Datenschutzerklärung

This Privacy Policy describes how cotopaxifx.shop collects, uses, stores, shares, and otherwise processes personal information when you visit our website, make a purchase, communicate with us, or otherwise interact with our services.

For privacy questions, contact:

Email: info@cotopaxifx.shop

1. Data Controller

For personal information processed in connection with the operation of this online store, the identified business is:

cotopaxifx.shop
Email: info@cotopaxifx.shop

Where applicable, certain service providers may process personal information on our behalf or may act as independent or joint controllers for specific processing activities.

2. Personal Information We May Collect

Depending on how you interact with our website, we may process information including:

• Name;
• Billing address;
• Shipping address;
• Email address;
• Telephone number;
• Order information;
• Product selections;
• Transaction information;
• Payment-related information;
• Customer account information;
• Communications with customer service;
• Return and refund information;
• IP address;
• Browser type;
• Device information;
• Operating system;
• Cookie identifiers;
• Website usage information;
• Referral information;
• Approximate location derived from IP information;
• Fraud and security information; and
• Marketing preferences.

3. Information You Provide Directly

We collect information that you voluntarily provide when you:

• Place an order;
• Create or manage an account;
• Enter your shipping or billing information;
• Contact customer service;
• Submit a return or refund request;
• Subscribe to marketing communications;
• Participate in a promotion;
• Submit feedback; or
• Otherwise communicate with cotopaxifx.shop.

Certain information is necessary to perform a contract or process an order. If you do not provide required information, we may be unable to complete the requested transaction.

4. Information Collected Automatically

When you access the website, certain technical information may be collected automatically through server logs, cookies, pixels, software development kits, and similar technologies.

This information may include device identifiers, IP address, browser information, pages viewed, interactions with website features, time spent on pages, and referral information.

Some technologies are necessary for the operation, security, checkout, shopping cart, and authentication functionality of the website.

Other technologies, such as certain analytics or advertising technologies, will be used based on an appropriate legal basis and consent where consent is required.

5. How We Use Personal Information

Personal information may be used to:

• Process and fulfil orders;
• Process payments;
• Confirm transactions;
• Arrange shipping and delivery;
• Provide order notifications;
• Handle returns and refunds;
• Respond to customer enquiries;
• Operate customer accounts;
• Prevent fraud and abuse;
• Protect the security of our website;
• Maintain business and transaction records;
• Improve website functionality;
• Analyse website performance;
• Comply with legal and regulatory requirements;
• Establish, exercise, or defend legal claims;
• Send marketing communications where permitted; and
• Provide personalised functionality where legally permitted.

6. Legal Bases for Processing

Where the GDPR applies, personal information may be processed on one or more legal bases, including:

Performance of a contract: where processing is necessary to process an order, arrange delivery, process payment, or provide requested customer service.

Legal obligation: where processing is necessary for accounting, tax, regulatory, consumer protection, fraud-prevention, or other legal requirements.

Legitimate interests: where processing is necessary for legitimate business purposes such as maintaining security, preventing fraud, improving services, or protecting legal rights, provided those interests are not overridden by the rights and freedoms of the individual.

Consent: where consent is required, including for certain marketing communications, advertising technologies, or non-essential cookies.

The GDPR requires transparent information concerning the purposes and legal bases of processing and provides data subjects with specific rights.

7. Shopify

Our online store is operated using Shopify technology.

Shopify may process information necessary to provide hosting, ecommerce functionality, checkout services, security, analytics, order management, and related services.

Depending on the particular processing activity, Shopify or another service provider may act as a processor, service provider, or independent controller.

Customers should also review any applicable Shopify privacy information made available through Shopify services.

8. Payment Providers

Payment information may be processed by Shopify Payments and/or other authorised payment providers available through our checkout.

Payment providers may collect information such as card details, transaction identifiers, billing information, fraud-prevention data, and authentication information.

cotopaxifx.shop may receive confirmation of the payment and related transaction information without receiving complete payment-card details.

9. Shipping and Fulfilment Providers

We may disclose information necessary to deliver an order to shipping companies, carriers, logistics providers, warehouses, fulfilment providers, and customs-related service providers.

This information can include:

• Customer name;
• Delivery address;
• Telephone number;
• Email address;
• Order information; and
• Tracking information.

Information is limited to what is reasonably necessary for fulfilment, delivery, customer support, compliance, or related purposes.

10. Service Providers

We may use third-party providers for services such as:

• Website hosting;
• Ecommerce infrastructure;
• Payment processing;
• Fraud prevention;
• Order fulfilment;
• Delivery;
• Customer support;
• Email communication;
• Analytics;
• Advertising;
• Security;
• Technical support; and
• Business administration.

Such providers may process personal information according to applicable contractual and legal requirements.

11. Cookies

Our website may use cookies and similar technologies.

Essential cookies may be required to:

• Maintain shopping-cart functionality;
• Process checkout;
• Remember customer preferences;
• Protect accounts;
• Prevent fraud;
• Maintain website security; and
• Provide requested website functionality.

Non-essential cookies, including certain analytics or advertising cookies, will be used only where there is an appropriate legal basis and consent where legally required.

Users may be given cookie-management options through the website's cookie banner or privacy controls.

12. Marketing Communications

Where permitted by law, and where any required consent has been obtained, cotopaxifx.shop may send information regarding products, promotions, or services.

Customers may withdraw marketing consent or unsubscribe from marketing communications at any time.

Withdrawal of marketing consent does not affect transactional messages necessary to process orders, provide customer service, or comply with legal obligations.

13. International Transfers

Some service providers used by cotopaxifx.shop may operate in countries outside Germany or the European Economic Area.

Where personal information is transferred internationally and GDPR transfer restrictions apply, appropriate safeguards will be used where required, such as an adequacy decision, approved contractual safeguards, or another legally permitted transfer mechanism.

14. Data Retention

Personal information is retained only for as long as reasonably necessary for the purposes for which it was collected, including:

• Completing transactions;
• Providing customer service;
• Maintaining business records;
• Meeting accounting and tax requirements;
• Preventing fraud;
• Resolving disputes;
• Enforcing agreements; and
• Complying with applicable law.

Different categories of information may be retained for different periods.

15. Security

We use reasonable organisational and technical measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

However, no online transmission, storage system, or website can guarantee absolute security.

Customers are responsible for protecting any account credentials and should notify us if they suspect unauthorised access to their account.

16. Your GDPR Rights

Where the GDPR applies, you may have rights including:

• The right to access personal information;
• The right to correct inaccurate information;
• The right to request deletion;
• The right to restrict processing;
• The right to data portability where applicable;
• The right to object to certain processing;
• The right to withdraw consent at any time where processing is based on consent; and
• The right to lodge a complaint with a competent data protection supervisory authority.

The availability of a particular right may depend on the circumstances and legal basis for processing.

17. Exercising Your Rights

To submit a privacy request, contact:

info@cotopaxifx.shop

We may need to verify your identity before responding to a request in order to protect personal information from unauthorised disclosure.

We will respond within the periods required by applicable law.

18. Right to Object to Direct Marketing

Where personal information is processed for direct marketing purposes, you may object to such processing.

After receiving a valid objection, we will stop using the relevant personal information for direct marketing as required by law.

19. Withdrawal of Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.

20. Automated Processing

Certain service providers may use automated tools for fraud detection, security, checkout operation, payment risk analysis, or website functionality.

Where automated decision-making produces legal or similarly significant effects and GDPR requirements apply, the applicable rights and safeguards will be respected.

21. Children's Privacy

Our store is intended for individuals legally capable of purchasing the products offered or for persons purchasing with appropriate parental or guardian involvement where required.

We do not knowingly seek to collect personal information from young children for independent commercial use.

If you believe a child has provided personal information improperly, contact us.

22. Disclosure Required by Law

We may disclose personal information where reasonably necessary to:

• Comply with applicable law;
• Respond to lawful government or court requests;
• Protect our legal rights;
• Investigate fraud;
• Protect customers or third parties; or
• Enforce contractual rights.

23. Business Changes

If all or part of cotopaxifx.shop is reorganised, transferred, sold, or merged, personal information may be transferred as part of the relevant business transaction, subject to applicable data protection requirements.

24. Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices of independent third-party websites.

Customers should review the privacy policies of those third parties before submitting personal information.

25. Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect changes in our services, technology, legal requirements, or business practices.

The current version will be published on cotopaxifx.shop with an updated revision date.

26. Contact

For questions or requests relating to this Privacy Policy or the processing of personal information:

cotopaxifx.shop
Email: info@cotopaxifx.shop