Privacy Policy
1. Data Protection at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in our data protection declaration listed below this text.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.
How do we collect your data?
Some of your data is collected when you provide it to us, for example, by entering it into a contact form or during the ordering process. Other data is collected automatically or after your consent by our IT systems when you visit the website. This primarily includes technical data (e.g., internet browser, operating system, or time of page view).
What do we use your data for?
Part of the data is collected to ensure the website is provided without errors. Other data may be used to analyze your user behavior. Order data is processed for contract fulfillment (shipping your order).
What rights do you have regarding your data?
You have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. Furthermore, you have the right to request the restriction of the processing of your personal data under certain circumstances. You also have the right to lodge a complaint with the competent supervisory authority.
For this and other questions on the subject of data protection, you can contact us at any time: contact@omgbox.de
2. Hosting
Shopify
This website is hosted by Shopify Inc., 151 O'Connor Street, Ground floor, Ottawa, Ontario, K2P 2L8, Canada. Shopify is a certified recipient under the EU-US Data Privacy Framework.
When you visit our website, Shopify automatically collects certain information, including your IP address, browser type, pages visited, and timestamps. This data is processed to provide and secure the service.
We have concluded a data processing agreement (DPA) with Shopify. The processing is based on Art. 6 para. 1 lit. b GDPR (contract fulfillment) and Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure operation of the website).
Further information can be found in Shopify's privacy policy: https://www.shopify.com/legal/privacy
3. General Information and Mandatory Information
Data Protection
The operator of these pages takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
The responsible body in terms of data protection laws is:
Kyle Maneekat
Laubestraße 12
12045 Berlin
Email: contact@omgbox.de
Storage Period
Unless a more specific storage period has been stated within this data protection declaration, your personal data will remain with us until the purpose for data processing ceases to apply. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods — in which case, deletion will occur after these reasons cease to apply).
Your Rights
You have the right to:
-
Information about your stored data (Art. 15 GDPR)
-
Correction of inaccurate data (Art. 16 GDPR)
-
Deletion of your data (Art. 17 GDPR)
-
Restriction of processing (Art. 18 GDPR)
-
Data portability (Art. 20 GDPR)
-
Objection to processing (Art. 21 GDPR)
Please send your request to: contact@omgbox.de
You also have the right to lodge a complaint with the competent data protection supervisory authority. The competent supervisory authority for Berlin is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
www.datenschutz-berlin.de
4. Data Collection on This Website
Cookies
Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us to make our offer more user-friendly, effective, and secure.
Some cookies are "technically necessary" because without them, website functions would not be possible (e.g., shopping cart, login session). These cookies are processed based on Art. 6 para. 1 lit. b GDPR (contract fulfillment).
Shopify Analytics
Shopify collects anonymized usage statistics about visitors to our website (e.g., page views, country of origin, devices used). This data helps us to improve our online shop. No personal data is passed on to third parties. Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest).
5. Orders and Payment Processing
Shopify Payments
For payment processing, we use Shopify Payments, a service provided by Shopify Inc. When you place an order, your payment data (e.g., credit card details) is transmitted directly to Shopify and processed securely. We do not store full payment data on our servers.
Data processing serves the fulfillment of the contract in accordance with Art. 6 para. 1 lit. b GDPR. Further information on Shopify Payments' data protection policy can be found at: https://www.shopify.com/legal/privacy
Order Data
When you place an order with us, we process the following data for contract fulfillment:
-
Name and address (for shipping)
-
Email address (for order confirmation)
-
Payment information (processed by Shopify Payments)
-
Order history
This data is processed based on Art. 6 para. 1 lit. b GDPR and stored according to statutory retention periods (generally 10 years under German tax law).
6. Shipping Service Providers
To deliver your order, we pass on your delivery address (name, address) to our shipping service provider. This is necessary for contract fulfillment in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be transmitted for the purpose of delivery.