Privacy Policy

Thank you for visiting our website and for your interest in our offerings. The protection of your personal data is very important to us. Below, we inform you about the processing of personal data when using our website and our online shop.

1. Controller

The controller in terms of the General Data Protection Regulation (GDPR) is:

Kaur's e-Commerze & Co.
Owner: Sukhvir Kaur
Findlweg 1
94557 Niederalteich
Germany
Phone: +49 9901 2039878
Email: Support@oldpatek.de

2. Hosting and Shop System (Shopify)

Our online shop is operated via Shopify International Ltd., Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Shopify provides the technical infrastructure, the shop system, the database, and order processing for our online shop. Shopify processes personal data such as IP addresses, device information, browser information, order information, and contact details.

Processing is carried out for the provision of our online shop and for the implementation of pre-contractual measures and for the performance of the contract in accordance with Art. 6 Para. 1 lit. b GDPR, as well as on the basis of our legitimate interest in the secure and efficient operation of our online offering in accordance with Art. 6 Para. 1 lit. f GDPR.

Further information on data protection at Shopify can be found at:
https://www.shopify.com/legal/privacy

3. Server Log Files

When you visit our website, information is automatically recorded by the web server and stored in so-called server log files.

This may include, in particular:

IP address
Date and time of access
Browser type and browser version
Operating system used
Referrer URL
Hostname of the accessing computer
Pages and files accessed

This data serves the technical provision, security, error analysis, and stability of our online offering.

Processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR.

4. Orders and Contract Processing

If you place an order in our online shop, we process the personal data you provide for the execution and processing of your order.

This includes, in particular:

First and last name
Billing and delivery address
Email address
Phone number (if provided)
Order data
Payment information
Communication data

Processing is carried out for the performance of the contract in accordance with Art. 6 Para. 1 lit. b GDPR.

Where commercial or tax law retention periods exist, storage is carried out in accordance with Art. 6 Para. 1 lit. c GDPR.

5. Customer Account

If you create a customer account, the data you provide will be stored to facilitate future orders and to allow access to your order history.

Processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.

You can have your customer account deleted at any time, provided no legal retention obligations prevent this.

6. Contact and Contact Form

If you contact us via the contact form or by email, we process the data you provide exclusively to handle your request.

This may include, in particular:

Name
Email address
Order number
Message content
Other voluntarily transmitted information

Processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR, if your request is related to an order or a contract, and on the basis of our legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR.

7. Cookies

Our website uses cookies and similar technologies.

Cookies are small text files that are stored on your device and contain certain information.

We use:

Technically necessary cookies
Functional cookies
Analysis and statistics cookies (with consent)
Marketing and advertising cookies (with consent)

Your consents are managed via the Shopify Consent Management System used on our website.

The legal basis for technically necessary cookies is Art. 6 Para. 1 lit. f GDPR.

For analysis, statistics, and marketing cookies, processing is carried out exclusively on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

8. Legal Bases for Processing

Where we process personal data, this is done on the basis of the following legal bases:

Art. 6 Para. 1 lit. a GDPR – Consent
Art. 6 Para. 1 lit. b GDPR – Performance of a contract and pre-contractual measures
Art. 6 Para. 1 lit. c GDPR – Compliance with legal obligations
Art. 6 Para. 1 lit. f GDPR – Legitimate interests

Which legal basis applies in a specific case depends on the respective processing operation.

9. Payment Service Providers

PayPal

If you select a payment method from the payment service provider PayPal, payment processing is carried out via PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

For the purpose of executing the payment, personal data such as name, billing address, shipping address, email address, payment amount, and order information are transmitted to PayPal.

Processing is carried out for the performance of the contract in accordance with Art. 6 Para. 1 lit. b GDPR.

Further information:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Klarna

If Klarna is selected as the payment method, payment processing is carried out via Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden.

Klarna may process personal data for identity and credit checks.

Processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.

Further information:
https://www.klarna.com/de/datenschutz/

Apple Pay

If Apple Pay is offered and used as a payment method, payment processing is carried out via Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland.

Further information:
https://www.apple.com/legal/privacy/de-ww/

Google Pay

If Google Pay is used, payment processing is carried out via Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Further information:
https://policies.google.com/privacy

10. Shipping Service Providers

For the execution and delivery of your order, we transmit the necessary personal data to the respective shipping and logistics service providers.

This may include, in particular:

Name
Delivery address
Email address (if required)
Phone number (if required)
Shipment information

Depending on the shipping method, the following service providers may be used, among others:

DHL
DPD
UPS
YunExpress
other regional or international shipping partners

Data processing is carried out for the performance of the contract in accordance with Art. 6 Para. 1 lit. b GDPR.

11. Google Analytics

If you have given your consent, we use Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies and similar technologies to analyze the use of our website.

The following information may be processed in particular:

IP address (shortened or anonymized where possible)
Device information
Browser information
Usage behavior
Pages visited
Time spent

Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

12. Google Tag Manager

We use Google Tag Manager from Google Ireland Limited.

Google Tag Manager is used to manage website tags and tracking services. The Tag Manager itself does not create user profiles and does not store cookies.

Integration is carried out on the basis of our legitimate interest in the efficient management of our website in accordance with Art. 6 Para. 1 lit. f GDPR.

13. Meta Pixel and Conversion API

If you have given your consent, we use the Meta Pixel and the Meta Conversion API from Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

This allows user actions on our website to be analyzed and advertising measures to be optimized.

The following data may be processed in particular:

IP address
Browser information
Device information
Pages visited
Purchase processes
Shopping cart actions
Conversions

Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

Further information:
https://www.facebook.com/privacy/policy/

14. TikTok Pixel

If you have given your consent, we use the TikTok Pixel from TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, D02 T380, Ireland.

The TikTok Pixel enables the analysis of user actions and the optimization of advertising campaigns.

Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

Further information:
https://www.tiktok.com/legal/page/eea/privacy-policy/de

15. Microsoft Clarity

If you have given your consent, we use Microsoft Clarity from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA.

Microsoft Clarity is used to analyze user behavior on our website, for example through heatmaps, click analysis, and session recordings.

Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

Further information:
https://privacy.microsoft.com/de-de/privacystatement

16. Data Transfer to Third Countries

When using individual services, personal data may be transferred to countries outside the European Union or the European Economic Area.

Where such a transfer takes place, it is based on the legal requirements of the GDPR, in particular through adequacy decisions of the European Commission or suitable safeguards such as standard contractual clauses.

17. Social Media Presences

We maintain publicly accessible profiles on social networks to communicate with customers and interested parties and to provide information about our products and services.

In doing so, personal data may be processed by the respective platform operators.

Facebook

Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland

Instagram

Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland

YouTube

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

18. Storage Duration

We store personal data only for as long as necessary for the respective purposes or as required by legal retention obligations.

After the respective processing purpose ceases to apply or after the expiry of legal retention periods, the data will be deleted or blocked in accordance with legal regulations.

Commercial and tax law retention periods may require storage for up to ten years.

19. Rights of Data Subjects

You have the following rights under the applicable legal provisions:

Right to information in accordance with Art. 15 GDPR
Right to rectification in accordance with Art. 16 GDPR
Right to erasure in accordance with Art. 17 GDPR
Right to restriction of processing in accordance with Art. 18 GDPR
Right to data portability in accordance with Art. 20 GDPR
Right to object in accordance with Art. 21 GDPR
Right to withdraw given consents in accordance with Art. 7 Para. 3 GDPR

To exercise your rights, you can contact us at any time at the email address provided in the imprint or in this privacy policy.

20. Right to Object

Where we process personal data on the basis of legitimate interests in accordance with Art. 6 Para. 1 lit. f GDPR, you have the right to object to the processing at any time for reasons arising from your particular situation.

If personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising.

21. Withdrawal of Consents

You can withdraw a given consent at any time with effect for the future.

The legality of the processing carried out until the withdrawal remains unaffected by this.

22. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

Competent supervisory authority for Bavaria:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

Website:
https://www.lda.bayern.de

23. Data Security

We employ appropriate technical and organizational security measures to protect your personal data against manipulation, loss, destruction, or unauthorized access.

Our website uses SSL or TLS encryption for the secure transmission of confidential content.

You can recognize an encrypted connection, among other things, by the fact that the address line of your browser begins with "https://".

24. Automated Decision-Making

We do not use exclusively automated decision-making, including profiling, within the meaning of Art. 22 GDPR, unless explicitly stated otherwise in this privacy policy.

25. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy if this becomes necessary due to changed legal requirements, technical developments, or changes to our services.

The current version of the privacy policy is always available on our website.

26. Status of the Privacy Policy

Status: June 2026