Privacy Policy
1. Data Protection at a Glance
General Information
The following information provides an overview of what happens to your personal data when you visit our website or our Etsy shop. Personal data is any data that can be used to identify you personally.
Data Collection
Data processing is carried out by the respective platform operator (Shopify or Etsy) and by us as the responsible merchant.
2. Controller
The controller for data processing in the sense of the General Data Protection Regulation (GDPR) is:
Marc Reinhardt
Kölner Str. 97
53894 Mechernich
Germany
Phone: +49 3641 146
Email: info@timber-soul.de
(This information corresponds to the impressum.)
3. Hosting and Shop Systems
a) Shopify
Our online shop is operated via the e-commerce platform Shopify.
The provider is Shopify International Ltd., Ireland.
Shopify processes personal data insofar as this is necessary for the provision of the online shop, order processing, and system security.
Legal basis:
Art. 6 (1) lit. b GDPR (performance of a contract)
Art. 6 (1) lit. f GDPR (legitimate interest in secure operation)
b) Etsy
Additionally, we operate an Etsy shop.
For orders placed via Etsy, Etsy processes personal data on its own responsibility.
We receive the data necessary for order processing (e.g., name, address, order details) from Etsy.
Legal basis: Art. 6 (1) lit. b GDPR
Etsy's data protection policy applies in addition.
4. Server Log Files
When you visit our Shopify website, the hosting provider automatically collects information such as:
- Browser type and browser version
- Operating system
- Referrer URL
- IP address
- Time of server request
This data is not merged with other data sources.
Legal basis: Art. 6 (1) lit. f GDPR.
5. Cookies & Consent Management
Our Shopify website uses cookies.
- Technically necessary cookies are set without consent.
- Analysis and marketing cookies (e.g., Google Analytics) are only set after explicit consent.
Legal basis:
Section 25 (1) TTDSG
Art. 6 (1) lit. a GDPR
Consent can be revoked at any time via the cookie banner.
(Etsy uses its own cookies in accordance with Etsy's data protection policy.)
6. Contact Form with File Upload (Shopify)
If you contact us via the contact form, we process:
- Name
- Email address
- Message
- Uploaded files (e.g., logos, designs, texts for laser engravings)
The data is used exclusively for processing your request.
Legal basis: Art. 6 (1) lit. b GDPR.
Files are deleted after processing is complete, unless there are legal retention obligations.
7. Orders & Contract Fulfillment
a) Shopify Orders
For orders placed through our Shopify shop, we process, among other things:
- Name
- Billing and shipping address
- Email address
- Order details
- Engraving texts or uploaded files
Legal basis:
Art. 6 (1) lit. b GDPR
Art. 6 (1) lit. c GDPR
b) Etsy Orders
For orders placed via Etsy, we receive the data necessary for order processing.
The main processing is carried out by Etsy as an independent controller.
8. Payment Processing
Payments are processed via external payment service providers (e.g., PayPal, Klarna, credit card – depending on your selection).
Payment data is processed directly by the respective payment provider.
The data protection policy of the respective provider applies.
9. Google Analytics (Shopify only)
Our Shopify website uses Google Analytics (Google Ireland Limited).
Google Analytics uses cookies to analyze website usage.
The IP address is anonymized.
Legal basis: Art. 6 (1) lit. a GDPR (consent).
Consent can be revoked at any time via the cookie banner.
(Etsy uses its own analysis methods over which we have no influence.)
10. Social Media
We maintain an online presence on:
- TikTok
By clicking on the respective links, you will be redirected to the providers' platforms.
No automatic data transfer occurs unless you actively click on the links.
11. Order-Related Data (Laser Engraving)
In the context of individual laser engraving orders, we process submitted content (texts, images, logos, files) exclusively for the execution of the respective order.
The data will be deleted after completion, unless there are legal retention obligations.
12. Your Rights
You have the right to information, rectification, erasure, restriction of processing, data portability, and objection in accordance with the GDPR.
You also have the right to lodge a complaint with the competent data protection supervisory authority.
13. SSL / TLS Encryption
Our Shopify website uses an encrypted connection to protect your data.
14. Currency
Status of this privacy policy: [Month/Year]
We reserve the right to adapt this privacy policy in the event of legal or technical changes.
