Privacy Policy
Privacy Policy
Last updated: August 2026
The protection of your personal data is important to us. This Privacy Policy explains how Golpira collects, processes and protects personal data when you visit www.golpira.de, place an order, contact us, subscribe to our newsletter or otherwise interact with our website.
1. Controller
The controller responsible for the processing of personal data on this website is:
Gisa Golpira
Golpira
Kluckstraße 25
10785 Berlin
Germany
E-mail: info@golpira.de
Phone: +49 (0) 30 640 73 709
2. Hosting and Website Operation
Our online shop is operated using Shopify.
When you visit our website, technical information may automatically be processed in order to provide the website securely and reliably. This may include information such as your IP address, browser and device information, date and time of access, requested pages, referring website and technical log information.
Where such processing is necessary for the operation and security of the website, the legal basis is Art. 6 (1) (f) GDPR, based on our legitimate interest in providing a secure, stable and properly functioning online shop.
For customers and visitors located in the European Economic Area, the United Kingdom or Switzerland, Shopify states that personal data is initially received by Shopify International Ltd., Ireland.
Shopify may involve affiliated companies and subprocessors in providing its services and may transfer personal data internationally in accordance with its contractual data protection arrangements and applicable law.
Further information can be found in Shopify's privacy information:
3. Orders and Contract Processing
When you place an order, we process the personal data necessary to process and fulfil your purchase.
This may include your name, billing address, shipping address, email address, telephone number, order information, product information and payment-related information.
The legal basis for this processing is Art. 6 (1) (b) GDPR, as the processing is necessary for the performance of the contract.
Where we are legally required to retain information for tax, accounting or commercial-law purposes, the relevant processing is based on Art. 6 (1) (c) GDPR.
4. Customer Accounts
If you create or use a customer account, we process the information necessary to provide and manage that account.
This may include your contact details, order history and account-related information.
The legal basis is Art. 6 (1) (b) GDPR where the account is provided in connection with our contractual or pre-contractual services.
You may request deletion of your customer account at any time. Information that must be retained due to statutory obligations may continue to be stored for the applicable retention period.
5. Contacting Us
If you contact us by email, telephone, contact form or another communication channel, we process the information you provide in order to respond to your enquiry.
Where the communication concerns an existing or potential contract, the legal basis is Art. 6 (1) (b) GDPR.
For other enquiries, processing may be based on our legitimate interest in responding to communications pursuant to Art. 6 (1) (f) GDPR.
6. Shipping and Fulfilment
For the purpose of delivering your order, we provide the personal data required for fulfilment to the shipping service provider responsible for delivery.
The legal basis for this processing is Art. 6 (1) (b) GDPR.
Only information necessary for shipping, delivery and related fulfilment purposes is transmitted.
7. Payment Processing
Depending on the payment method selected during checkout, personal data required to process your payment may be transmitted to banks, payment service providers and technical payment processors.
The available payment methods may include credit card payments, PayPal, Apple Pay, Google Pay and other payment services made available through Shopify Checkout.
The processing necessary to complete your payment is based on Art. 6 (1) (b) GDPR.
Payment service providers may process certain information under their own responsibility. In such cases, the privacy information of the respective provider applies.
Where personal data is processed for fraud prevention, transaction security or the management of disputed payments, processing may also be based on legitimate interests pursuant to Art. 6 (1) (f) GDPR.
8. Newsletter and Email Marketing
If you subscribe to our newsletter, we process the personal data provided during registration in order to send you our email communications.
The legal basis for sending the newsletter is your consent pursuant to Art. 6 (1) (a) GDPR.
You may withdraw your consent and unsubscribe at any time by using the unsubscribe link contained in our emails or by contacting us directly.
After unsubscribing, your email address will be removed from the active newsletter distribution list unless continued retention is required or permitted by law.
9. Mailchimp
We use Mailchimp for email marketing and related marketing services.
Mailchimp is a service provided by Intuit. In connection with newsletter distribution and, where you have consented, related marketing analysis, Mailchimp may process information such as your email address, subscription status and interactions with our communications or website.
Where processing is required to send newsletters requested by you, processing is carried out in connection with your consent pursuant to Art. 6 (1) (a) GDPR.
Where Mailchimp's website tracking or marketing pixel is used, relevant data collection is subject to the marketing and analytics permissions configured through Shopify's customer privacy system.
You may withdraw your consent to optional marketing or analytics processing at any time through the cookie settings available on our website.
Further information about Mailchimp's privacy practices can be found here:
Intuit Global Privacy Statement
10. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Some technologies are necessary for the website and online shop to function properly, while others are used only where the relevant consent has been provided.
We use Shopify's integrated customer privacy tools to manage cookie preferences and consent choices.
Where required by applicable law, optional technologies used for personalization, analytics or marketing are activated only in accordance with the choices made through our cookie banner.
You may change your preferences at any time through the cookie settings available on our website.
Further information can be found in our Cookie Policy.
11. Facebook and Instagram by Meta
Where you have provided the relevant consent, we use technologies provided through Facebook and Instagram by Meta.
These services are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
The technologies may help us measure advertising performance, understand interactions with our website and improve the relevance of advertising shown on Facebook and Instagram.
Depending on the consent provided and the technical settings, information such as website interactions, device and browser information, page views, purchase-related events and other behavioural information may be processed.
Our Facebook and Instagram app pixel is configured in Shopify so that relevant data collection requires permission for marketing and analytics.
The legal basis for such optional processing is your consent pursuant to Art. 6 (1) (a) GDPR.
You may withdraw your consent at any time through the cookie settings available on our website.
Further information can be found in Meta's privacy information:
12. Social Media Profiles
Our website contains links to our social media profiles, including Instagram, Facebook and Pinterest.
Where these are integrated as ordinary links, merely displaying the link does not by itself establish a connection with the respective social network. A connection is established when you follow the link.
When you visit our social media profiles, the respective platform provider may process personal data independently and, in certain cases, jointly with us in relation to specific platform functions.
Please refer to the privacy information of the respective platform for further details:
13. International Data Transfers
Some service providers used in connection with our website may process personal data outside the European Union or European Economic Area.
Where personal data is transferred to a country for which the European Commission has issued an adequacy decision, the transfer may take place on the basis of that decision.
Where no adequacy decision applies, appropriate safeguards may be used, such as the Standard Contractual Clauses adopted by the European Commission together with additional safeguards where required.
Where applicable, transfers to appropriately certified organisations in the United States may also be based on the EU-U.S. Data Privacy Framework.
14. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as required by applicable statutory retention obligations.
Where processing is based solely on your consent, the relevant processing will cease when you withdraw that consent unless another legal basis permits or requires continued retention.
15. Your Rights
Under the General Data Protection Regulation, you may have the following rights in relation to your personal data:
- the right of access pursuant to Art. 15 GDPR;
- the right to rectification pursuant to Art. 16 GDPR;
- the right to erasure pursuant to Art. 17 GDPR;
- the right to restriction of processing pursuant to Art. 18 GDPR;
- the right to data portability pursuant to Art. 20 GDPR;
- the right to object to processing pursuant to Art. 21 GDPR; and
- where processing is based on consent, the right to withdraw your consent at any time pursuant to Art. 7 (3) GDPR.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
16. Right to Object
Where we process your personal data on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you may object to such processing at any time. In that case, we will no longer process your personal data for direct marketing purposes.
17. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
The supervisory authority responsible for our registered office is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Germany
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time if our services, technologies or legal requirements change.
The date of the most recent update is shown at the beginning of this policy.
19. Contact Regarding Data Protection
If you have any questions about this Privacy Policy, the processing of your personal data or wish to exercise any of your rights, please contact:
Gisa Golpira
Golpira
Kluckstraße 25
10785 Berlin
Germany
E-mail: info@golpira.de
Phone: +49 (0) 30 640 73 709