PRIVACY POLICY

Privacy Policy

  1. Responsible

The entity responsible for data processing on this website is:

Sina Mansourikah Foumani
Hasselbusch 94A
24558 Henstedt-Ulzburg
Germany
Email: info@herzjoy.de

  1. General information on data processing

We take the protection of your personal data very seriously. Personal data is treated confidentially and in accordance with the statutory data protection regulations (GDPR, BDSG) and this privacy policy.

Personal data is any data that can be used to personally identify you.

  1. Data collection when visiting the website

When you visit our website, our hosting provider (Shopify) automatically collects information. This information, known as server log files, includes, for example:

  • Browser type and browser version

  • Operating system used

  • Referrer URL

  • Hostname of the accessing computer

  • Time of server request

  • IP address

This data is technically necessary to display the website correctly and serves to ensure stability and security. The legal basis is Article 6(1)(f) GDPR.

  1. Hosting by Shopify

Our online shop is powered by Shopify Inc., 151 O'Connor Street, Ottawa, Ontario K2P 2L8, Canada. Shopify stores your data on secure servers and processes order, payment, and usage data on our behalf.

Data may be transferred to third countries (e.g., Canada or the USA). Shopify uses recognized safeguards in accordance with Article 46 GDPR (standard contractual clauses).

  1. Orders and customer account

When you place an order, we process the following data:

  • name

  • Billing and delivery address

  • E-mail address

  • Payment information

  • Order details

  • Personalization details (e.g., desired text)

This data is required for contract processing (Art. 6 para. 1 lit. b GDPR).

  1. Personalized products

Any text or content you enter will be used unchanged for the product design. No content check for errors will be performed.

  1. Payment processing

Payments are processed through the payment providers offered by Shopify (e.g., credit card, Klarna, etc.). Payment data is processed directly by the respective payment service provider.

  1. Shipping provider DHL

To deliver your order, we will forward the following data to DHL:

  • name

  • Delivery address

  • Email address (for shipment tracking)

The legal basis is Article 6(1)(b) GDPR.

  1. Contact

When you contact us via contact form or email, your information will be stored for processing your request. The legal basis for this is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.

  1. Newsletter (Shopify Email)

When you subscribe to our newsletter, your email address will be used to send you information about our products. This will be done via Shopify Email.

The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR.

  1. Reviews (Judge.me & Air Product Reviews)

After a purchase, you may be invited to submit a product review. In this case, your email address and order details will be transmitted to the respective review services.

  1. Etsy sync (shuttle)

To manage our products, we may connect to Etsy. This may involve the processing of product and order data.

  1. Analytics and marketing tools

We use the following services:

Google Analytics – for analyzing user behavior
Google Ads Conversion Tracking – for measuring advertising success
Meta (Facebook) Pixel – for displaying relevant advertising

These tools use cookies and process data only after you have given your consent via our cookie banner (Art. 6 para. 1 lit. a GDPR).

  1. Cookies & Consent Management

We use the Avada Cookie Consent tool to manage your consent to the storage of cookies.

  1. Your rights

You have the right to:

  • Information about your stored data (Art. 15 GDPR)

  • Rectification (Art. 16 GDPR)

  • Erasure (Art. 17 GDPR)

  • Restriction of processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Right to object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority.

  1. Storage duration

We only store personal data for as long as is necessary for contract processing or due to legal retention obligations.

  1. SSL/TLS encryption

This website uses SSL/TLS encryption to protect confidential content.