2. General Information on Data Processing The protection of your personal data is very important to us. We process your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy. Personal data means all data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for, as well as how and for what purpose this happens.
3. Data Collection when Visiting Our Website
3.1 Server Log Files When you visit our website, information is automatically stored in so-called server log files by the hosting provider, which your browser automatically transmits.
Specifically, the following are collected:
Browser type and browser version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address
This data is not merged with other data sources. The processing is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the technically flawless presentation as well as the stability and security of our website.
4. Hosting and Shop System Our website is operated via the Shopify platform.
The provider is:
Shopify International Limited Victoria Buildings 2nd Floor 1–2 Haddington Road Dublin 4 Ireland
Shopify provides the technical infrastructure for our online shop. In doing so, personal data can be processed, in particular inventory data, order data, and technical usage data. Processing is carried out for the provision of our online shop and for the execution of orders in accordance with Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR.
5. Use of Cookies and Consent Tool Our website uses cookies and similar technologies. Cookies are small text files that are stored on your end device.
Some cookies are technically necessary to ensure basic functions of the website, such as shopping cart or login. Other cookies are used for analysis and marketing purposes.
The processing of non-essential cookies is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.
To obtain and manage consents, we use the Cookie Consent Tool Consentmo GDPR. You can revoke or adjust your consent at any time via the Consent Tool.
6. Orders and Customer Account If you order in our online shop or create a customer account, we process personal data for the processing of your order and the management of your customer account.
This includes, in particular:
Name
Address
Email address
Order data
Payment information
Order history
Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Due to legal retention obligations, this data is stored for up to ten years.
7. Newsletter If you subscribe to our newsletter, we use your email address to regularly send you information about our products or offers.
The newsletter is sent via:
Omnisend
Omnisend UAB
Verkių g. 25C
Vilnius
Lithuania
Registration takes place via the double opt-in procedure. The legal basis is Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time.
8. Meta Pixel and Conversion API This website uses the Meta Pixel and the Conversion API from the provider Meta Platforms Ireland Limited, Dublin, Ireland.
This allows us to track the behavior of users after they have been redirected to our website by ads. Within the framework of the Conversion API, hashed customer data, in particular email addresses, can also be transmitted to Meta.
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.
9. TikTok Pixel This website uses the TikTok Pixel.
The provider is: TikTok Technology Limited Dublin Ireland
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.
10. Pinterest Pixel This website uses tracking technologies from Pinterest.
The provider is: Pinterest Europe Ltd. Ireland
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.
11. Google Ads Conversion Tracking and Customer Match This website uses Google Ads Conversion Tracking.
The provider is: Google Ireland Limited Dublin Ireland
Cookies are used to analyze user behavior after clicking on an ad.
Additionally, we use Google Customer Match and Google Signals, which enable cross-device data processing, but only based on your consent. In this context, customer email addresses can be transmitted to Google in hashed form to display personalized advertising.
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. This may involve the transmission of personal data to servers of Google LLC in the USA.
12. Google Marketing Platform This website uses the Google Marketing Platform.
The provider is: Google Ireland Limited Dublin Ireland
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.
13. Hotjar This website uses Hotjar to analyze user behavior.
The provider is: Hotjar Ltd. Malta
Hotjar allows for the evaluation of user interactions. Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.
14. Judge.me Review System We use Judge.me for displaying product reviews.
In doing so, personal data such as name, email address, and review content may be processed. Customers can be invited to submit a review by email after a purchase.
Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR.
15. Data Transfer To provide our services, we work with external service providers.
This includes, in particular:
Billbee
Synchroneo
DHL
These receive personal data only to the extent necessary for the fulfillment of their tasks.
Furthermore, other Shopify apps used by us may process personal data to the extent necessary for the provision of our services.
Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
16. Contact Forms and Inquiries On our website, we provide various contact forms, for example for general inquiries, collaborations, co-branding inquiries, and inquiries for booking our Glittermobile.
In particular, the following data may be processed:
Name
Email address
Phone number
Company
Details of the inquiry or event
Message
Other voluntary information
Processing is carried out for the purpose of handling your inquiry.
The legal basis is Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR.
17. Storage Period Personal data is stored only as long as it is necessary for the respective purposes or as long as statutory retention obligations exist.
Order data is stored for up to ten years.
18. Rights of the Data Subjects You have the right to information, rectification, erasure, restriction of processing, data portability, objection to processing, and the right to withdraw a given consent at any time with effect for the future.
19. Right to Lodge a Complaint with a Supervisory Authority You have the right to lodge a complaint with a data protection supervisory authority.
The responsible authority is: The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg Stuttgart Germany
We respect your privacy. If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR). Use the options below to exercise your rights regarding the personal data we hold about you.
How we process your request When you submit a Data Subject Access Request (DSAR) via our compliance page, our compliance provider, Consentmo, processes your IP address and email solely for the purpose of fulfilling your request. For further details, please refer to Consentmo's Data Processing Policy.
Access to Personal Data
Through the link below, you can request a report containing all personal information we store about you. We will respond within 30 days.
Response time: We will respond within one month. If your request is complex, we may extend this period as permitted by law and will inform you accordingly.
Data Rectification
If your account details are inaccurate, update or correct them via the link below.
Right to be Forgotten
Use this option if you wish to remove your personal and other data from our store. Please note that this process will delete your account, preventing you from accessing or using it.
Important: Some information may be retained if legally required or for legitimate purposes (e.g., taxes, fraud prevention, and security).
Manage Privacy Preferences
You can customize your experience by precisely determining what types of cookies and technologies we are allowed to use (e.g., enable analytics, disable marketing). You can update these specific settings at any time.
Withdraw Consent
You have the right to withdraw your Shopify marketing consent for tracking technologies at any time. This applies to your future use of our store and stops data collection for optional purposes.
Right to Restriction of Processing / Right to Object
You can request the restriction or temporary suspension of the processing of your personal data under certain circumstances. Please contact us at You have the right to object to certain types of data processing, including direct marketing or processing based on legitimate interests. Contact us to submit your objection at
You can request the restriction or temporary suspension of the processing of your personal data under certain circumstances. Please contact us at {dpo_email} for assistance.
📧 hello@birkenspanner.com
Contact Information
For questions about your personal data or privacy rights, please contact our Data Protection Officer (DPO) at:
