Privacy Policy

We appreciate your interest in our online shop. Protecting your personal data is important to us. Below, we explain which personal data we process when you visit our website and when you place an order.

1. Controller

The controller responsible for data processing on this website is:
FLLCDesigns
Email: [email protected]

2. General Information on Data Processing

We process personal data only in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR).

Personal data means any information relating to an identified or identifiable natural person.

3. Data Processing When Visiting the Website

When you access our website, your browser automatically transmits certain information to our website server. This information is temporarily stored in so-called server log files.

The following data may in particular be processed:

IP address
date and time of access
name and URL of the retrieved file
website from which access was made (referrer URL)
browser used and, if applicable, your device operating system
name of your access provider

This data is processed in order to ensure a smooth connection to the website, to guarantee system security and stability, and for technical administration of the website.

Legal basis: Art. 6(1)(f) GDPR

4. Orders and Contract Fulfilment

When you place an order in our shop or prepare to place an order, we process the data required to fulfil the contract. This includes in particular:

first and last name
billing address
email address
if applicable, phone number
payment data or payment-related information
order and transaction data

As we offer digital products, no physical shipping takes place. Your data is processed in order to handle your order, process payments, provide digital content, and communicate with you regarding your order.

Legal basis: Art. 6(1)(b) GDPR

5. Customer Communication

If you contact us by email or via a contact form, we process the data you provide for the purpose of handling your request.

Legal basis:

Art. 6(1)(b) GDPR if your request is related to an order or contract
Art. 6(1)(f) GDPR for general inquiries

6. Payment Service Providers

We use external payment service providers to process payments. As part of the payment process, the data required for payment processing is transmitted to the payment provider you select, insofar as this is necessary to complete the payment.

Legal basis: Art. 6(1)(b) GDPR

Please note that the respective payment provider may process your data under its own privacy policy.

7. Hosting and Technical Service Providers

To provide our online shop, we use external technical service providers, in particular hosting and shop system providers. These providers process personal data on our behalf or to the extent necessary to provide their services.

Legal basis: Art. 6(1)(f) GDPR and, where necessary for contract fulfilment, Art. 6(1)(b) GDPR.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Some of them are technically necessary for the website and ordering process to function properly, for example for shopping cart, language, session, and cookie-consent settings.

We use additional cookies or similar technologies for analytics, statistics, comfort, or marketing purposes only if you have given your consent to the corresponding category.

Legal bases:

strictly necessary cookies and technologies: Sec. 25(2) TDDDG in conjunction with Art. 6(1)(f) GDPR or, where applicable, Art. 6(1)(b) GDPR
optional cookies and technologies, including analytics or marketing technologies: Sec. 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR

You may withdraw or adjust your consent at any time with future effect through our cookie settings. The lawfulness of processing carried out before withdrawal remains unaffected.

9. Google Analytics

Subject to your consent, we use Google Analytics 4, a web analytics service provided by:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics helps us understand how visitors find and use our online shop, which pages and products are viewed, how visitors interact with the shop, and whether technical or usability improvements are required.

Depending on the actions performed in the shop, Google Analytics may process information including:

pseudonymous cookie and device identifiers
date and time of access
pages and products viewed
referrer information and traffic source
browser, device, operating system, language, and screen information
approximate geographical information
interactions such as page views, product views, product-list views, cart interactions, and checkout steps
transaction information such as a transaction identifier, products purchased, prices, currency, order value, and applied discounts

We do not intentionally transmit your name, email address, postal address, payment details, personalization content, uploaded files, or other directly identifying customer information to Google Analytics.

Activation only after consent

Google Analytics is activated only after you have consented to the Statistics category in our cookie settings. If you choose only technically necessary cookies or leave Statistics disabled, the external Google Analytics tag is not loaded, no Analytics cookies are created, and no Analytics measurement data is transmitted to Google.

Consent to Statistics does not automatically constitute consent to separate marketing technologies. Marketing-related storage or functionality is controlled separately through the Marketing category in our cookie settings.

Legal bases: Sec. 25(1) TDDDG and Art. 6(1)(a) GDPR

IP-address processing

Google Analytics may briefly use your IP address when data is collected in order to determine approximate geographical information and route the request. According to Google, individual IP addresses of users located in the European Union are not logged or stored. The IP address is discarded before the Analytics data is logged.

Google Analytics cookies

After consent has been granted, the Shopware Google Analytics integration may set first-party Analytics cookies. These may include cookies with names such as:

_swag_ga_ga
_swag_ga_ga_01PGH4CBFQ

These cookies are used to distinguish pseudonymous users and maintain session information. Their lifetime depends on our configuration and the limitations imposed by the browser and may be up to approximately 400 days.

Data retention

User-level and event-level data stored in Google Analytics is retained for 14 months and is then automatically deleted. The retention period for user identifiers is not reset when a user returns to the website. Aggregated reports that no longer permit direct allocation to an individual user may remain available for a longer period.

Withdrawal of consent

You may withdraw your consent at any time with future effect by opening our cookie settings and disabling the Statistics category. Following withdrawal, Google Analytics will no longer be activated on subsequent page views and the associated Analytics cookies will be removed where technically possible.

Further information about Google’s processing of data can be found at:

10. Disclosure of Data

We disclose your personal data only where this is permitted by law or where you have given your consent. This may in particular occur:

for contract fulfilment to payment providers and technical service providers
to Google Ireland Limited for Google Analytics after you have given consent
to comply with legal obligations
for the establishment, exercise, or defence of legal claims

11. International Data Transfers

If, in connection with the services we use, personal data is transferred to recipients in countries outside the European Union or the European Economic Area, we ensure compliance with the applicable legal requirements.

In connection with Google Analytics, data may also be processed by Google companies, service providers, or servers located outside the European Union or European Economic Area, including in the United States.

Where applicable, transfers to Google LLC in the United States may be based on Google LLC’s certification under the EU–U.S. Data Privacy Framework. Where the Data Privacy Framework does not apply, Google may rely on other recognised transfer mechanisms, including the European Commission’s Standard Contractual Clauses and supplementary safeguards.

Further information about Google’s applicable data-transfer safeguards is available in Google’s privacy and data-processing information.

12. Storage Period

We store personal data only for as long as necessary for the respective purposes or as long as statutory retention obligations apply. After the respective purpose no longer applies or after statutory retention periods expire, the relevant data is deleted or processing is restricted.

Different storage periods may apply to data processed by external service providers. Where we can configure these periods, we limit them to what is necessary for the respective processing purpose.

13. Your Rights

Subject to the legal requirements, you have the following rights in particular:

right of access to the personal data we process about you
right to rectification of inaccurate data and completion of incomplete data
right to erasure of your data
right to restriction of processing
right to data portability
right to object to processing
right to withdraw any consent you have given with future effect

To exercise your rights, you may contact us at any time at [email protected].

14. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

15. Obligation to Provide Data

The provision of certain personal data is required for the conclusion and performance of an order. Without this data, we may not be able to process an order or provide digital content.

The provision of data for Google Analytics is voluntary and is not required in order to use the shop or place an order.

16. Changes to This Privacy Policy

We reserve the right to amend this privacy policy if necessary so that it always complies with current legal requirements or to reflect changes to our services and processes.

17. Contact

If you have any questions about data protection, you can contact us at any time by email at:
[email protected]