Privacy policy

 

Privacy Policy
Last updated: September 3, 2025

1. Controller

Coffee Wave – Tobias Schmidt
Forststraße 17, 79618 Rheinfelden (Baden)
E-Mail: info@coffeewave.de

We operate this shop via the Shopify platform. Some data processing is carried out directly by Shopify. For more details, please refer to Shopify’s Privacy Policy.

2. Data We Collect

We process personal data that you provide to us yourself (e.g., when placing an order or contacting us) as well as data collected automatically when you visit the website. This includes in particular:

• Contact details: name, address, email, phone number

• Payment details: payment method, billing and transaction data

• Account information: login, settings

• Usage data: IP address, browser, device information, cookies

• Communication: messages sent to customer service

3. Purposes & Legal Bases

We process your data for the following purposes:

• Orders & contract fulfillment (Art. 6(1)(b) GDPR)

• Customer service & communication (Art. 6(1)(b) and (f) GDPR)

• Marketing & advertising (only with your consent, Art. 6(1)(a) GDPR)

• Security & fraud prevention (Art. 6(1)(f) GDPR)

• Legal obligations (Art. 6(1)(c) GDPR)

4. Data Sharing

We only transfer data where necessary, for example:

• To Shopify (hosting, IT, payment processing)

• To service providers for shipping, payment, and IT support

• To marketing partners (only with your consent)

• To authorities where legally required

International transfers may take place on the basis of EU Standard Contractual Clauses.

5. Your Rights

Under the GDPR, you have the following rights, among others:

• Access, rectification, erasure

• Restriction of processing & objection

• Data portability

• Withdrawal of consent at any time

To exercise your rights, please contact: info@coffeewave.de

6. Data Retention & Updates

We store your data only as long as necessary for the stated purposes or as required by law.
This Privacy Policy will be updated as necessary – with a new “last updated” date.