Privacy policy

This Privacy Policy explains how hausgem.shop collects, uses, stores, discloses, and protects personal data when you visit our website, place an order, create an account, contact us, subscribe to marketing communications, or otherwise use our services.

We process personal data in accordance with the General Data Protection Regulation, applicable German data protection laws, and other applicable privacy and consumer protection requirements.

1. Data Controller

The controller responsible for the processing of personal data through this website is:

hausgem.shop
Email: info@hausgem.shop

For questions about this Privacy Policy or the processing of your personal data, please contact us using the email address above.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed through:

The hausgem.shop online store
The checkout and ordering process
Customer accounts
Customer service communications
Marketing communications
Cookies and similar technologies
Product reviews, surveys, and other customer interactions
Fraud prevention and website security systems

Third-party websites, applications, payment providers, and services may process personal data under their own privacy policies. We recommend reviewing the privacy information provided by those third parties.

3. Personal Data We Collect

Depending on how you interact with hausgem.shop, we may collect the following categories of personal data.

Identity and Contact Data

This may include:

First and last name
Billing address
Shipping address
Email address
Telephone number
Account username or other account identifiers

Order and Transaction Data

This may include:

Products ordered
Order number
Purchase date
Order value
Shipping method
Delivery and tracking information
Return, cancellation, exchange, and refund information
Discount codes or promotional offers used
Communications concerning an order

Payment Data

Payments are processed through Shopify and the payment provider selected during checkout.

Depending on the payment method, payment providers may process:

Payment card information
Bank account information
PayPal or digital-wallet account details
Billing information
Payment authentication information
Transaction identifiers
Payment status
Fraud and risk assessment data

We generally receive payment confirmation, transaction identifiers, payment status, and limited payment details rather than complete card or account credentials.

Account Data

If you create a customer account, we may process:

Account login information
Saved delivery information
Order history
Account preferences
Customer account activity

Passwords are stored and processed through the relevant platform systems using appropriate security measures. You are responsible for keeping your login credentials confidential.

Customer Service and Communication Data

When you contact us, we may process:

Your name and contact information
The content of your message
Order information
Photographs, videos, screenshots, or documents you provide
Records of customer service communications
Information required to investigate and resolve your enquiry

Please do not send passwords, complete payment-card numbers, security codes, or unnecessary sensitive personal information by email.

Technical and Usage Data

When you access the website, certain technical information may be collected automatically, including:

Internet Protocol address
Browser type and version
Device type
Operating system
Language and regional settings
Time zone
Referring website or link
Pages viewed
Links clicked
Date and time of access
Session information
Website interaction and navigation data
Error logs, security logs, and diagnostic data

Marketing and Preference Data

Where applicable, we may process:

Newsletter subscription status
Marketing consent records
Communication preferences
Products or categories viewed
Shopping-cart activity
Responses to advertisements or campaigns
Information used to measure marketing performance

Information From Third Parties

We may receive personal data from third parties involved in providing our services, including:

Shopify
Payment service providers
Shipping and logistics providers
Fraud-prevention providers
Customer support providers
Analytics and advertising providers
Social media platforms
Business and technology service providers

We process such information only where we have a lawful basis to do so.

4. How We Use Personal Data

We may process personal data for the following purposes.

Providing the Website

We process technical and usage information to:

Display and operate the website
Maintain website functionality
Remember essential preferences
Provide shopping-cart and checkout functionality
Identify and correct technical errors
Improve website stability and performance

Processing Orders

We process identity, contact, transaction, and payment-related data to:

Accept and confirm orders
Process payments
Prepare and dispatch products
Provide delivery and tracking information
Communicate about order status
Manage cancellations, returns, exchanges, and refunds
Provide customer service
Establish, perform, and manage the purchase contract

Customer Accounts

We process account data to:

Create and maintain customer accounts
Authenticate account access
Display order history
Save customer preferences
Provide account-related services
Protect accounts against unauthorised access

Customer Support

We process communication and order data to:

Respond to enquiries
Investigate delivery or product issues
Process complaints
Provide information about products or orders
Resolve disputes
Document customer service activities

Security and Fraud Prevention

We process relevant technical, transaction, and payment-related information to:

Protect the website, customers, and business
Detect suspicious transactions
Prevent fraud, abuse, and unauthorised access
Enforce our contractual rights
Investigate security incidents
Maintain technical and organisational security measures

Legal and Regulatory Compliance

We may process personal data to:

Comply with accounting and tax obligations
Maintain legally required business records
Respond to lawful requests from authorities
Comply with consumer protection requirements
Establish, exercise, or defend legal claims
Enforce our policies and agreements
Meet other legal and regulatory obligations

Marketing

Where permitted by law, we may use contact and preference data to:

Send newsletters
Provide information about products or promotions
Display relevant advertising
Measure advertising and campaign effectiveness
Understand customer interests
Improve our product and service offerings

Where consent is required, marketing and non-essential tracking activities will be carried out only after valid consent has been obtained.

You may unsubscribe from email marketing at any time by using the unsubscribe link included in the message or by contacting info@hausgem.shop.

5. Legal Bases for Processing

We process personal data only where a valid legal basis applies.

Performance of a Contract

Under Article 6(1)(b) GDPR, we process personal data where necessary to:

Process and fulfil an order
Arrange payment and delivery
Manage returns and refunds
Provide requested customer services
Create and manage a customer account
Take steps requested before entering into a contract

Without the required information, we may be unable to accept or fulfil an order.

Compliance With Legal Obligations

Under Article 6(1)(c) GDPR, we process personal data where necessary to comply with legal obligations, including:

Tax and accounting requirements
Commercial recordkeeping obligations
Consumer protection requirements
Product safety obligations
Lawful authority and court requests

Legitimate Interests

Under Article 6(1)(f) GDPR, we may process personal data where necessary for our legitimate interests or those of a third party, provided that your interests and fundamental rights do not override those interests.

Our legitimate interests may include:

Operating and improving the online store
Securing the website and customer accounts
Preventing fraud and misuse
Managing customer enquiries
Analysing general business performance
Establishing or defending legal claims
Protecting our property, systems, customers, and business
Providing relevant information to existing customers where legally permitted

Where required, we conduct an assessment to balance these interests against your rights and interests.

Consent

Under Article 6(1)(a) GDPR, we process personal data based on consent where you have voluntarily agreed to a specific processing activity, including certain:

Marketing communications
Analytics technologies
Advertising technologies
Personalisation technologies
Non-essential cookies
Optional customer features

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Legal Claims

Where necessary, personal data may also be processed to establish, exercise, or defend legal claims and protect our rights or the rights of others.

6. Shopify

Our online store is hosted through Shopify. Shopify provides the ecommerce platform that enables us to offer products and services online.

When Shopify processes customer personal data on our behalf to provide the ecommerce platform, hausgem.shop generally acts as the controller and Shopify acts as a processor.

Shopify may also act as an independent controller for certain services, including customer-facing services, payment services, fraud prevention, security features, or enhanced Shopify services. In those situations, Shopify processes personal data under its own privacy terms.

Shopify may process information including:

Contact information
Order and transaction details
Device and browser information
Internet Protocol addresses
Website interaction information
Payment and fraud-prevention information
Information relating to Shopify customer services

Personal data relating to customers in the European Economic Area is initially processed through Shopify International Limited in Ireland. Shopify may use affiliated companies and authorised subprocessors in other countries to provide platform, hosting, security, communication, payment, and support services.

Additional information about Shopify’s independent processing and privacy rights is available through Shopify’s Consumer Privacy Policy and privacy portal.

7. Payment Processing

Payment information is processed by the payment method or payment service provider selected during checkout.

Payment providers may process personal data for purposes including:

Authorising payments
Authenticating customers
Preventing fraud
Processing refunds
Managing payment disputes
Complying with financial and anti-fraud laws

Payment providers may act as independent controllers and may request additional identity or authentication information.

The available payment methods are displayed during checkout. The payment provider’s privacy terms apply to its independent processing activities.

8. Shipping and Order Fulfilment

We disclose the information necessary to deliver an order to shipping, fulfilment, warehousing, customs, and logistics providers.

This information may include:

Customer name
Shipping address
Telephone number
Email address
Order contents
Parcel information
Tracking number
Customs information where required

Shipping providers may use this information to transport, track, deliver, redirect, or return parcels and to provide delivery notifications.

Where an order is shipped across national borders, relevant information may be provided to customs authorities or other competent authorities as required by law.

9. Other Recipients of Personal Data

We may disclose personal data to the following categories of recipients where necessary:

Shopify and Shopify affiliates
Payment service providers
Shipping, logistics, and fulfilment providers
Hosting and cloud-service providers
Email and communication providers
Customer service providers
Website security and fraud-prevention providers
Analytics providers
Advertising and marketing providers, where legally permitted
Professional advisers, including legal, accounting, and tax advisers
Insurance providers
Courts, authorities, regulators, and law enforcement bodies
Parties involved in a business restructuring, sale, transfer, or acquisition

Service providers acting on our behalf may process personal data only for the authorised purposes and under appropriate contractual and security obligations.

We do not disclose personal data to third parties without a lawful purpose and legal basis.

10. Cookies and Similar Technologies

hausgem.shop and its authorised service providers may use cookies, pixels, local storage, software development kits, and similar technologies.

These technologies may be used to:

Operate the website
Maintain a shopping cart
Enable checkout
Remember privacy and language preferences
Protect accounts and prevent fraud
Analyse website performance
Understand visitor interactions
Personalise content
Measure advertising performance
Provide relevant advertising, where consent has been given

Essential Technologies

Technologies that are strictly necessary to provide a service expressly requested by the user may be used without consent where permitted by Section 25(2) of the German Telecommunications Digital Services Data Protection Act.

These technologies may be required for:

Website navigation
Shopping-cart functionality
Checkout and payment
Security
Load balancing
Privacy preference storage
Account authentication

Disabling essential technologies may prevent parts of the website from functioning correctly.

Optional Technologies

Non-essential analytics, advertising, and personalisation technologies are used only where the legally required consent has been obtained.

You may accept, reject, or manage optional technologies through the cookie banner or privacy settings displayed on the website.

You may withdraw or change your consent at any time through the available privacy settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Browser settings may also allow you to block or delete cookies. However, browser controls may not manage every type of tracking technology.

11. Analytics and Advertising

Where consent has been obtained, we may use analytics and advertising services to understand how visitors use the website and to measure the effectiveness of advertisements.

These providers may process information such as:

Internet Protocol address
Device and browser information
Cookie or advertising identifiers
Pages and products viewed
Links clicked
Purchases or shopping-cart activity
Approximate location derived from technical information
Referring website
Date and time of interaction

Where required under German law, analytics or advertising technologies will not be activated until consent has been provided.

Consent can be withdrawn through the website’s privacy or cookie settings.

12. Marketing Communications

We may send marketing communications where:

You have given consent;
The communication is otherwise permitted by applicable law; or
We have another valid legal basis.

Marketing communications may contain information about products, offers, promotions, or store updates.

You may unsubscribe at any time by:

Selecting the unsubscribe link in a marketing email; or
Contacting info@hausgem.shop.

Unsubscribing from marketing does not prevent us from sending non-promotional communications relating to an order, account, refund, security issue, or legal notice.

We may retain limited information about an unsubscribe request to ensure that the preference continues to be respected.

13. International Data Transfers

Some service providers, Shopify affiliates, payment providers, technology providers, or logistics providers may process personal data outside Germany or the European Economic Area.

Where personal data is transferred to a country outside the European Economic Area, we use or rely on an appropriate transfer mechanism where required, such as:

An adequacy decision adopted by the European Commission
Standard Contractual Clauses approved by the European Commission
Additional contractual, technical, or organisational safeguards
Another legally permitted transfer mechanism
Your explicit consent in limited circumstances where legally valid

No transfer mechanism can eliminate every risk associated with processing in another country. However, reasonable measures are taken to protect transferred personal data in accordance with applicable law.

14. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

Retention periods depend on factors including:

The duration of the customer relationship
Whether a customer account remains active
The time required to fulfil an order
Return, refund, and chargeback periods
Applicable limitation periods
Tax, accounting, and commercial recordkeeping obligations
Fraud-prevention requirements
Security requirements
Pending complaints, disputes, or legal claims
Consent status and withdrawal requests

Order, invoice, payment, and accounting records may be retained for the periods required by applicable tax and commercial laws.

Customer service records may be retained for as long as reasonably necessary to respond to enquiries, document resolutions, and protect legal rights.

When personal data is no longer required, it will be deleted, anonymised, or securely isolated from further use, unless continued retention is legally required.

15. Security

We and our service providers use appropriate technical and organisational measures intended to protect personal data against:

Unauthorised access
Unlawful processing
Accidental loss
Destruction
Alteration
Disclosure
Misuse

Measures may include encryption, access controls, authentication systems, system monitoring, backups, secure communication protocols, and contractual confidentiality obligations.

No website, transmission method, or storage system can be guaranteed to be completely secure. Customers should use unique passwords, protect account credentials, and contact us promptly if unauthorised account activity is suspected.

16. Your Data Protection Rights

Subject to the conditions and limitations established by applicable law, you may have the following rights.

Right of Access

You may request confirmation of whether we process your personal data and obtain access to the personal data and relevant processing information.

Right to Rectification

You may request correction of inaccurate personal data and completion of incomplete personal data.

Right to Erasure

You may request deletion of personal data where the legal requirements are satisfied.

The right to erasure may not apply where processing remains necessary for legal obligations, legal claims, freedom of expression, or other legally recognised reasons.

Right to Restriction

You may request restriction of processing in circumstances established by law, including while the accuracy or lawfulness of processing is being reviewed.

Right to Data Portability

Where processing is based on consent or a contract and is carried out by automated means, you may request certain personal data in a structured, commonly used, and machine-readable format.

Where technically feasible and legally required, you may request transmission of that data to another controller.

Right to Object

You may object at any time to processing based on legitimate interests where reasons arising from your particular situation apply.

We will stop the relevant processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or the processing is necessary for legal claims.

You may object at any time to the processing of personal data for direct marketing. Personal data will no longer be processed for direct marketing after a valid objection.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

Withdrawal does not affect processing lawfully carried out before consent was withdrawn.

Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority.

You may generally contact the supervisory authority responsible for your habitual residence, place of work, or the location of the alleged infringement.

Right Concerning Automated Decisions

You have the right not to be subject to a decision based solely on automated processing, including profiling, where that decision produces legal effects or similarly significantly affects you, unless the processing is permitted by law and appropriate safeguards are provided.

17. Exercising Your Rights

To exercise a data protection right, contact:

Email: info@hausgem.shop

Please describe your request clearly and include sufficient information to identify the relevant account, order, or communication.

To protect personal data, we may need to verify your identity before completing a request. We will request only the information reasonably necessary for verification.

Requests will be handled without undue delay and within the time required by applicable law. The response period may be extended where legally permitted for complex or numerous requests.

Data protection requests are generally processed free of charge. A reasonable fee may be charged, or a request may be refused, where a request is manifestly unfounded or excessive and applicable law permits us to do so.

Certain information may be retained despite a deletion request where retention remains necessary to comply with law, prevent fraud, resolve disputes, or establish, exercise, or defend legal claims.

18. Automated Fraud and Security Tools

We and our service providers may use automated systems to identify potentially fraudulent, unauthorised, or high-risk transactions.

These systems may consider information such as:

Transaction details
Payment status
Device information
Internet Protocol address
Account activity
Delivery information
Previous transaction patterns
Information supplied by fraud-prevention providers

An order may be held for review, require additional verification, or be rejected where a significant security or fraud risk is identified.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects unless the decision is permitted by applicable law and the required safeguards are provided.

19. Children’s Personal Data

The website is not specifically directed toward children.

We do not knowingly request personal data from children who are unable to enter into a valid purchase contract or provide valid data protection consent without the involvement of a parent or legal guardian.

If you believe that a child has provided personal data without appropriate authorisation, contact info@hausgem.shop. We will review the matter and take appropriate action.

20. Business Transfers

If all or part of hausgem.shop is involved in a merger, acquisition, reorganisation, financing, insolvency, sale of assets, or other business transfer, personal data may be disclosed to advisers and potential transaction parties where necessary.

Any recipient will be required to handle personal data in accordance with applicable data protection requirements.

Customers will be informed where required by law of any material change affecting the controller or the processing of personal data.

21. Legal Disclosures

We may preserve, use, or disclose personal data where reasonably necessary to:

Comply with applicable law
Respond to a valid court order or authority request
Investigate suspected fraud or illegal activity
Protect customers or other individuals
Protect the security and integrity of our services
Enforce contractual rights
Establish, exercise, or defend legal claims

We assess disclosure requests and provide only the information reasonably necessary where legally permitted to do so.

22. Third-Party Links

The website may contain links to websites or services operated by third parties.

We are not responsible for the privacy, security, content, or processing practices of third-party websites. This Privacy Policy does not apply after you leave hausgem.shop.

Please review the privacy policy of the relevant third party before providing personal data.

23. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

Changes to our services
Changes to website functionality
New service providers
Changes to data processing activities
Legal or regulatory developments
Security or operational requirements

The updated version will be published on hausgem.shop with a revised “Last updated” date.

Where required by law, we will provide additional notice or request renewed consent before a material change takes effect.

24. Contact Us

For privacy enquiries, data protection requests, consent withdrawals, or complaints concerning the processing of personal data, contact: