Privacy policy

Privacy Policy

1. Name and Contact Details of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

Artur Freer
tweeto
Mindener Straße 32
32278 Kirchlengern
Germany
Phone: +49 (0) 5223 4870580
Email: info@tweeto.de

2. Provision of the Website and Hosting (Shopify)

We host our online shop with Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Green Street, Dublin 7, D07 V665, Ireland (hereinafter referred to as “Shopify”).

When you visit our website, Shopify automatically collects server log files (including your IP address, date and time of access, browser type, operating system, referrer URL). This is technically necessary to provide you with a stable, functional, and secure online shop.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in the secure, fast, and error-free provision of our online shop).

Shopify may also process data on servers belonging to its parent company, Shopify Inc., in Canada and the United States. For data transfers to the US, Shopify relies on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (SCCs) issued by the European Commission. We have concluded a Data Processing Addendum (DPA) with Shopify.

3. Contacting Us and Customer Support (Email & Crisp Chat)

If you contact us via email, contact form, or chat, we process the information you provide (e.g., name, email address, message contents) to handle and respond to your inquiry.

Crisp Chat Widget

For customer support on our website, we use the live chat and support tool Crisp, operated by Crisp IM SARL, 2 Boulevard de Launay, 44100 Nantes, France.

When you use the chat widget, your IP address, browser and device information, and entered chat messages are processed on Crisp’s servers. Crisp uses cookies to restore recurring chat sessions.

Legal basis: Art. 6 (1) lit. b GDPR (if the request relates to the initiation or fulfillment of a contract) or Art. 6 (1) lit. f GDPR (legitimate interest in efficient, accessible, and user-friendly customer communication). We have concluded a Data Processing Agreement with Crisp.

4. Data Collection for Contract Conclusion and Order Processing

We collect and process personal data when you place an order in our shop. The processed data includes your name, billing and shipping address, email address, phone number, and details regarding the purchased products.

Legal basis: Art. 6 (1) lit. b GDPR (performance of a purchase contract).

Storage period: After complete fulfillment of the contract, your data will be restricted from further processing and deleted upon expiry of the statutory retention periods under commercial and tax law (e.g., §§ 257 HGB, 147 AO – generally 6 to 10 years), unless you have expressly consented to continued use.

5. Transfer of Data to Shipping and Logistics Providers

To fulfill the purchase contract, we transfer your address details and (if necessary for parcel tracking or freight delivery notifications) your email address and/or phone number to the contracted shipping provider (e.g., DHL, DPD, GLS, UPS, or freight forwarders for bulky furniture).

Legal basis: Art. 6 (1) lit. b GDPR (contract performance).

6. Payment Service Providers

To process payments in our shop, we work with various payment service providers. Depending on the payment method selected, we transmit the data necessary to process the transaction (name, invoice amount, currency, transaction data) to the respective provider.

Legal basis: Art. 6 (1) lit. b GDPR (payment processing for contract fulfillment).

a) Shopify Payments

If you select a payment method via Shopify Payments (e.g., credit card, Apple Pay, Google Pay), the payment is processed by Shopify International Limited, Ireland, in cooperation with Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Stripe processes data for authorization, fraud prevention, and execution of the payment.

b) PayPal

When paying via PayPal, your payment details are transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. For more details, please refer to the PayPal Privacy Policy.

c) Klarna

For payment options provided by Klarna (e.g., Pay Now / Sofort, Pay Later / Invoice, Financing / Slice It), processing is carried out in cooperation with Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna processes personal data to handle the payment and may perform credit checks. For further details, please review the Klarna Privacy Policy.

7. Cookies and Consent Management (Cookie Banner)

Our website uses cookies and similar technologies (e.g., Local Storage). Technically necessary cookies are required to enable core shop functions (such as the shopping cart and customer account logins).

Legal basis: § 25 (2) No. 2 TDDDG in conjunction with Art. 6 (1) lit. f GDPR (legitimate interest in the technical operation and functionality of our online store).

Optional cookies (such as those used for marketing, tracking, or analytics) are only loaded after you have granted your explicit consent via our cookie consent banner.

Legal basis: § 25 (1) TDDDG in conjunction with Art. 6 (1) lit. a GDPR (consent). You can adjust or revoke your consent at any time with effect for the future via the cookie settings on our website.

8. Your Rights as a Data Subject

Under the GDPR, you are entitled to the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR): You have the right to obtain confirmation as to whether personal data concerning you is being processed, and access to that data.
  • Right to rectification (Art. 16 GDPR): You have the right to request the rectification of inaccurate personal data or completion of incomplete data without undue delay.
  • Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data stored by us, provided no statutory retention obligations apply.
  • Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing under the statutory conditions.
  • Right to data portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format or have it transmitted to another controller.
  • Right to object (Art. 21 GDPR): You have the right to object at any time to the processing of your personal data based on Art. 6 (1) lit. f GDPR (legitimate interests).
  • Right to withdraw consent (Art. 7 (3) GDPR): You have the right to withdraw any granted consent at any time with effect for the future.

Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority for our company is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Website: https://www.ldi.nrw.de

9. Data Security

During your website visit, we use standard SSL/TLS encryption with the highest level of encryption supported by your browser. You can identify an encrypted connection by the closed lock or key symbol displayed in the address bar of your browser.