Privacy Policy
1. Data Protection at a Glance
The protection of your personal data is important to us. In this privacy policy, we inform you about which personal data we process when you visit our online shop and use our services.
Personal data is any data with which you can be personally identified, for example, name, address, email address, phone number, order details or payment information.
2. Controller
The controller for data processing on this website is:
Robert Sachs
Carpoholics
Kastanienallee 110
12627 Berlin
Germany
Email: [your business email address]
Phone: [your business phone number]
3. Collection and Processing of Personal Data
We process personal data when you visit our online shop, create a customer account, place an order, contact us, or interact with our services.
The following data, in particular, may be processed:
• Name
• Billing and shipping address
• Email address
• Phone number
• Payment data
• Order data
• IP address
• Browser and device data
• Communication content when contacting us
4. Purposes of Data Processing
Your personal data is processed for the following purposes, in particular:
• Provision and operation of the online shop
• Processing and fulfillment of orders
• Payment processing
• Shipping and delivery of products
• Customer communication
• Processing of inquiries
• Fulfillment of legal obligations
• Security and technical stability of the website
5. Legal Bases for Processing
The processing of personal data is carried out on the basis of the General Data Protection Regulation (GDPR).
Processing is carried out, in particular, on the basis of:
• Art. 6 Para. 1 lit. b GDPR for the fulfillment of a contract or pre-contractual measures
• Art. 6 Para. 1 lit. c GDPR for the fulfillment of legal obligations
• Art. 6 Para. 1 lit. f GDPR for the protection of legitimate interests
• Art. 6 Para. 1 lit. a GDPR, provided you have given your consent
6. Hosting and Shopify Shop System
Our online shop is operated via Shopify. The provider is Shopify International Limited or Shopify Inc.
Shopify processes data that is necessary for the operation of the shop, the display of the website, order processing, and technical security. This may include, among other things, IP addresses, device data, order data, customer data, and payment information.
Further information on data protection at Shopify can be found in Shopify's privacy policy.
7. Payment Providers
External payment service providers may be used for payment processing, for example, PayPal or other payment methods offered in our shop.
If you select a payment method, the data required for payment processing will be transmitted to the respective payment service provider. This may include name, billing address, email address, order amount, and payment information.
Processing is carried out for the fulfillment of the contract in accordance with Art. 6 Para. 1 lit. b GDPR.
8. Print-on-Demand and Shipping Service Providers
For the production, processing, and shipping of our products, we use external service providers, in particular print-on-demand and shipping service providers such as Printful.
To process your order, the data required for this purpose is transmitted to the respective service provider. This may include name, shipping address, email address, ordered products, and shipping information.
Processing is carried out for the fulfillment of the contract in accordance with Art. 6 Para. 1 lit. b GDPR.
9. Contacting Us
If you contact us by email, contact form, or by other means, we process the data you provide to process your inquiry.
Depending on the type of inquiry, processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR or Art. 6 Para. 1 lit. f GDPR.
10. Cookies and Similar Technologies
Our online shop uses cookies and similar technologies. Cookies may be technically necessary to provide the shop, save the shopping cart, or enable the ordering process.
In addition, cookies may be used for analysis, marketing, or convenience functions, provided you give your consent.
You can manage your cookie settings via the corresponding settings in the shop or in your browser.
11. Server Log Files
When you visit our website, technical data is automatically processed. This includes, in particular:
• IP address
• Date and time of access
• Pages accessed
• Browser used
• Operating system
• Referrer URL
This data serves the technical provision, security, and stability of the website. The legal basis is Art. 6 Para. 1 lit. f GDPR.
12. Retention Period
We store personal data only as long as necessary for the respective purposes or as required by legal retention obligations.
Order and billing data may be stored for several years due to legal retention obligations.
13. Data Disclosure
Personal data will only be disclosed if this is necessary for the fulfillment of the contract, if there is a legal obligation, if you have consented, or if there is a legitimate interest.
Recipients may include, in particular:
• Shop provider
• Payment service providers
• Print-on-demand service providers
• Shipping service providers
• Tax consultants or authorities, as far as necessary
• Technical service providers
14. Your Rights
You have the following rights within the framework of legal provisions:
• Right to information about your stored data
• Right to rectification of inaccurate data
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object to certain processing operations
• Right to withdraw a given consent
• Right to lodge a complaint with a data protection supervisory authority
15. Withdrawal of Consents
If you have given consent to data processing, you can withdraw it at any time with effect for the future.
The legality of the processing carried out until the withdrawal remains unaffected.
16. Right to Object
If the processing of your personal data is carried out on the basis of Art. 6 Para. 1 lit. f GDPR, you have the right to object to the processing on grounds relating to your particular situation.
17. Security
We take technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, and alteration.
18. Changes to this Privacy Policy
We reserve the right to adapt this privacy policy if technical, legal, or organizational changes occur.
Status: May 2026
