Privacy Policy

Last updated: September 7, 2026

What personal data do we collect or process?

When we use the term "personal data", we are referring to information that identifies, or can reasonably be linked to you. Depending on how you interact with the Services, we may collect the following categories:

• Contact Data: Name, postal address, billing address, shipping address, phone number, and email address.
• Account Information: Username, password, security questions, configurations, and settings.
• Inquiry Information: Items you view or add to your inquiry selection, as well as your past inquiries.
• Communication with us: Information you provide when communicating with us, e.g., via our contact form or a support request.
• Device & Usage Information: Information about your device, browser, IP address, and how you interact with the Services.

Sources of Personal Data

We may collect personal data from the following sources:

• Directly from you: e.g., when you create an account, use the Services, make an inquiry, or communicate with us.
• Automatically through the Services: through the use of cookies and similar technologies.
• From our service providers: when they activate technologies on our behalf or process data on our behalf.
• From our partners and other third parties.

How do we use your personal data?

• Providing, tailoring, and improving the Services. This includes processing your inquiries, preparing individual quotes, storing your configurations and the items you are interested in, sending notifications related to your account, maintaining and managing your account, and organizing logistics. It may also include recommending products to you based on your previous inquiries.
• Marketing and Advertising. To send you marketing and promotional communications by email, including based on products you have previously inquired about or added to your inquiry selection.
• Security and Fraud Prevention. To authenticate your account, provide a secure inquiry experience, and detect possible fraudulent, illegal, or malicious activity.
• Communicating with you. To provide you with customer support, respond to your inquiries in a timely manner, and maintain our business relationship with you.
• Legal reasons. To comply with applicable law or respond to lawful requests, including from law enforcement or regulatory authorities.

How do we share personal data?

In certain circumstances, we may share your personal data with third parties for legitimate purposes, for example:

• With Shopify and other providers who perform services on our behalf (e.g., IT management, data analytics, customer support, cloud storage, logistics, and shipping).
• With business and marketing partners who provide marketing services on your behalf. Our partners will use your data in accordance with their own privacy policies. If you would like to opt out of such sharing, you may do so here.
• When you direct us to, or otherwise consent to, the sharing of certain information with third parties.
• With our affiliates or otherwise within our corporate group.
• In connection with a business transaction such as a merger, to comply with legal obligations, or to protect the Services, our rights, and the rights of our users.

Relationship with Shopify

The Services are hosted by Shopify, and Shopify collects and processes personal data about your access to and use of the Services in order to provide and improve the Services. For more information about how Shopify uses your personal data and what rights you have, please refer to the Shopify Consumer Privacy Policy. Depending on where you live, you may also be able to exercise certain rights through the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may contain links to websites or online platforms operated by third parties. We are not responsible for the privacy or security of such websites. The inclusion of a link does not mean that we endorse the content of the linked platform.

Children's Data

The Services are not intended for use by children, and we do not knowingly collect personal data from children who are not of the age of majority in their jurisdiction. If you are the parent or guardian of a child who has provided us with personal data, please contact us using the contact details below to request deletion of that data.

Retention & Security of Your Data

How long we retain your personal data depends on whether we need it to manage your account, provide you with the Services, comply with legal obligations, or resolve disputes. We generally delete inquiry and communication data no later than 3 years after the last contact, unless longer statutory retention obligations apply (e.g., German commercial and tax law requirements under §§ 147 AO, 257 HGB, of up to 10 years for business records).

Please note that no security measures are perfect or impenetrable. We recommend that you do not use insecure channels to communicate sensitive information to us.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights:

• Right to access/know the personal data we hold about you.
• Right to delete your personal data.
• Right to correct inaccurate data.
• Right to data portability.
• Right to opt out of the sale or sharing of personal data for targeted advertising. You may do so here.
• Managing communication preferences: You may opt out of marketing emails at any time via the unsubscribe link included in our emails. We may still send you non-promotional emails, e.g., about your account or inquiries you have submitted.
• Right to object and to restrict processing.
• Withdrawal of consent: Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

Complaints

If you have complaints about how we process your personal data, please contact us using the contact details below. You also have the right to lodge a complaint with the competent data protection authority. For the European Economic Area, you can find a list of the competent data protection supervisory authorities here. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, 91522 Ansbach, Germany.

International Transfers

We may transfer, store, and process your personal data outside the country in which you reside, in particular through our use of Shopify. Where we transfer personal data outside the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses, unless the transfer is to a country that has been found to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised policy on this page and update the "last updated" date accordingly.

Contact & Data Controller

Within the meaning of applicable data protection laws, Schneestern Shop is the data controller of your personal data. If you have questions about this Privacy Policy or wish to exercise your rights, you can reach us by phone at +49 831 96088610, by email at shop@schneestern.com, or by mail at Schneestern GmbH & Co. KG, Werner-von-Siemens-Straße 47, 87471 Durach, Germany.