Datenschutzerklärung
Privacy Policy
Last updated: 14 September 2026
1. Controller
The controller responsible for the processing of personal data in connection with this online store is:
BCK2EDN
Owner: Jubes Ticha
Hof von Holland 11
26725 Emden
Germany
Phone: +49 176 3265 8888
Email: hello@bck2edn.com
BCK2EDN is operated as a sole proprietorship.
2. General Information
We take the protection of your personal data seriously.
When you visit our online store, create a customer account, place an order, contact us, subscribe to marketing communications or otherwise interact with our services, personal data may be processed.
We process personal data in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and applicable national data protection laws.
This Privacy Policy explains what personal data we process, why we process it, the legal bases for processing, how long data is retained and what rights you have.
3. Personal Data We Process
Depending on how you use our online store, we may process the following categories of personal data:
- name and contact details;
- billing and delivery address;
- email address and telephone number;
- order and transaction information;
- payment-related information;
- customer account information;
- information provided when contacting us;
- information relating to returns, cancellations and refunds;
- technical information such as IP address, browser type, device information and information about how you interact with our website;
- marketing preferences and subscription information;
- information collected through cookies and similar technologies, where applicable.
We only process personal data to the extent necessary for the relevant purpose.
4. Shopify
Our online store is operated using Shopify, a commerce platform provided by Shopify International Limited and other Shopify group companies as applicable.
Shopify processes personal data on our behalf where necessary to provide the online store, checkout, hosting, customer account and related services.
Shopify may also process certain data for its own purposes as described in Shopify’s own privacy documentation.
For further information, please refer to Shopify’s privacy policy and data protection documentation.
5. Visiting Our Website
When you visit our website, technical information may automatically be processed to enable the website to function securely and correctly.
This may include:
- IP address;
- date and time of access;
- browser and device information;
- operating system;
- referring website;
- pages visited and interactions with the website.
This processing may be necessary for the operation, security and stability of our online store and is based on our legitimate interests under Article 6(1)(f) GDPR and, where applicable, on other legal bases.
6. Cookies and Similar Technologies
Our online store uses cookies and similar technologies.
Some cookies are technically necessary for the operation of the website, the shopping cart, checkout, customer accounts, security and other essential functions.
Other cookies or technologies may be used for analytics, marketing, personalization or other non-essential purposes.
Where required by applicable law, we will ask for your consent before using non-essential cookies or similar technologies.
You can manage your cookie preferences through the cookie settings provided on our website.
Shopify provides tools for managing cookie consent and customer privacy settings. We review these settings and configure them according to the regions in which we sell.
7. Orders and Customer Accounts
When you place an order, we process the personal data necessary to process and fulfil your purchase.
This may include:
- your name;
- billing and delivery address;
- email address;
- telephone number;
- ordered products;
- order value;
- payment and transaction information;
- delivery and tracking information.
If you create or use a customer account, we also process the information required to provide and manage that account.
The processing is necessary for the performance of the contract with you under Article 6(1)(b) GDPR and, where applicable, for compliance with legal obligations under Article 6(1)(c) GDPR.
8. Payments
We offer payment methods including Shopify Payments and PayPal.
Depending on the payment method selected, relevant payment and transaction information is transmitted to the respective payment provider to process and authenticate the payment.
Payment providers may process personal data as independent controllers in accordance with their own privacy policies and legal obligations.
We do not receive or store complete payment card details when payment is processed through the respective payment provider.
9. Shipping and Delivery
To fulfil orders, we may provide the shipping service provider with the information necessary for delivery.
This may include:
- name;
- delivery address;
- email address and/or telephone number where necessary for delivery or shipment notifications;
- order and shipment information.
We currently use DHL and, where necessary, other suitable shipping service providers.
The processing is necessary to fulfil the contract with you under Article 6(1)(b) GDPR and, where applicable, to comply with legal obligations.
10. Returns, Cancellations and Refunds
If you request a return, cancellation or refund, we process the information necessary to handle your request and fulfil our legal and contractual obligations.
This may include:
- order information;
- contact details;
- return information;
- refund information;
- communication relating to the return or cancellation.
Where necessary, information may be shared with payment providers or shipping providers in order to process the return or refund.
11. Contacting Us
If you contact us by email, telephone or another available communication channel, we process the information you provide to us in order to respond to your enquiry.
This may include your name, contact details and the content of your message.
The legal basis is generally Article 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures, or Article 6(1)(f) GDPR where we have a legitimate interest in responding to general enquiries.
12. Marketing and Email Communications
If you voluntarily provide your email address for marketing communications, we may use it to send you information about BCK2EDN, including product launches, collections, promotions and other marketing communications.
Where required by law, marketing emails will only be sent after obtaining your consent.
You can withdraw your consent at any time by using the unsubscribe option contained in our marketing emails or by contacting us directly.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
We will not use your email address for marketing purposes where you have opted out of receiving such communications, subject to any legally permitted exceptions.
13. Legal Obligations and Record Keeping
We may process and retain personal data where this is necessary to comply with legal obligations, including tax, accounting, commercial and statutory retention requirements.
This may include information relating to:
- orders;
- invoices;
- payments;
- refunds;
- business correspondence.
The legal basis is Article 6(1)(c) GDPR.
14. Fraud Prevention and Security
We may process personal data to protect our online store, customers and business against fraud, misuse, unauthorised access and other security risks.
Where necessary, relevant information may be processed by Shopify, payment providers or other service providers involved in securing the relevant service.
The legal basis may be Article 6(1)(f) GDPR, based on our legitimate interest in protecting our business, customers and systems.
15. Service Providers and Recipients
We may use service providers and processors where necessary to operate our business and online store.
Depending on the relevant service, recipients may include:
- Shopify and Shopify group companies;
- payment providers such as Shopify Payments and PayPal;
- shipping and logistics providers such as DHL;
- IT, hosting and technical service providers;
- accounting, tax and legal service providers;
- authorities or other recipients where we are legally required to disclose information.
Where required by law, appropriate data processing agreements or other safeguards are used.
16. International Data Transfers
Some service providers used in connection with our online store may process personal data outside the European Economic Area.
Where personal data is transferred to a country outside the EEA, we take appropriate measures required under applicable data protection law, such as an adequacy decision or appropriate safeguards such as Standard Contractual Clauses, where applicable.
17. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.
Some information must be retained for longer periods because of statutory accounting, tax or commercial retention obligations.
Once the relevant retention period has expired and the data is no longer required for another lawful purpose, the information will be deleted or anonymised.
18. Your Rights
Subject to the applicable legal requirements, you have the following rights under the GDPR:
- right of access to your personal data;
- right to rectification of inaccurate or incomplete data;
- right to erasure;
- right to restriction of processing;
- right to data portability;
- right to object to processing;
- right to withdraw consent where processing is based on consent.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
For requests concerning your personal data, please contact us using the contact details provided above.
19. Right to Object
Where we process personal data on the basis of Article 6(1)(e) or Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you may object to the processing at any time.
20. Data Security
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
However, no method of transmission or electronic storage can be guaranteed to be completely secure.
21. Children’s Privacy
Our online store is not intentionally directed at children.
We do not knowingly collect personal data from children where this is prohibited by applicable law.
22. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technologies, legal requirements or data processing practices.
The current version will always be made available through our online store.
Last updated: 14 September 2026
23. Contact
If you have questions about this Privacy Policy or the processing of your personal data, please contact:
BCK2EDN
Jubes Ticha
Hof von Holland 11
26725 Emden
Germany
Email: hello@bck2edn.com
Phone: +49 176 3265 8888