Privacy policy

Privacy Policy

Last updated: 17 September 2026

Thank you for visiting our online shop. Protecting your personal data is important to us. Below, in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR), we inform you which data we process, for what purposes, on which legal basis, and what rights you have.

1. Controller

The controller responsible for data processing is:
Gyula Kovacs – PrintSpireDE
Käfertaler Str. 25
68167 Mannheim
Germany
E-mail: printspirede@gmail.com

We have not appointed a data protection officer, as there is no legal obligation to do so.

2. Hosting and shop system (Shopify)

Our online shop runs on the e-commerce platform Shopify, provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Shopify provides the technical infrastructure (hosting, shop software, checkout, customer accounts, order management) and processes on our behalf all data arising from visits to the shop and from orders.

When you access the shop, technical data is processed automatically (e.g. IP address, date and time of access, page accessed, browser type, operating system, referrer URL). This is necessary to deliver the website to you, to ensure its stability and security and to prevent misuse. The legal basis is our legitimate interest in a secure and functional online shop (Art. 6(1)(f) GDPR).

We have concluded a data processing agreement with Shopify (Art. 28 GDPR). Shopify may also transfer data to Shopify Inc. (Canada) and to sub-processors in the USA. For Canada, an adequacy decision of the European Commission exists; transfers to the USA are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses. More information: https://www.shopify.com/legal/privacy

3. Cookies and consent management

We use cookies and similar technologies. Strictly necessary cookies (e.g. for the cart, checkout, language settings and storing your cookie choice) are used on the basis of Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Art. 6(1)(b) or (f) GDPR.

All other cookies and technologies – for personalization, statistics/analytics and marketing – are only used if you have given your consent via our cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). The cookie banner is provided by Shopify. You can withdraw or change your consent at any time with effect for the future by clicking "Cookie preferences" in the footer of our shop.

4. Orders and contract performance

When you place an order, we process the data you provide at checkout: name, shipping and billing address, e-mail address, telephone number if provided, ordered items and personalization requests, as well as payment and shipping information. Mandatory fields are marked as such; without them we cannot conclude or perform the contract.

We use this data to perform the purchase contract, to produce and ship the goods, to send order and shipping confirmations, to answer questions and to handle withdrawals, returns and warranty claims. The legal basis is Art. 6(1)(b) GDPR.

5. Customer account

You can create a customer account to view your orders and save address data. For this we process your e-mail address and the data stored in the account (Art. 6(1)(b) GDPR). You can have your account deleted at any time; an informal message to us is sufficient. Statutory retention obligations (see section 13) remain unaffected.

6. Payment processing

To process payments, we pass the necessary data (e.g. name, billing address, amount, order number, payment data) to the payment service provider you have chosen (Art. 6(1)(b) GDPR). Payment service providers also carry out fraud prevention checks (Art. 6(1)(c) and (f) GDPR). The payment service providers are in part independent controllers for this processing; their privacy notices apply in addition.

Shopify Payments (credit and debit cards, Apple Pay, Google Pay and any other payment methods offered at checkout): Shopify International Limited (address see section 2). Card payments are technically processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Privacy: https://stripe.com/privacy
Shop Pay: If you use Shop Pay, your data is additionally stored in your Shop account with Shopify, for which Shopify is the controller: https://www.shopify.com/legal/privacy/shop-users
PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. Privacy: https://www.paypal.com/legalhub/privacy-full
Klarna (if offered at checkout and chosen by you): Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna may obtain information to verify your identity and creditworthiness. Privacy: https://www.klarna.com/international/privacy-policy/

7. Shipping

To deliver the goods, we pass your name and shipping address to Deutsche Post AG / DHL Paket GmbH, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany (Art. 6(1)(b) GDPR). We use the "Post & DHL Shipping" app by Deutsche Post to create shipping labels. We only pass your e-mail address or telephone number to DHL if this is necessary for delivery or if you have consented (Art. 6(1)(a) GDPR), so that DHL can inform you about the delivery date. You can withdraw any consent given at any time.

8. Contact and custom requests

If you contact us by e-mail, via the contact form or via the custom-order request function, we process the data you provide (e.g. name, e-mail address, telephone number, content of the message) in order to answer your request. The legal basis is Art. 6(1)(b) GDPR insofar as your request relates to a contract or an offer, and otherwise our legitimate interest in answering requests (Art. 6(1)(f) GDPR).

For our e-mail communication we use Gmail by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. Privacy: https://policies.google.com/privacy

9. Withdrawal function ("Withdraw from contract")

Using the "Withdraw from contract" button, you can declare the withdrawal from a contract online. For this we process your name, e-mail address, order number, details of the items concerned if provided, and the date and time of receipt. We use this data to process your withdrawal and to confirm its receipt to you by e-mail without undue delay. The legal basis is Art. 6(1)(c) GDPR in conjunction with Section 356a of the German Civil Code (BGB) and Art. 6(1)(b) GDPR.

The withdrawal function is provided by the app "EU Widerruf Button" of 401layers UG (haftungsbeschränkt), Germany, with which we have concluded a data processing agreement (Art. 28 GDPR).

10. Newsletter

If you subscribe to our newsletter, we use your e-mail address to send you regular information about new products and offers. The legal basis is your consent (Art. 6(1)(a) GDPR). We use the double opt-in procedure: after subscribing, you receive an e-mail in which you must confirm your subscription. To prove consent, we store the time of subscription and confirmation (Art. 6(1)(c) and (f) GDPR).

The newsletter is sent via the Shopify app "Messaging" (Shopify, address see section 2). It may be evaluated whether a newsletter was opened and which links were clicked in order to improve our newsletters.

You can unsubscribe at any time, e.g. via the unsubscribe link in every e-mail or by sending us a message. The lawfulness of the processing carried out until then remains unaffected. After unsubscribing, we may store your e-mail address in a block list to prevent further mailings (Art. 6(1)(f) GDPR).

11. Statistics and marketing

Only if you have consented to the respective category in the cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR) do we use the following services:

Shopify Analytics: Shopify records how visitors use the shop (e.g. pages viewed, time spent, cart actions) and provides us with statistics.
TikTok Pixel: provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. The pixel records events in the shop (e.g. page views, cart, purchase) to measure the effectiveness of advertisements on TikTok and to show ads to people interested in our products. We and TikTok are joint controllers for the collection and transfer of this data to TikTok (Art. 26 GDPR). Transfers to third countries are possible and are based on the EU Standard Contractual Clauses. Privacy: https://www.tiktok.com/legal/privacy-policy-eea

You can withdraw your consent at any time via "Cookie preferences" in the footer of the shop.

12. Links to social networks

Our shop contains links to our profiles on social networks. These are simple links; no data is transferred to these networks when you visit our shop. Only when you click a link are you taken to the provider's website, where its privacy policy applies.

13. Storage period

We store personal data only for as long as necessary for the respective purpose. We retain order and invoice data due to commercial and tax law obligations: accounting records and invoices for 8 years (Section 147 German Fiscal Code, AO), business correspondence for 6 years (Section 257 German Commercial Code, HGB; Section 147 AO), in each case from the end of the calendar year. We delete requests once they have been fully processed and no retention obligation applies. We store data on withdrawals until the limitation periods for possible claims have expired (generally 3 years). Newsletter data is stored until you unsubscribe, and data based on consent until consent is withdrawn. The storage period of cookies can be found in the cookie preferences.

14. Your rights

You have the following rights with regard to your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to withdraw consent with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to the processing at any time on grounds relating to your particular situation. You may object to processing for direct marketing purposes at any time without giving reasons.

To exercise your rights, an informal message to printspirede@gmail.com is sufficient.

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de

15. No automated decision-making

We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR. For credit checks by payment service providers, see section 6.