-
Introduction
Opaak GmbH values your privacy and is committed to protecting your personal data. We collect and process personal data in accordance with applicable data protection laws, specifically the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our services.
-
Data Controller
The data controller responsible for the processing of your personal data is:
Opaak GmbH
Binterimstr. 12, 40223 Düsseldorf, Germany
Email: info(at)opaak.de
-
Data Processing Overview
We process personal data to provide services, fulfill contractual obligations, communicate with you, and improve our offerings. Personal data may include, but is not limited to, your name, address, email, phone number, and payment details.
-
Hosting & Content Delivery Network
Our website is hosted on Shopify's platform, which provides us with e-commerce functionality. The domain for our site is hosted by netcup GmbH.
-
Data Collection and Types of Personal Data
We collect personal data when you interact with our services, place an order, or subscribe to our communications. Types of personal data we may collect include:
Contact details: Name, email address, phone number, and shipping/billing address.
Payment details: Information necessary for processing payments (e.g., credit card numbers, billing information).
Technical data: IP address, browser information, device type, operating system, and user behavior on the site.
Marketing preferences: Consent to receive promotional emails, newsletter subscriptions, etc.
Transaction data: Order details, product information, delivery status, and payment history.
-
Use of Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your browsing experience. Cookies may be placed by us or third parties. You can manage your cookie preferences through the Cookie Consent Tool on our website.
-
Data Processing for Order Fulfillment
7.1 Processing for Delivery and Payment
To process your order, we share your personal data with third parties who assist with delivery and payment. For example, we share your data with our shipping service providers and payment processors (e.g., Shopify Payments, PayPal, Klarna, Klarna "Pay Later," Stripe, and bank transaction providers) to ensure smooth transaction processing and delivery.
7.2 Use of Payment Service Providers
Apple Pay: When you opt for Apple Pay, the payment is processed securely via your Apple device, using encrypted data.
PayPal: When using PayPal, we share your payment data with PayPal for processing, which may also involve credit checks.
Shopify Payments: Payments made through Shopify Payments are processed by Stripe Payments Europe Ltd, and the necessary payment details are passed on for payment execution.
Klarna: Klarna offers payment options such as “Pay Later” or “Pay in Installments” that may involve credit checks and additional processing of your personal data.
Bank Transaction: If you choose to pay via bank transfer, we may collect necessary banking information for payment processing. Your transaction will be processed directly through your banking institution in compliance with relevant financial regulations.
-
Marketing and Online Advertising
8.1 Facebook Pixel
We use Facebook Pixel to track conversions, create custom audiences, and evaluate the effectiveness of Facebook ads. The pixel allows us to display targeted ads to users who have shown interest in our website. Data such as email addresses and purchase details are collected and shared with Facebook to help create better-targeted ads.
8.2 Google Ads and Conversion Tracking
We use Google Ads to create targeted advertising. Google Ads Conversion Tracking allows us to assess the performance of our ads by tracking users who click on our ads and visit our website. Data collected via cookies is used to create conversion statistics without personally identifying users. Personal data may be transferred to Google’s servers in the USA.
8.3 Google Marketing Platform (GMP)
We use GMP for ad targeting, optimization, and measurement. Cookies track which ads were displayed, how users interact with ads, and measure conversions. Google may use this data to serve targeted ads on other sites. Your browser communicates directly with Google's servers when using GMP.
8.4 Klaviyo (Email Marketing)
We use Klaviyo for email marketing, which allows us to send personalized promotional emails to users who have opted in. Klaviyo may process your email address and interaction data for marketing purposes, helping us better target communications based on your preferences and behavior.
-
Data Retention
Your personal data will only be retained for as long as is necessary to fulfill the purposes outlined in this privacy policy or as required by law. For example, payment information is stored as long as necessary to process transactions, while marketing preferences may be stored for as long as you are subscribed to our newsletters.
-
Rights of Data Subjects
Under the GDPR, you have the right to:
Request access to your personal data.
Request rectification or deletion of your personal data.
Object to the processing of your data.
Request the restriction of data processing.
Withdraw consent to the processing of your personal data.
Lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.
-
Data Security
We implement appropriate technical and organizational measures to safeguard your personal data from unauthorized access, disclosure, alteration, or destruction. We use encryption, firewalls, and secure protocols to protect your data during transmission and storage.
-
Third-Party Services
We work with third-party service providers, such as payment processors, hosting companies, and marketing platforms. These service providers are required to adhere to data protection laws and ensure the security of your data.
-
International Data Transfers
Your personal data may be transferred to and processed in countries outside the EU/EEA (such as the USA) by third-party service providers like Google, PayPal, and Shopify. We ensure that such transfers are made in compliance with the applicable data protection laws, including the use of standard contractual clauses or other safeguards.
-
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Please review this Privacy Policy periodically for any changes.
-
Contact Information
If you have any questions or concerns regarding this Privacy Policy or the processing of your personal data, please contact us at:
Opaak GmbH
Binterimstr. 12, 40223 Düsseldorf, Germany
Email: info(at)opaak.de
