Datenschutzerklärung

This Privacy Policy describes how axparis.shop collects, uses, processes, stores and shares personal information when customers visit our website, interact with our services, create an account, contact us or make a purchase.

For privacy enquiries:

Email: info@axparis.shop

This policy is intended to operate consistently with the EU General Data Protection Regulation (GDPR) and applicable German data-protection and electronic-communications requirements.

The GDPR requires controllers to provide information including controller contact details, purposes and legal bases for processing.

1. Scope

This Privacy Policy applies to personal data processed in connection with:

• Visiting axparis.shop;
• Browsing products;
• Creating or using a customer account;
• Adding products to a shopping cart;
• Placing an order;
• Making payments;
• Receiving products;
• Requesting customer support;
• Making a return;
• Exercising withdrawal rights;
• Requesting a refund;
• Communicating with us;
• Subscribing to marketing where offered; and
• Interacting with cookies or similar technologies.

2. Data Controller

For customer-facing ecommerce processing carried out for the purposes described in this Privacy Policy, axparis.shop acts as the relevant store operator/controller where applicable.

Privacy enquiries may be directed to:

info@axparis.shop

A complete German privacy disclosure must identify the actual legal entity and its required contact information. The trading name and email provided here do not replace any legally required corporate identity or postal-address disclosure.

3. Personal Data We May Collect

Depending on how you interact with the website, we may process information such as:

Identity Information

• Name;
• Customer account details; and
• Other information you voluntarily provide.

Contact Information

• Email address;
• Telephone number where provided;
• Billing information; and
• Shipping details.

Order Information

• Products purchased;
• Order number;
• Transaction dates;
• Order value;
• Returns;
• Refunds;
• Cancellations; and
• Customer-service history.

Payment Information

Payments may be processed by payment service providers.

We may receive information concerning payment status, payment method, transaction identifiers or fraud indicators.

We do not necessarily receive or store complete payment-card credentials.

Device and Technical Information

Depending on website configuration and consent choices, information may include:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Language;
• Referring pages;
• Pages viewed;
• Session information; and
• Technical logs.

Communications

We may process information contained in emails, customer-service requests, withdrawal requests, return requests, complaints or other communications.

4. Purposes of Processing

We may process personal data to:

• Operate our online store;
• Display and sell products;
• Process orders;
• Process payments;
• Deliver products;
• Provide order notifications;
• Prevent fraud;
• Verify transactions;
• Provide customer service;
• Process cancellations;
• Process statutory withdrawal requests;
• Process returns and refunds;
• Handle complaints;
• Maintain website security;
• Diagnose technical problems;
• Comply with tax, accounting and legal requirements;
• Establish or defend legal claims;
• Improve store functionality where permitted;
• Conduct analytics where lawful; and
• Send marketing communications where a lawful basis exists.

5. Legal Bases for Processing

Depending on the circumstances, processing may be based on one or more grounds under Article 6 GDPR.

These may include:

Performance of a Contract

We process information necessary to:

• Accept and administer orders;
• Process payments;
• Arrange delivery;
• Handle returns;
• Provide customer service connected with a purchase; and
• Perform other contractual obligations.

Legal Obligations

We may process information where necessary to comply with legal obligations concerning:

• Accounting;
• Taxation;
• Consumer rights;
• Fraud prevention;
• Regulatory requirements; and
• Legal proceedings.

Legitimate Interests

Where permitted, we may process information for legitimate interests such as:

• Securing our website;
• Preventing fraud and abuse;
• Protecting our business;
• Maintaining business records;
• Improving customer service; and
• Establishing or defending legal claims,

provided those interests are not overridden by customers' rights and freedoms.

Consent

Where consent is legally required, we may rely on consent for activities such as certain:

• Marketing;
• Advertising;
• Analytics;
• Cookies; and
• Similar technologies.

Consent may be withdrawn in accordance with applicable law.

Article 6 GDPR expressly recognizes consent, contract, legal obligation and legitimate interests among the lawful bases for processing.

6. Shopify and Ecommerce Service Providers

Our store may use Shopify ecommerce infrastructure and related service providers to provide:

• Website hosting;
• Shopping-cart functionality;
• Checkout;
• Order management;
• Store administration;
• Security;
• Fraud prevention; and
• Other ecommerce functionality.

Personal information may therefore be processed by service providers acting in accordance with their applicable contractual and legal responsibilities.

7. Payment Providers

Payment transactions may involve independent payment providers.

These providers may process personal information required to:

• Authorize transactions;
• Authenticate customers;
• Detect fraud;
• Process payments;
• Process refunds; and
• Comply with financial regulations.

Their own privacy practices may also apply to information they process independently.

8. Shipping and Fulfilment Providers

To fulfil an order, relevant information may be shared with:

• Carriers;
• Postal operators;
• Logistics providers;
• Warehousing providers;
• Fulfilment partners; and
• Other parties necessary to deliver the order.

Only information reasonably necessary for fulfilment should be shared.

9. Professional and Technical Providers

Information may also be disclosed where necessary to providers of:

• Website hosting;
• Information technology;
• Security;
• Fraud prevention;
• Customer support;
• Accounting;
• Analytics;
• Professional advisory services; or
• Other business infrastructure.

10. Cookies and Similar Technologies

axparis.shop may use cookies and comparable technologies.

Some cookies may be necessary for:

• Cart functionality;
• Checkout;
• Authentication;
• Security;
• Fraud prevention;
• Session management; and
• Customer preferences.

Optional cookies or similar technologies may be used only in accordance with applicable consent requirements.

Where consent is legally required, customers should be provided with appropriate choices before the relevant non-essential technology is activated.

11. Analytics

Where configured and legally permitted, analytics may be used to understand matters such as:

• Website traffic;
• Popular pages;
• Device categories;
• Website performance;
• Customer navigation; and
• General interaction patterns.

Where consent is required for analytics technology, processing will depend on the applicable consent mechanism.

12. Marketing

Where marketing is offered, we may send promotional communications only where an appropriate legal basis exists.

Recipients may unsubscribe from electronic marketing by using an unsubscribe mechanism where provided or by contacting:

info@axparis.shop

Withdrawing marketing consent does not affect processing required to complete an existing order.

13. Data Retention

Personal information is retained only for as long as reasonably necessary for the relevant purpose, including where necessary to:

• Complete orders;
• Maintain transaction records;
• Meet accounting requirements;
• Meet tax obligations;
• Handle disputes;
• Respond to consumer claims;
• Prevent fraud;
• Comply with legal obligations; and
• Establish, exercise or defend legal claims.

Different categories of information may have different retention periods.

When information is no longer required, it may be deleted or anonymized in accordance with applicable law.

14. International Data Transfers

Some service providers may process information outside Germany or outside the European Economic Area.

Where GDPR rules concerning international transfers apply, appropriate transfer mechanisms and safeguards should be used as required by law.

These may include legally recognized adequacy decisions, contractual safeguards or other approved transfer mechanisms.

15. Data Security

We use reasonable organizational and technical measures intended to protect personal information against:

• Unauthorized access;
• Accidental loss;
• Destruction;
• Alteration;
• Disclosure; and
• Misuse.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

Customers should also protect account credentials and avoid sharing passwords with unauthorized persons.

16. Customer Accounts

If account functionality is available, customers are responsible for maintaining the confidentiality of their account credentials.

Please contact us if you reasonably believe an account has been compromised.

17. Children's Privacy

Our website is intended for ordinary retail customers and is not designed to knowingly collect personal information from children in circumstances where parental authorization is legally required.

If we become aware that personal information was unlawfully collected from a child, appropriate steps may be taken to delete or otherwise lawfully handle the information.

18. GDPR Data Subject Rights

Subject to applicable conditions and exceptions, individuals may have rights including:

• Right of access;
• Right to rectification;
• Right to erasure;
• Right to restriction of processing;
• Right to data portability;
• Right to object;
• Right to withdraw consent; and
• Rights relating to certain automated decision-making.

The GDPR expressly provides rights of access, erasure, restriction, portability and objection.

19. Exercising Privacy Rights

To submit a privacy request, contact:

info@axparis.shop

We may request information reasonably necessary to verify identity before acting on a request.

Verification helps protect customers from unauthorized disclosure or deletion of their data.

20. Complaints

Individuals in Germany may have the right to lodge a complaint with a competent data-protection supervisory authority.

Customers may also contact us first at:

info@axparis.shop

We will aim to address legitimate privacy concerns appropriately.

21. Automated Decision-Making

Where automated systems are used for fraud screening, transaction review or similar purposes, we will comply with applicable GDPR requirements concerning automated processing.

We do not intend this policy to remove any rights customers may have in relation to legally significant automated decisions.

22. Third-Party Websites

Our website may contain links to external websites or services.

We are not responsible for the privacy practices of independent third-party websites.

Customers should review the privacy information provided by those third parties.

23. Legal Disclosure

We may disclose information where reasonably necessary to:

• Comply with applicable law;
• Respond to valid legal process;
• Protect customers;
• Protect our rights;
• Prevent fraud;
• Investigate security incidents; or
• Establish, exercise or defend legal claims.

24. Business Changes

If the ownership or structure of the business changes, relevant personal information may be transferred as part of a lawful corporate transaction, subject to applicable data-protection requirements.

25. Changes to This Privacy Policy

We may update this Privacy Policy when:

• Laws change;
• Ecommerce functionality changes;
• Service providers change;
• Processing activities change; or
• Operational practices change.

The current version will be published on axparis.shop with an updated revision date where appropriate.

26. Contact

Privacy enquiries may be sent to:

axparis.shop
Email: info@axparis.shop