

Only information reasonably necessary for fulfilment and delivery will be shared.

9. Service Providers

Personal data may be shared with service providers that support our operations, including providers of:

• Website hosting;

• Information technology;

• Cybersecurity;

• Customer support;

• Email delivery;

• Analytics;

• Advertising;

• Accounting;

• Legal services;

• Fraud prevention;

• Returns processing; and

• Data storage.

Service providers are expected to process personal data only for authorised purposes and under appropriate contractual and security obligations.

10. Advertising and Analytics

Where permitted by law and, where required, with consent, reefb.shop may use analytics and advertising technologies to:

• Understand website traffic;

• Measure campaign performance;

• Identify technical problems;

• Understand customer interactions;

• Limit repeated advertisements; and

• Provide more relevant advertising.

Customers can manage available cookie choices through the website’s cookie-consent interface.

Rejecting non-essential cookies should not prevent access to basic website functions, although certain optional features may be affected.

11. Cookies and Similar Technologies

Cookies are small data files stored on a user’s device.

reefb.shop may use:

Strictly necessary cookies

These cookies support essential functions such as:

• Shopping-cart operation;

• Checkout;

• Security;

• Fraud prevention;

• Session management; and

• Privacy preference storage.

Strictly necessary cookies may be used without consent where legally permitted.

Preference cookies

These cookies remember settings such as language, region, or display preferences.

Analytics cookies

These cookies help measure website usage and performance.

Advertising cookies

These cookies may help measure advertising, limit repeated advertisements, or provide interest-based content.

Non-essential cookies will be used only where permitted by applicable law and, where required, after valid consent has been provided.

Consent may be withdrawn or changed through the website’s cookie settings.

12. Marketing Communications

Marketing emails or messages will be sent only where there is a lawful basis.

Customers may unsubscribe at any time by:

• Selecting the unsubscribe option in a marketing email; or

• Contacting info@reefb.shop.

Unsubscribing from marketing will not stop essential transactional communications concerning orders, returns, refunds, security, or legal notices.

13. International Data Transfers

Some service providers may process personal data outside Germany or the European Economic Area.

Where personal data is transferred internationally, reefb.shop will seek to rely on a lawful transfer mechanism, such as:

• An adequacy decision;

• European Commission standard contractual clauses;

• Additional technical and organisational safeguards; or

• Another legally recognised transfer mechanism.

14. Data Retention

Personal data will be retained only for as long as reasonably necessary for the purpose for which it was collected.

Retention periods may depend on:

• The duration of the customer relationship;

• Contract-performance requirements;

• Tax and accounting obligations;

• Consumer-protection requirements;

• Product-liability requirements;

• Fraud-prevention needs;

• Limitation periods;

• Pending disputes; and

• Legal claims.

When personal data is no longer required, it will be deleted, anonymised, or securely restricted, unless continued retention is required by law.

15. Data Security

reefb.shop uses reasonable technical and organisational measures designed to protect personal data against:

• Unauthorised access;

• Accidental loss;

• Misuse;

• Alteration;

• Disclosure; and

• Destruction.

No internet transmission or electronic storage system can be guaranteed to be completely secure. Customers should protect their passwords and avoid sending sensitive payment information through ordinary email.

16. Customer Rights

Subject to the conditions and limitations of applicable law, individuals may have the right to:

• Obtain confirmation as to whether personal data is being processed;

• Request access to personal data;

• Request correction of inaccurate data;

• Request completion of incomplete data;

• Request deletion of personal data;

• Request restriction of processing;

• Object to processing based on legitimate interests;

• Object to direct marketing;

• Request data portability;

• Withdraw consent;

• Receive information about international-transfer safeguards; and

• Lodge a complaint with a competent data-protection supervisory authority.

A request may be submitted to info@reefb.shop.

reefb.shop may request reasonable information to verify the identity of the person making the request.

Requests will generally be handled without undue delay and within the time required by applicable law.

17. Right to Object to Direct Marketing

Individuals have the right to object at any time to the processing of personal data for direct-marketing purposes.

Once a valid objection is received, the relevant personal data will no longer be used for direct marketing.

18. Automated Processing and Fraud Prevention

reefb.shop and its service providers may use automated indicators to identify suspected fraud, security risks, or unusual transactions.

Where a decision based solely on automated processing would produce legal or similarly significant effects, such processing will be carried out only where legally permitted and subject to any required safeguards.

19. Children’s Privacy

reefb.shop is not directed at children who are not legally capable of entering into an online purchase contract.

We do not knowingly seek to collect personal data directly from young children. A parent or guardian who believes that a child has provided personal data without appropriate authorisation may contact info@reefb.shop.

20. Disclosure Required by Law

Personal data may be disclosed where reasonably necessary to:

• Comply with a legal obligation;

• Respond to a lawful court or authority request;

• Protect customers or other persons;

• Investigate suspected fraud;

• Enforce legal rights; or

• Establish, exercise, or defend legal claims.

21. Business Reorganisation

If the store or relevant business assets are sold, transferred, reorganised, or merged, personal data may be disclosed to professional advisers and prospective or actual successors, subject to applicable data-protection requirements.

22. Changes to This Privacy Policy

This Privacy Policy may be updated to reflect changes in:

• Business operations;

• Website features;

• Service providers;

• Legal requirements; or

• Data-processing practices.

The updated version will be published on reefb.shop with a revised date.

23. Contact

Privacy enquiries and requests may be sent to:

reefb.shop
Email: info@reefb.shop