Privacy policy
This is a translation for your convenience. The German version is the legally binding one.
1. Controller
Elisabeth Articus
Mildred-Scheel-Strasse 3
50996 Cologne
Germany
Phone: +49 152 25822079
Email: hi@allaboutarticus.de
2. General principles
We process personal data only where this is necessary to provide our online store, to process orders and to fulfil our legal obligations, or where you have given your consent. The legal bases are Art. 6(1)(b) GDPR (contract), (c) (legal obligation), (f) (legitimate interest) and (a) (consent).
3. Hosting and store system
Our store runs on Shopify International Limited, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, Ireland. Shopify processes inventory, contract and usage data as well as technical access data on our behalf. The basis is a data processing agreement under Art. 28 GDPR. Privacy policy: https://www.shopify.com/legal/privacy
When you access our pages, server log data is processed automatically (IP address, date and time, page accessed, browser type, operating system, referrer). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and stable operation of the store.
4. Cookies and consent
We use technically necessary cookies that are required to operate the store, in particular for the cart, checkout and login. The legal basis is § 25(2) no. 2 TTDSG in conjunction with Art. 6(1)(f) GDPR.
All non-essential cookies and services, in particular marketing and audience measurement, are only used with your consent (§ 25(1) TTDSG, Art. 6(1)(a) GDPR). You make your choice in the consent banner on your first visit. You can withdraw your consent at any time with effect for the future via the cookie settings.
5. Order processing
To process your order we handle your name, delivery and billing address, email address, phone number where applicable, and order and payment data. The legal basis is Art. 6(1)(b) GDPR. Commercial and tax retention periods (§ 147 AO, § 257 HGB) remain unaffected; we keep invoice data for ten years.
6. Payment service providers
Depending on the payment method chosen, we pass the necessary payment data to the relevant provider. The legal basis is Art. 6(1)(b) GDPR.
Shopify Payments and Shop Pay: Shopify International Limited, Ireland
PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
Klarna: Klarna Bank AB (publ), Sweden. For certain payment methods Klarna carries out a credit check.
Apple Pay: Apple Distribution International Ltd., Ireland
Google Pay: Google Ireland Limited, Ireland
7. Shipping
For delivery we pass your name and delivery address, and where tracking is used also your email address, to DHL (Deutsche Post AG, Bonn), UPS (United Parcel Service Deutschland S.à r.l. & Co. OHG) and our Spanish delivery partner Cores.
8. Services and apps in use
Meta pixel. Provider: Meta Platforms Ireland Limited, Dublin, Ireland. We use the Meta pixel for audience measurement and advertising. Pseudonymous usage data may be transmitted to Meta and linked to an existing Meta account. Transfer to the USA is possible; the basis is standard contractual clauses and the EU-US Data Privacy Framework. Used exclusively with your consent, Art. 6(1)(a) GDPR. You can withdraw consent at any time via the cookie settings. More information: https://www.facebook.com/privacy/policy
Smile.io (loyalty programme). Provider: Smile.io Inc., Canada. Processes customer account and order data to manage points and rewards. Legal basis: Art. 6(1)(b) GDPR.
Sesami (appointment booking). Processes name, contact details and appointment data for booking consultations. Legal basis: Art. 6(1)(b) GDPR.
Back-in-stock notification. Processes your email address in order to notify you when an item is available again. Legal basis: Art. 6(1)(a) GDPR.
Instafeed (Instagram feed). Embeds content from our Instagram profile. Used with consent, Art. 6(1)(a) GDPR.
hCaptcha. Provider: Intuition Machines, Inc., USA. Serves to prevent automated access and misuse of forms. Legal basis: Art. 6(1)(f) GDPR.
9. Newsletter
If you subscribe to our newsletter, we process your email address in order to send product information and offers. Sign-up uses the double opt-in procedure: you first receive a confirmation email. The legal basis is Art. 6(1)(a) GDPR. Sending is handled by Shopify International Limited, Ireland. You can unsubscribe at any time via the link in every email or by informal message to us.
10. Contacting us
For enquiries by email, phone or contact form, we process your details in order to handle the enquiry. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries, otherwise (f).
11. Transfers to third countries
Some of the services named above process data outside the EU, in particular in the USA and Canada. The basis is the European Commission’s standard contractual clauses under Art. 46(2)(c) GDPR, the adequacy decision for Canada, or certification under the EU-US Data Privacy Framework.
12. Retention period
We store personal data only for as long as is necessary for the relevant purpose or as required by statutory retention periods. After that the data is deleted or its processing is restricted.
13. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR). To do so, contact hi@allaboutarticus.de
14. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestrasse 2–4, 40213 Düsseldorf, https://www.ldi.nrw.de
15. Changes
We adapt this privacy policy when our services or the legal situation change.
Last updated: September 2026