Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

JacketMoment
Dr. Armin Eggert
Sole Proprietor
Eichendorffweg 1
52064 Aachen
Germany

Email: info@jacketmoment.com

2. General Information

We process personal data only to the extent necessary to operate our online shop, process orders, communicate with customers and provide our products and services.

Personal data means any information relating to an identified or identifiable natural person, such as name, address, email address, phone number, order data, payment information, IP address or communication data.

3. Data Processed When Visiting Our Website

When you visit our website, technical data may be processed automatically. This may include:

  • IP address
  • date and time of access
  • browser type and version
  • operating system
  • referrer URL
  • pages visited
  • device information

This processing is necessary to display the website, ensure stability and security, and operate the online shop.

Legal basis: Art. 6(1)(f) GDPR.

4. Shopify

Our online shop is operated using Shopify.

Provider for merchants in the European Economic Area is generally:

Shopify International Limited
2nd Floor, 1-2 Victoria Buildings
Haddington Road
Dublin 4, D04 XN32
Ireland

Shopify processes personal data on our behalf in order to provide the online shop, product pages, shopping cart, checkout, order processing and related e-commerce services.

The data processed through Shopify may include:

  • name
  • billing and shipping address
  • email address
  • phone number
  • order details
  • payment and transaction information
  • IP address
  • device and browser information
  • communication and customer service data

Shopify may process personal data outside the European Economic Area, including in Canada and the United States. Shopify states that appropriate safeguards are used for international data transfers where required by law.

Legal basis: Art. 6(1)(b) GDPR for order processing and contract performance; Art. 6(1)(f) GDPR for secure and efficient shop operation.

5. Orders and Customer Accounts

When you place an order, we process the data necessary to fulfil the purchase contract. This includes:

  • name
  • billing and shipping address
  • email address
  • phone number, if provided
  • ordered products
  • payment and transaction data
  • order history
  • customer communication

We use this data to process your order, arrange payment, ship the goods, handle returns or complaints, and comply with legal obligations.

Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR.

6. Payment Processing

Payments are processed through the payment methods offered in our Shopify checkout. Depending on the selected payment method, payment data may be transmitted to the relevant payment provider. This may include name, billing address, email address, payment details, transaction amount and order information.

Payment providers may include:

  • Shopify Payments
  • credit card providers
  • PayPal
  • Klarna
  • Apple Pay
  • Google Pay

The respective payment provider is responsible for processing payment information required to complete the payment.

Legal basis: Art. 6(1)(b) GDPR.

7. Shipping Providers

For the delivery of your order, we may pass on the required delivery data to shipping providers. This may include your name, delivery address, email address and phone number if necessary for delivery notifications.

Possible shipping providers may include DHL, Deutsche Post, UPS, DPD or other logistics providers.

Legal basis: Art. 6(1)(b) GDPR.

8. Contact by Email

If you contact us by email, we process your message, your email address and any information you provide in order to respond to your request.

Legal basis: Art. 6(1)(b) GDPR if your request relates to an order or contract; otherwise Art. 6(1)(f) GDPR.

9. Newsletter and Marketing Emails

We currently do not send newsletters or marketing emails using a separate newsletter service. If we introduce newsletters or marketing emails in the future, we will update this Privacy Policy and only send such emails where legally permitted, for example with your consent.

10. Cookies and Similar Technologies

Our website uses cookies and similar technologies that are necessary for the operation of the online shop, including shopping cart, checkout, security and language or session settings.

Non-essential cookies, such as analytics or marketing cookies, are only used if you have given your consent where required by law. You can manage or withdraw your cookie consent through the cookie settings provided on our website, where available.

Legal basis for necessary cookies: Art. 6(1)(f) GDPR.
Legal basis for analytics and marketing cookies: Art. 6(1)(a) GDPR.

11. Analytics and Marketing Tools

We currently do not use separate external analytics or marketing tracking tools such as Google Analytics, Meta Pixel or TikTok Pixel.

Shopify may provide basic shop analytics as part of the Shopify platform. To the extent personal data is processed for basic shop operation and security, the legal basis is Art. 6(1)(f) GDPR.

If we introduce additional analytics or marketing tools in the future, we will update this Privacy Policy and request consent where required by law.

12. Retention Period

We store personal data only as long as necessary for the purposes described in this Privacy Policy, unless statutory retention obligations require longer storage. Order and invoice data may be retained in accordance with German tax and commercial law retention periods.

13. Recipients of Personal Data

We may share personal data with service providers where necessary for operating the shop and fulfilling orders. These may include:

  • Shopify
  • payment providers
  • shipping providers
  • IT and hosting providers
  • tax advisors or accounting service providers

14. Your Rights

Under the GDPR, you have the following rights, subject to the legal requirements:

  • right of access
  • right to rectification
  • right to erasure
  • right to restriction of processing
  • right to data portability
  • right to object
  • right to withdraw consent at any time
  • right to lodge a complaint with a supervisory authority

To exercise your rights, you can contact us at: info@jacketmoment.com

15. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

For North Rhine-Westphalia, the competent supervisory authority is generally:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2-4
40213 Düsseldorf
Germany

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our shop, services, legal requirements or technical setup.