What personal data do we collect or process?

When we use the term "personal data," we refer to information that identifies you or another person or can be directly associated with you. Personal data does not include information that has been collected anonymously or anonymized so that it can no longer identify you. Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal data, including inferences drawn from such data:

• Contact details including name, postal address, billing address, shipping address, phone number, and email address.
• Financial data including credit card, debit card, and financial account numbers, payment card information, transaction details, payment method, payment confirmation, and other payment details.
• Account information including username, password, security questions, preferences, and settings.
• Transaction information including items you view, add to cart, save to wishlist, purchase, return, exchange, or cancel, as well as your past transactions.
• Communications with us including information you provide when contacting us, for example through customer support requests.
• Device information including information about your device, browser, network connection, IP address, and other unique identifiers.
• Usage information including information about how and when you interact with or browse the Services.

Sources of personal data

• Directly from you, for example when you create an account, use the Services, communicate with us, or otherwise provide your personal data.
• Automatically through the Services, including via your device, your use of our website, and through cookies and similar technologies.
• From our service providers, for example when they collect or process your personal data on our behalf.
• From our partners and other third parties.

How do we use your personal data?

• To provide, customize, and improve the Services, including processing payments, fulfilling orders, managing accounts, arranging shipping, handling returns and exchanges, enabling reviews, and personalizing your shopping experience.
• For marketing and advertising purposes, including sending promotional messages via email, SMS, or post, and displaying advertisements based on your activity.
• For security and fraud prevention, including verifying accounts and detecting or preventing fraudulent or illegal activity.
• To communicate with you, including providing customer support and responding to inquiries.
• For legal purposes, including complying with applicable laws and enforcing our terms and policies.

How do we share personal data?

• With Shopify and service providers who perform services on our behalf (e.g., IT management, payment processing, analytics, customer support, fulfillment, and shipping).
• With business and marketing partners who provide advertising and marketing services.
• With third parties when you request or consent to such sharing.
• Within our corporate group or with affiliates.
• In connection with legal obligations, transactions such as mergers, or to protect our rights and users.

Relationship with Shopify

The Services are hosted by Shopify, which processes personal data to provide and improve the Services. Data you submit may be transferred to Shopify and third parties in other countries. Shopify may also use data collected across merchants to provide enhanced features. Shopify is responsible for such processing. For more information, see Shopify's Privacy Policy: https://privacy.shopify.com/en.

Third-party websites and links

The Services may include links to third-party websites. We are not responsible for their privacy practices or content. Please review their policies before providing personal data.

Children's data

The Services are not intended for children, and we do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us to request deletion.

Data security and retention

No system is completely secure. We recommend avoiding insecure channels when transmitting sensitive data. We retain personal data only as long as necessary for operational, legal, or contractual purposes.

Your rights

Depending on your location, you may have rights such as access, deletion, correction, data portability, restriction, objection, and withdrawal of consent. You may also unsubscribe from marketing communications at any time.

If you are located in the EEA or UK, you may have additional rights under applicable law, including the right to restrict or object to processing.

You can exercise your rights by contacting us at the details below.

Complaints

If you have concerns about how we handle your data, you may contact us or lodge a complaint with your local data protection authority.

International transfers

Your personal data may be transferred and processed outside your country. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last updated" date.

Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, you can contact us by email at service@fmphgroup.com or by mail at Oberndoerfer Digital Services e. K., Zum Tennenbach 15A, 91080 Uttenreuth, Germany.