Privacy policy

This English version is provided for convenience; the German version is legally binding.

1. Controller

The controller responsible for processing personal data in this online shop is:
Nordpfote, owner: Leon Rinke
Lindenweg 11
49453 Wetschen
Germany
Email: leon.r.1999@gmail.com

2. Overview

We only process personal data to the extent necessary to operate the shop, process your orders and answer your enquiries, where we are legally obliged to do so, or where you have given your consent. The legal bases are in particular Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interest).

3. Shop system and hosting

Our shop runs on the Shopify platform. The provider for customers in the EU is Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify stores the shop data and processes it on our behalf (Art. 28 GDPR). Data may also be transferred to Shopify Inc. in Canada and to service providers in the USA. There is an EU Commission adequacy decision for Canada; transfers to the USA are based on the EU-U.S. Data Privacy Framework or EU standard contractual clauses.

When you visit the shop, technically necessary data such as IP address, date and time, page visited, browser and operating system are processed in order to deliver the page and ensure its security (Art. 6(1)(f) GDPR).

4. Orders

To process your order, we process your name, shipping and billing address, email address, phone number where applicable, order details and payment information (Art. 6(1)(b) GDPR).

Our goods are shipped directly by suppliers. For this purpose, we pass on your name, shipping address, phone number where applicable and the items ordered via the dropshipping platform AutoDS to the respective supplier and to the carrier. Some of our suppliers are located outside the EU, in particular in China. There is no EU Commission adequacy decision for these countries; the transfer is necessary for the performance of the contract with you (Art. 49(1)(b) GDPR).

5. Payment

Depending on the payment method you choose, we pass on the data required for payment to the respective payment service provider, for example Shopify Payments or PayPal (Art. 6(1)(b) GDPR). The privacy notices of the respective provider also apply to the processing there.

6. Customer account

If you use a customer account, we store your login email, addresses and order history until you have the account deleted (Art. 6(1)(b) GDPR).

7. Contact and online withdrawal

If you write to us by email or via a form, we process your details in order to handle your enquiry (Art. 6(1)(b) or (f) GDPR). If you use the “Withdraw from contract” function, we process your name, order number and email address in order to process the withdrawal and confirm its receipt to you (Art. 6(1)(c) GDPR).

8. Newsletter

You only receive our newsletter with your consent (Art. 6(1)(a) GDPR). After signing up, we send you an email with a confirmation link; you are only added after confirming. You can unsubscribe at any time via the link in every email. The newsletter is sent via Shopify.

9. Cookies and consent

We use cookies and similar technologies that are necessary to operate the shop, for example for the cart, checkout, language settings and security (§ 25(2) TDDDG, Art. 6(1)(b) and (f) GDPR). We only set cookies for statistics or marketing if you have consented via our cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw your consent at any time via the cookie settings.

10. Storage period

We delete personal data as soon as it is no longer required for the respective purpose. We retain order and invoice data for up to ten years due to commercial and tax law obligations.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw any consent given with effect for the future (Art. 7(3)). Where we process data on the basis of legitimate interests, you may object to the processing (Art. 21 GDPR). Simply contact us at the email address above.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the state or country of your residence or of our registered office.

Last updated: 26.09.2026