Privacy policy

 

This Privacy Policy explains how hollertag.shop collects, uses, stores, shares, and protects personal data when you visit our website, create an account, place an order, contact us, subscribe to marketing communications, or otherwise interact with our services.

This Privacy Policy applies to personal data processed through hollertag.shop and related communications. It is intended to comply with applicable data protection laws, including the European Union General Data Protection Regulation (“GDPR”) and applicable German privacy and electronic communications laws.

By using hollertag.shop, you acknowledge that your personal data will be processed as described in this Privacy Policy. Where consent is legally required, we will ask for your consent before carrying out the relevant processing.

1. Data Controller

For the purposes of the GDPR and other applicable data protection laws, the controller responsible for the processing of personal data through this website is:

hollertag.shop
Email: info@hollertag.shop

Questions, requests, objections, and complaints concerning personal data may be sent to the email address above.

2. Scope of This Privacy Policy

This Privacy Policy applies when you:

  • Visit or browse hollertag.shop;

  • Purchase or attempt to purchase a product;

  • Create or manage a customer account;

  • Add products to your shopping cart;

  • Begin or complete the checkout process;

  • Subscribe to newsletters or promotional communications;

  • Contact customer service;

  • Submit a return, refund, cancellation, or warranty request;

  • Participate in a promotion, survey, or review;

  • Interact with advertisements relating to hollertag.shop;

  • Communicate with us by email or another available channel; or

  • Otherwise use services provided through hollertag.shop.

This Privacy Policy does not govern the independent privacy practices of third-party websites, platforms, payment providers, delivery providers, or other services that maintain their own privacy notices.

3. Meaning of Personal Data

“Personal data” means any information relating to an identified or identifiable natural person.

Personal data may directly identify you, such as your name or email address, or may identify you indirectly when combined with other information, such as an IP address, device identifier, order history, or online activity.

Information that has been irreversibly anonymised so that it can no longer reasonably identify an individual is not considered personal data.

4. Personal Data We Collect

Depending on how you interact with hollertag.shop, we may collect the following categories of personal data.

4.1 Identity and Contact Information

This may include:

  • First and last name;

  • Billing address;

  • Delivery address;

  • Email address;

  • Telephone number;

  • Account username or identifier; and

  • Other contact information you provide.

4.2 Order and Transaction Information

This may include:

  • Products viewed, selected, ordered, returned, or exchanged;

  • Order number;

  • Order date;

  • Order value;

  • Currency;

  • Discounts or promotional codes used;

  • Billing and delivery information;

  • Delivery status;

  • Return and refund history;

  • Customer service records; and

  • Transaction-related communications.

4.3 Payment Information

Payments are processed through Shopify and available third-party payment service providers.

Depending on the selected payment method, payment-related data may include:

  • Payment method;

  • Card type;

  • Limited or masked payment card details;

  • Payment status;

  • Billing information;

  • Transaction identifier; and

  • Fraud-prevention or payment-verification results.

hollertag.shop does not generally receive or store complete payment card numbers when payments are processed directly by an authorised payment provider. Payment providers may process payment data as independent controllers or as processors and may apply their own privacy policies.

4.4 Customer Account Information

If customer accounts are available and you create one, we may process:

  • Account login information;

  • Account preferences;

  • Saved contact and delivery information;

  • Order history;

  • Wishlist or saved products;

  • Communication preferences; and

  • Account activity.

Passwords are intended to be stored in a protected or encrypted form by the relevant platform provider. You are responsible for keeping your login credentials confidential.

4.5 Customer Service and Communication Data

When you contact us, we may collect:

  • Your name and contact details;

  • The content of your enquiry;

  • Order information;

  • Photographs or videos you submit;

  • Return and refund details;

  • Product complaints;

  • Delivery information;

  • Previous correspondence; and

  • Any other information you voluntarily provide.

Please do not provide sensitive personal data unless it is genuinely necessary to resolve your request.

4.6 Device and Technical Information

When you visit hollertag.shop, certain technical information may be collected automatically, including:

  • IP address;

  • Browser type and version;

  • Device type;

  • Operating system;

  • Device identifiers;

  • Language settings;

  • Approximate location derived from an IP address;

  • Time zone;

  • Referring website;

  • Network information;

  • Date and time of access;

  • Pages viewed;

  • Links clicked;

  • Session duration;

  • Shopping cart activity; and

  • Error, security, and diagnostic information.

4.7 Cookie and Tracking Information

Subject to your consent where required, we may collect information through:

  • Cookies;

  • Pixels;

  • Tags;

  • Local storage;

  • Software development kits;

  • Analytics technologies; and

  • Similar tracking technologies.

More information is provided in the “Cookies and Similar Technologies” section below.

4.8 Marketing and Preference Information

This may include:

  • Newsletter subscription status;

  • Marketing consent records;

  • Product interests;

  • Communication preferences;

  • Advertising interactions;

  • Email engagement information; and

  • Records of withdrawals, objections, or unsubscribe requests.

4.9 Fraud, Security, and Compliance Information

To protect customers, transactions, and the website, we may process:

  • IP addresses;

  • Device and browser information;

  • Payment verification results;

  • Transaction patterns;

  • Delivery and billing address comparisons;

  • Failed login attempts;

  • Suspected fraudulent activity;

  • Chargeback information; and

  • Information necessary to comply with legal obligations.

4.10 Information You Make Public

If you submit a review, rating, comment, photograph, or other public contribution, information included in that contribution may be visible to other website visitors.

You should not include information in public content that you do not wish to make publicly available.

5. How We Collect Personal Data

We may collect personal data from the following sources:

5.1 Directly From You

We collect information directly from you when you:

  • Place an order;

  • Create an account;

  • Complete a form;

  • Subscribe to marketing;

  • Contact customer service;

  • Request a return or refund;

  • Submit a product review;

  • Participate in a promotion; or

  • Otherwise provide information to us.

5.2 Automatically

We may automatically collect technical, usage, and device information when you access or use hollertag.shop.

5.3 From Shopify and Service Providers

We may receive information from Shopify and from service providers that support:

  • Website hosting;

  • Checkout and payment processing;

  • Fraud prevention;

  • Delivery and fulfilment;

  • Customer service;

  • Analytics;

  • Email communications;

  • Advertising;

  • Website security; and

  • Other store functions.

5.4 From Third Parties

Where legally permitted, we may receive personal data from:

  • Payment providers;

  • Delivery companies;

  • Fraud-prevention providers;

  • Marketing partners;

  • Advertising platforms;

  • Social media platforms;

  • Publicly available sources; and

  • Other parties you have authorised to share information with us.

Where personal data is obtained from a third party, we process it only when we have a valid legal basis.

6. How and Why We Use Personal Data

We process personal data only when there is a valid purpose and an appropriate legal basis.

6.1 Operating the Website

We process technical, device, and usage information to:

  • Display the website;

  • Maintain website functionality;

  • Remember shopping cart contents;

  • Enable checkout;

  • Balance website traffic;

  • Detect technical errors;

  • Maintain security; and

  • Provide requested website features.

The legal basis is the performance of a contract or steps taken at your request before entering into a contract under Article 6(1)(b) GDPR, and our legitimate interest in operating a functional, secure, and reliable online store under Article 6(1)(f) GDPR.

Where information is stored on or accessed from your device, we also comply with the consent requirements of applicable German law. Strictly necessary technologies may be used without consent where legally permitted.

6.2 Processing and Fulfilling Orders

We process identity, contact, order, payment, and delivery information to:

  • Confirm and process purchases;

  • Receive and verify payments;

  • Arrange delivery;

  • Provide order updates;

  • Manage cancellations;

  • Process returns and refunds;

  • Handle exchanges;

  • Provide invoices;

  • Respond to product or delivery issues; and

  • Perform our contractual obligations.

The legal basis is Article 6(1)(b) GDPR.

6.3 Customer Accounts

We process account information to create and maintain customer accounts, authenticate users, store preferences, and provide account-related features.

The legal basis is Article 6(1)(b) GDPR. Certain account-security processing may also be based on our legitimate interest in preventing unauthorised access under Article 6(1)(f) GDPR.

6.4 Customer Service

We process communication and order information to:

  • Respond to enquiries;

  • Investigate complaints;

  • Resolve delivery issues;

  • Process return and refund requests;

  • Handle product claims;

  • Provide customer support; and

  • Maintain records of communications.

The legal basis is Article 6(1)(b) GDPR where the communication relates to a contract or potential contract. In other cases, processing is based on our legitimate interest in providing effective customer service under Article 6(1)(f) GDPR.

6.5 Legal and Regulatory Compliance

We may process and retain personal data to:

  • Meet tax and accounting obligations;

  • Maintain legally required business records;

  • Respond to lawful requests from authorities;

  • Comply with consumer-protection laws;

  • Establish, exercise, or defend legal claims;

  • Manage product-safety obligations; and

  • Comply with other applicable legal duties.

The legal basis is Article 6(1)(c) GDPR. Where processing is necessary to establish, exercise, or defend legal claims, it may also be based on Article 6(1)(f) GDPR.

6.6 Fraud Prevention and Website Security

We may process transaction, device, network, payment, and account information to:

  • Detect and prevent fraud;

  • Prevent unauthorised transactions;

  • Protect customer accounts;

  • Investigate suspicious behaviour;

  • Prevent abuse of returns or promotions;

  • Protect the website from attacks;

  • Enforce our terms; and

  • Maintain the integrity of our services.

The legal basis is our legitimate interest in protecting customers, the business, and the website under Article 6(1)(f) GDPR. Some processing may also be necessary for the performance of a contract or compliance with legal obligations.

6.7 Analytics and Service Improvement

Subject to consent where required, we may analyse website usage to:

  • Understand how visitors use the website;

  • Measure website performance;

  • Identify technical problems;

  • Improve navigation and product presentation;

  • Evaluate marketing performance; and

  • Develop or improve services.

Where non-essential cookies or similar technologies are involved, the legal basis is your consent under Article 6(1)(a) GDPR together with applicable German rules concerning access to information on terminal equipment.

For limited analytics that do not require consent and are legally permitted, processing may be based on our legitimate interest in improving website functionality under Article 6(1)(f) GDPR.

6.8 Direct Marketing

Where permitted by law, we may use contact and preference information to send:

  • Product information;

  • Store news;

  • Promotional offers;

  • Abandoned-cart reminders;

  • Back-in-stock notifications; and

  • Other marketing communications.

Marketing is based on your consent under Article 6(1)(a) GDPR or, where the legal requirements are satisfied, another lawful basis permitted for existing customer communications.

You may unsubscribe at any time by using the unsubscribe link in a marketing message or by contacting info@hollertag.shop.

6.9 Personalisation and Advertising

Subject to consent where required, we and our service providers may use information about your interactions with hollertag.shop to:

  • Personalise website content;

  • Recommend products;

  • Measure advertising effectiveness;

  • Create audience groups;

  • Limit repeated advertisements; and

  • Display more relevant advertising.

Where this processing involves non-essential cookies, cross-site tracking, or comparable technologies, it is based on your consent.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

6.10 Reviews and User Content

If you voluntarily submit a review, rating, photograph, or other content, we process that information to publish, moderate, manage, and verify the contribution.

Depending on the circumstances, the legal basis is your consent, performance of a requested service, or our legitimate interest in displaying genuine customer feedback.

7. Cookies and Similar Technologies

hollertag.shop uses cookies and similar technologies to operate the website and, with consent where required, to analyse usage, personalise content, and support advertising.

7.1 Strictly Necessary Technologies

Strictly necessary technologies may be used to:

  • Maintain shopping cart contents;

  • Enable secure checkout;

  • Process payments;

  • Remember privacy choices;

  • Provide account login functions;

  • Prevent fraud;

  • Balance website traffic; and

  • Protect the website.

These technologies are necessary to provide services expressly requested by the user or to ensure secure and reliable website operation. They may be used without consent where permitted by applicable law.

7.2 Preference Technologies

Preference technologies remember choices such as:

  • Language;

  • Region;

  • Currency;

  • Display settings; and

  • Other website preferences.

Where legally required, these technologies are activated only after consent.

7.3 Analytics Technologies

Analytics technologies help us understand website traffic, visitor interactions, technical performance, and the effectiveness of website improvements.

Non-essential analytics technologies are activated only after consent where required.

7.4 Advertising Technologies

Advertising technologies may be used to measure campaigns, create audiences, personalise advertising, and understand whether advertisements lead to website visits or purchases.

These technologies are non-essential and are used only after consent where required.

7.5 Managing Cookie Choices

Where a cookie banner or privacy preference tool is available, you may:

  • Accept all optional technologies;

  • Reject optional technologies;

  • Select permitted categories; or

  • Change or withdraw your choices later.

Withdrawing consent does not affect technologies already used lawfully before withdrawal.

You may also configure your browser to block or delete cookies. Blocking strictly necessary cookies may prevent certain website functions, including the shopping cart, account login, and checkout, from operating correctly.

Cookie names, providers, purposes, and storage periods may be displayed in the website’s cookie preference tool where that information is available.

8. Shopify

hollertag.shop is hosted and operated using Shopify’s commerce platform. Shopify provides services that allow us to display products, operate the storefront, process orders, support checkout, maintain customer accounts, and manage related store functions.

For many core commerce services, hollertag.shop acts as the controller and Shopify processes customer personal data on our behalf as a processor.

Shopify may also process certain personal data as an independent controller when you interact directly with Shopify services, such as Shop or Shop Pay, or when Shopify provides services for which it independently determines the purposes and means of processing.

If Shopify Network Intelligence or other Enhanced Services are enabled, Shopify may process certain customer data as a controller for purposes described in its applicable terms and privacy notices.

Further information about Shopify’s processing is available in the Shopify Consumer Privacy Policy.

9. Payment Providers

When you select a payment method, payment information may be transmitted directly to Shopify, Shopify Payments, a bank, card network, digital wallet provider, or another available payment provider.

Payment providers may process personal data to:

  • Authorise transactions;

  • Complete payments;

  • Prevent fraud;

  • Handle disputes and chargebacks;

  • Meet accounting requirements;

  • Comply with financial regulations; and

  • Meet identity-verification, anti-money-laundering, or sanctions-screening obligations.

Some payment providers act as independent controllers for their processing. Their privacy policies and contractual terms apply to that processing.

10. Delivery and Fulfilment Providers

We share the information reasonably necessary to deliver orders with delivery, logistics, warehouse, and fulfilment providers.

This information may include:

  • Your name;

  • Delivery address;

  • Telephone number;

  • Email address;

  • Order reference;

  • Parcel contents where required;

  • Customs information where applicable; and

  • Delivery instructions.

The legal basis is Article 6(1)(b) GDPR because this processing is necessary to fulfil and deliver your order.

11. Other Recipients of Personal Data

We may disclose personal data to the following categories of recipients where necessary:

  • Shopify and related commerce service providers;

  • Payment processors, banks, and payment networks;

  • Delivery, logistics, warehouse, and fulfilment providers;

  • Website hosting and technical infrastructure providers;

  • Fraud-prevention and cybersecurity providers;

  • Customer support and communication providers;

  • Email and marketing service providers;

  • Analytics and advertising providers, subject to consent where required;

  • Accountants, auditors, insurers, legal advisers, and other professional advisers;

  • Public authorities, courts, regulators, law-enforcement agencies, or tax authorities where legally required;

  • Parties involved in investigating or preventing fraud, security threats, or unlawful activity; and

  • Potential buyers, investors, or advisers in connection with a genuine merger, restructuring, financing, sale, or transfer of all or part of the business.

Service providers acting on our behalf may process personal data only for agreed purposes and subject to contractual data protection obligations.

We do not disclose personal data to unrelated third parties merely for their independent marketing purposes without a valid legal basis and any consent required by law.

12. International Data Transfers

Shopify, payment providers, delivery providers, technology providers, and other service providers may process personal data outside Germany or the European Economic Area.

Where personal data is transferred to a country outside the European Economic Area, we rely on an appropriate transfer mechanism where required, such as:

  • An adequacy decision adopted by the European Commission;

  • Standard Contractual Clauses approved by the European Commission;

  • Binding corporate rules;

  • Contractual and technical safeguards;

  • Your explicit consent in limited circumstances; or

  • Another legally permitted transfer mechanism.

Where appropriate, supplementary security measures may be used to protect transferred data.

You may contact info@hollertag.shop to request further information about applicable safeguards, subject to restrictions necessary to protect confidential or security-sensitive information.

13. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including contractual, customer-service, accounting, tax, security, fraud-prevention, and legal purposes.

Retention periods are determined by considering:

  • The duration of the customer relationship;

  • The status of an order or account;

  • Applicable tax, accounting, and commercial record-keeping obligations;

  • Return, refund, warranty, and chargeback periods;

  • Limitation periods for legal claims;

  • Fraud-prevention and security requirements;

  • The nature and sensitivity of the data;

  • The risk of harm from unauthorised use or disclosure; and

  • Whether the information can be anonymised.

Order, invoice, payment, and accounting information may be retained for the period required under applicable German commercial and tax laws.

Customer service correspondence may be retained for as long as necessary to resolve the request and manage related legal obligations or claims.

Marketing data is generally retained until consent is withdrawn, an objection is received, or the information is no longer required. Limited information may be retained on a suppression list to ensure that an unsubscribe or objection continues to be respected.

When personal data is no longer required, it is deleted, anonymised, or securely isolated unless continued retention is required or permitted by law.

14. Data Security

We and our service providers use reasonable technical and organisational measures designed to protect personal data against:

  • Unauthorised access;

  • Unlawful processing;

  • Accidental loss;

  • Destruction;

  • Alteration;

  • Misuse; and

  • Unauthorised disclosure.

These measures may include access controls, encryption, secure connections, system monitoring, backups, fraud-prevention controls, staff confidentiality obligations, and restricted access based on business need.

No online service or electronic storage method can be guaranteed to be completely secure. You should use a strong, unique password for any customer account and should not share login credentials with other people.

If you believe your account or personal data has been compromised, contact info@hollertag.shop immediately.

15. Automated Decision-Making and Profiling

We and our service providers may use automated tools to identify suspicious transactions, assess fraud risk, protect accounts, personalise website content, or measure advertising performance.

Fraud-prevention tools may generate risk indicators based on factors such as transaction patterns, device information, IP address, payment information, and differences between billing and delivery details.

hollertag.shop does not intend to make decisions based solely on automated processing that produce legal effects or similarly significant effects for you unless:

  • The processing is necessary to enter into or perform a contract;

  • The processing is authorised by applicable law;

  • You have provided explicit consent; or

  • Another lawful exception applies.

Where the GDPR grants you the right to request human intervention, express your point of view, or challenge an automated decision, you may contact info@hollertag.shop.

16. Your GDPR Rights

Subject to the conditions and exceptions provided by applicable law, you may have the following rights:

16.1 Right of Access

You may request confirmation of whether we process your personal data and request access to that data and related processing information.

16.2 Right to Rectification

You may request correction of inaccurate personal data and completion of incomplete personal data.

16.3 Right to Erasure

You may request deletion of personal data when there is no longer a valid legal basis for retaining it.

The right to erasure is not absolute. We may retain information where required for legal compliance, tax and accounting obligations, fraud prevention, or the establishment, exercise, or defence of legal claims.

16.4 Right to Restriction of Processing

You may request restriction of processing in circumstances provided by the GDPR, including while the accuracy of data or an objection is being assessed.

16.5 Right to Data Portability

Where processing is based on consent or contract and is carried out by automated means, you may request eligible personal data in a structured, commonly used, machine-readable format. Where technically feasible, you may request transmission to another controller.

16.6 Right to Object

You may object to processing based on legitimate interests for reasons relating to your particular situation.

We will stop the relevant processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for legal claims.

16.7 Right to Object to Direct Marketing

You may object to the processing of your personal data for direct marketing at any time. This right is unconditional.

After receiving your objection, we will stop using your personal data for direct marketing.

16.8 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

16.9 Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority, particularly in the European Union country of your habitual residence, place of work, or place of the alleged infringement.

We encourage you to contact info@hollertag.shop first so that we have an opportunity to address your concern.

16.10 Rights Relating to Automated Decisions

Where applicable, you may have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, subject to the exceptions permitted by law.

17. Exercising Your Rights

To exercise a privacy right, contact:

Email: info@hollertag.shop

Please describe your request clearly and provide enough information for us to identify the relevant records.

To protect personal data, we may request reasonable proof of identity. We will not request more information than is necessary for verification.

We will respond without undue delay and within the period required by applicable law. In complex cases or where multiple requests are received, the response period may be extended as permitted by law. You will be informed if an extension is required.

Requests are generally handled free of charge. A reasonable fee may be charged, or a request may be refused, where the request is manifestly unfounded or excessive, particularly if it is repetitive, as permitted by the GDPR.

18. Marketing Communications

You may unsubscribe from marketing emails at any time by:

Unsubscribing from marketing does not prevent us from sending necessary non-marketing communications, including:

  • Order confirmations;

  • Payment confirmations;

  • Delivery updates;

  • Security notices;

  • Customer service responses;

  • Return and refund communications; and

  • Important changes affecting an existing transaction or account.

We may retain limited information about your unsubscribe request to ensure that your preference continues to be respected.

19. Children’s Privacy

hollertag.shop is not directed at children under the age of 16, and we do not knowingly collect consent-based personal data directly from children under 16 without valid authorisation from a parent or legal guardian.

If you believe that a child has provided personal data without appropriate authorisation, contact info@hollertag.shop. We will investigate and take appropriate action where required.

20. Providing Personal Data

Certain personal data is necessary to enter into or perform a purchase contract.

For example, we need sufficient identity, payment, billing, and delivery information to process and deliver an order. If required information is not provided, we may be unable to complete the transaction or provide the requested service.

Providing information for optional marketing, advertising, or non-essential analytics is voluntary. Refusing or withdrawing consent for optional processing will not prevent you from making a purchase, although certain personalised or optional website features may be unavailable.

21. Third-Party Links and Services

hollertag.shop may contain links to third-party websites, social media services, payment services, or other external platforms.

We do not control the independent privacy practices of those third parties. When you leave hollertag.shop or directly interact with a third-party service, that party’s privacy policy may apply.

You should review the privacy information provided by the relevant third party before submitting personal data.

22. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

  • Changes to our business practices;

  • Changes to website functionality;

  • New service providers or technologies;

  • Changes to Shopify features;

  • Legal or regulatory developments; or

  • Security and operational requirements.

The updated policy will be published on hollertag.shop with a revised “Last updated” date.

Where required by law, we will provide additional notice or request renewed consent before materially changing consent-based processing.

23. Contact Us

For questions about this Privacy Policy, requests to exercise privacy rights, or concerns about the processing of personal data, contact:

hollertag.shop
Email: info@hollertag.shop