To operate my website, I use the shop system of the service provider Shopify. The service provider for Europe is Shopify International Ltd., 2nd Floor 1-2 Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Your personal information, such as your name, billing address, shipping address, email address, phone number and payment information, as well as information about how you access my website, is processed by Shopify International Ltd. (“Shopify EU”) processes. As part of providing my services, this personal information may also be transferred to other regions, including Canada and the United States. If your personal information is transferred to Canada, it will be protected under Canadian law. The European Commission has classified Canada as a safe third country through an adequacy decision, which ensures adequate protection of your data. If your personal data is transferred to a country outside Canada (for example to sub-processors), such data will be protected by contractual obligations comparable to the European Commission's Standard Contractual Clauses and will therefore be carried out in accordance with relevant data protection laws. You can view the European Commission's standard contractual clauses at the following link: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
Data processing is carried out on the basis of Art 6 Paragraph 1 lit b (fulfillment of a contract) and Art 6 Para 1 lit f (legitimate interests) of the GDPR. The fulfillment of a contract within the meaning of the GDPR is the processing of personal data provided by you, such as your name, your billing address, your delivery address, your email address, your telephone number and payment information for the purpose of sales, payment and shipping make possible. The legitimate interest within the meaning of the GDPR is the attractive and technically flawless presentation of a website for marketing purposes.
Shopify has integrated a Data Processing Addendum into its terms and conditions. This serves as a data processor agreement in which Shopify commits to complying with the standard contractual clauses defined by the EU Commission. You can view Shopify's Data Processing Addendum here: https://www.shopify.com/legal/dpa
For more information, please see Shopify's privacy policy at
https://www.shopify.com/de/legal/datenschutz
