1. Controller

This English version is provided for convenience only. The German version is legally binding.

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Dominique Crainic
Breezys
Oberweg 51
60318 Frankfurt am Main
Germany
Phone: +49 157 53271051
Email: info@breezys.de

We are not legally required to appoint a data protection officer and have therefore not done so.

2. Overview

We process personal data only to the extent necessary to operate this website, process your orders, answer your enquiries or – with your consent – for our newsletter and statistics. Below you will find which data we process, for what purpose, on what legal basis and for how long, and what rights you have.

3. Hosting and shop system (Shopify)

Our online shop runs on the e-commerce platform Shopify. The contracting party and processor for merchants in Europe is Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. On our behalf Shopify stores and processes, among other things, server log data, order, customer and account data. A data processing agreement pursuant to Art. 28 GDPR (Data Processing Addendum) is in place with Shopify.

Data may also be transferred to Shopify Inc. in Canada and to Shopify group companies and sub-processors in the USA. Canada is covered by an EU adequacy decision; transfers to the USA are based on the EU-U.S. Data Privacy Framework or EU Standard Contractual Clauses (Art. 45, 46 GDPR). The legal basis for using Shopify is our legitimate interest in a secure and efficient online shop (Art. 6(1)(f) GDPR) and, where your order is concerned, performance of a contract (Art. 6(1)(b) GDPR). More information: Shopify privacy policy.

4. Server log files

Each time you visit our website, technical data transmitted by your browser is recorded automatically: IP address, date and time of access, page visited, referrer URL, browser type and version, and operating system. This data is technically necessary to deliver the website and ensure its security and stability (e.g. to fend off attacks). The legal basis is Art. 6(1)(f) GDPR. Log data is deleted according to Shopify's retention periods and is not combined with other data sources.

5. Cookies and consent banner

We use cookies and similar technologies. We set strictly necessary cookies (e.g. for the cart, checkout, language settings and storing your cookie choice) on the basis of § 25(2) no. 2 TDDDG and Art. 6(1)(f) or (b) GDPR. All other cookies – in particular for statistics – are only set with your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR), which you can give or refuse via our cookie banner.

You can change or withdraw your choice at any time with effect for the future. An overview of all cookies and the option to change your settings can be found in our Cookie Settings.

6. Statistics (Shopify Analytics)

Only if you have consented in the cookie banner do we use Shopify's analytics function to understand how our shop is used (e.g. pages visited, time on site, traffic source, device type). For this, cookies such as _shopify_y, _shopify_s and _shopify_analytics are set. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). We currently do not use any third-party advertising or retargeting tools (e.g. Meta Pixel, Google Ads, TikTok Pixel).

7. Customer account

You can create a customer account to view your orders. You sign in with a one-time code that Shopify sends to your email address. We process your email address, name, addresses and order history to provide the account (Art. 6(1)(b) GDPR). You can request deletion of your account by emailing us at any time, unless statutory retention obligations apply. You can also order without an account.

8. Orders and contract processing

To process your order we use the data you provide during checkout: name, shipping and billing address, email address, phone number if given, order contents and payment information. Mandatory fields are marked as such; without them we cannot conclude the contract. The legal basis is Art. 6(1)(b) GDPR (performance of contract) and Art. 6(1)(c) GDPR (retention obligations under commercial and tax law).

9. Payment processing

Payments are processed by the payment providers shown at checkout. If you choose PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg), you will be redirected to its website, where its privacy policy applies. Where card or wallet payments (e.g. credit card, Apple Pay, Google Pay, Shop Pay) are offered at checkout, they are processed via Shopify Payments (Shopify International Limited, Dublin, Ireland, with Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). Payment data, name, billing address and order amount are transmitted to the respective provider, which carries out its own fraud checks.

The legal basis is Art. 6(1)(b) GDPR; for fraud prevention Art. 6(1)(f) GDPR (our and your legitimate interest in secure payments). The payment methods currently available are shown at checkout.

10. Shipping

To deliver your order we pass your name and shipping address to our shipping provider (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany; for international shipments possibly its partner companies). The legal basis is Art. 6(1)(b) GDPR. We only pass your email address or phone number to the shipping provider if you have expressly agreed to this during checkout (Art. 6(1)(a) GDPR), e.g. so it can notify you about delivery. You can withdraw this consent at any time.

11. Contacting us

If you contact us by email (info@breezys.de) or phone, we process your details (e.g. name, email address, order number, content of your message) to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

12. Newsletter

If you subscribe to our newsletter, we use your email address to send you information about new designs, drops and offers. The legal basis is your consent (Art. 6(1)(a) GDPR). We use the double opt-in procedure: after signing up you receive an email in which you must confirm your subscription. We store the time of sign-up and confirmation and the IP address to be able to prove consent (Art. 6(1)(c), (f) GDPR).

Newsletters are sent via Shopify Email. Whether a newsletter was opened and which links were clicked is evaluated statistically to improve the newsletter; this evaluation is part of your consent. You can unsubscribe at any time via the link in every email or by messaging us. We then remove your address from the mailing list; it may be kept in blocked form for up to three years to prove earlier consent.

13. Fonts, social media and videos

The fonts used on this website are loaded locally from our server or Shopify's content delivery network. No connection is made to Google Fonts servers.

We don't embed social media plugins. If we link to our own social media profiles or embed videos from YouTube or Vimeo in future, data is only transmitted or content loaded once you click or consent.

14. Retention period

We store personal data only as long as necessary for the respective purpose. Order and invoice data are kept for six, eight or ten years due to commercial and tax law obligations (§ 257 HGB, § 147 AO). We delete data from enquiries once the enquiry has been fully dealt with and no retention obligations apply. Newsletter data is stored until you unsubscribe (see section 12), customer account data until the account is deleted.

15. Your rights

You have the following rights regarding your personal data: right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR). Simply contact info@breezys.de.

16. Right to object under Art. 21 GDPR

Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. If your data is processed for direct marketing, you can object at any time without giving reasons. An email to info@breezys.de is sufficient.

17. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, datenschutz.hessen.de.

18. Obligation to provide data, automated decisions, security

You are not legally or contractually obliged to provide your data. However, without the information marked as mandatory during checkout we cannot conclude a contract with you. No solely automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

For security reasons this website uses SSL/TLS encryption. We update this privacy policy whenever our data processing or the legal situation changes; the version published here applies.