Privacy policy

Last updated: 14 November 2026

1. Controller

The controller responsible for processing personal data in this online shop is:

Eighty 9 UG (haftungsbeschränkt)
Högenstraße 78
22527 Hamburg
Germany
Managing Director: Michael Roman Kuczera
Email: m.kuczera@gmail.com
Telephone: +49 151 67000945

2. What data we process

Depending on how you use the shop, we process contact and delivery details, account information, order and transaction data, payment status, communications, return or cancellation information, device and connection data such as IP address and browser information, and usage data such as pages viewed, searches and cart activity.

3. Purposes and legal bases

• Shop operation and contract performance: to display products, operate the cart and checkout, process payments, fulfil orders, provide customer accounts, manage cancellations, returns and customer service. The legal basis is performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).
• Legal obligations: to meet tax, commercial, product safety, sanctions, customs and record-keeping duties (Art. 6(1)(c) GDPR).
• Security and fraud prevention: to protect the shop, accounts, payments and our rights and to prevent misuse. The legal basis is our legitimate interest in secure and reliable commerce (Art. 6(1)(f) GDPR).
• Consent-based processing: for non-essential cookies, personalised advertising and email marketing where consent is required (Art. 6(1)(a) GDPR). Consent can be withdrawn at any time with future effect.
• Customer communication and shop improvement: to answer enquiries and improve usability and our range. The legal basis is Art. 6(1)(b) or (f) GDPR, depending on the context.

4. Shopify

Our shop is hosted and technically operated using Shopify. Shopify processes data needed to provide the storefront, checkout, customer accounts, security, analytics and related services. Depending on the service, recipients can include Shopify International Limited and Shopify Inc. Information may be processed outside the European Economic Area. Shopify uses recognised transfer mechanisms, including adequacy decisions and standard contractual clauses where required. Further information is available in the Shopify Consumer Privacy Policy and through the Shopify Privacy Portal.

5. Payments, shipping and other recipients

Payment data is transmitted to the payment provider selected at checkout to process and secure the payment. We normally receive payment confirmation rather than complete card details. For delivery, we share the necessary recipient, address, contact, customs and shipment data with DHL and, where required, its delivery partners and customs authorities.

We may also use service providers for IT hosting, email delivery, fraud prevention, customer support, accounting and legal compliance. They receive only the data necessary for their task and are contractually bound where required. We disclose data to authorities or other parties where required by law or necessary to establish, exercise or defend legal claims.

6. Cookies and similar technologies

We use technically necessary cookies and similar technologies to operate the shop, remember the cart, maintain sessions, secure checkout and store privacy choices. Optional analytics, marketing or personalisation technologies are used only in accordance with the privacy settings and applicable consent requirements. You can change your choices using the cookie/privacy control displayed in the shop. Browser settings can also delete or block cookies, although essential shop functions may then be limited.

7. Customer accounts, search and communication

If you create or use a customer account, we process the login identifier, verification data, profile details and order history to provide account and self-service features. Searches and interactions in the store may be processed to return relevant products and improve navigation. When you contact us, we process the content and contact details needed to answer and document the enquiry.

8. Marketing

If you subscribe to marketing messages, we process your contact details and consent record to send them. You can unsubscribe at any time using the link in the message or by contacting us. Transactional messages about orders, accounts, security or legal matters are not marketing and may still be sent where necessary.

9. International transfers

Some service providers may process personal data outside Germany or the EEA. Where the destination does not benefit from an adequacy decision, transfers are based on appropriate safeguards such as the European Commission’s standard contractual clauses, together with supplementary measures where required.

10. Retention

We retain personal data only for as long as necessary for the stated purposes. Contract, invoice, payment and business correspondence data is retained for the periods required under German commercial and tax law. Data needed for legal claims can be retained until the relevant limitation periods expire. Consent and account data is deleted when no longer needed, unless another legal basis requires further retention.

11. Your rights

Subject to the statutory conditions, you have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. You may withdraw consent at any time with future effect. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our registered office is the Hamburg Commissioner for Data Protection and Freedom of Information (Hamburgischer Beauftragter für Datenschutz und Informationsfreiheit).

To exercise your rights, contact m.kuczera@gmail.com. We may need to verify your identity before fulfilling a request.

12. US privacy choices

Where applicable, US residents can use our Your Privacy Choices page to opt out of uses considered sale, sharing or targeted advertising under applicable state law. Supported Global Privacy Control signals are also respected where required.

13. Automated decisions and changes

We do not make decisions producing legal or similarly significant effects based solely on automated processing. We may update this notice when our services, providers or legal obligations change. The current version is published in the shop.