Datenschutzerklärung

Controller and Contact

The operator responsible for the processing described in this policy is the business operating katyfurniture.shop. Privacy enquiries and requests may be sent to info@katyfurniture.shop. A complete German legal notice must separately identify the actual legal operator and its physical address; the domain name alone is not a legal entity.

Personal Data We Collect

Identity and contact data, such as name, billing address, delivery address, email address and telephone number.

Order and transaction data, such as products purchased, order value, payment status, returns, refunds and customer-service history.

Payment-related data processed by payment providers. We generally receive payment confirmation and limited transaction details rather than full card credentials.

Technical and usage data, such as IP address, device and browser information, cookie identifiers, pages viewed, interactions, referral source and approximate location.

Marketing and preference data, including subscription status, communication choices and consent records.

Content submitted to us, including messages, reviews, photographs of products or packaging and information supplied in support of a claim.

Purposes and Legal Bases

We process personal data only where a lawful basis applies. Depending on the context, processing may be necessary to perform a contract or take steps requested before a contract, comply with a legal obligation, pursue a legitimate interest that is not overridden by individual rights, establish or defend legal claims, or act on valid consent.

Order fulfilment: to confirm orders, take payment, arrange dispatch, provide tracking, manage returns and deliver customer support. The usual basis is contract performance.

Legal compliance: to maintain tax, accounting, fraud-prevention, product-safety and consumer-law records. The basis is legal obligation.

Store operation and security: to maintain systems, diagnose errors, prevent abuse, authenticate activity and protect the store. The basis is legitimate interests and, where applicable, legal obligation.

Service improvement: to analyse aggregated or appropriately limited usage, improve navigation and understand product demand. The basis may be legitimate interests or consent, depending on the technology used.

Marketing: to send promotional email only where permitted, typically with consent or another lawful basis recognised by applicable law. Consent can be withdrawn at any time.

Personalisation and advertising: to use non-essential cookies or similar technologies only after the required consent has been obtained.

Shopify and Service Providers

The store is hosted using Shopify technology. Shopify and other service providers may process personal data to provide hosting, checkout, payment, security, analytics, communication, customer support, fulfilment and logistics services. Providers receive only the information reasonably needed for their function and are expected to process it under applicable contractual and legal safeguards.

Information may be disclosed to payment processors, carriers, warehouses, technology providers, professional advisers, fraud-prevention services and public authorities where required by law. We do not sell personal data in the ordinary meaning of selling it for money. Some advertising or analytics practices may be treated differently under laws outside the European Union; choices required by applicable law will be honoured.

Cookies and Similar Technologies

The website may use strictly necessary technologies required for security, cart operation, checkout, language or session functions. Analytics, preference and advertising technologies are used only in accordance with applicable consent requirements. Visitors can use the consent interface to accept, reject or adjust non-essential categories and may change browser settings, although disabling necessary technologies may prevent parts of the store from working.

International Data Transfers

Some service providers may process data outside Germany or the European Economic Area. Where required, transfers rely on an adequacy decision, approved standard contractual clauses, another lawful transfer mechanism and supplementary safeguards appropriate to the risk. Further information about relevant safeguards may be requested at info@katyfurniture.shop, subject to confidentiality and security limitations.

Retention

Personal data is retained only as long as reasonably necessary for the purposes described, including completion of orders, customer support, returns, legal claims, fraud prevention and compliance with tax, accounting and commercial-record obligations. Different categories have different retention periods. When information is no longer required, it is deleted, anonymised or securely restricted unless continued retention is legally required.

Your Data Protection Rights

Subject to the conditions and exceptions in the GDPR and applicable German law, individuals may have rights to access personal data, correct inaccurate data, erase data, restrict processing, object to processing based on legitimate interests, receive portable data, withdraw consent and lodge a complaint with a competent data protection supervisory authority. Withdrawal of consent does not affect processing already carried out lawfully before withdrawal.

Requests may be sent to info@katyfurniture.shop. We may request reasonable information to verify identity and protect data from unauthorised access. We will respond within the period required by law and will explain if an extension or lawful restriction applies. There is ordinarily no fee, but a reasonable fee or refusal may be permitted for manifestly unfounded or excessive requests.

Marketing Communications

Marketing emails may be stopped by using the unsubscribe link or contacting info@katyfurniture.shop. Service messages concerning an order, security, returns or important policy changes are not marketing and may still be sent where necessary. Unsubscribing may require us to retain a minimal suppression record so the preference can be respected.

Security and Children

We use reasonable organisational and technical measures designed to protect personal data. No online transmission or storage system is completely secure, and customers should protect account credentials and contact us if misuse is suspected. The store is not directed to children, and we do not knowingly seek personal data from children who cannot lawfully consent or contract. A parent or guardian may contact us if they believe a child has submitted data improperly.

Automated Decisions, Links and Changes

Fraud screening or security tools may use automated signals. Where a decision produces legal or similarly significant effects and applicable law grants specific rights, those rights will be respected. The site may link to independent websites whose privacy practices we do not control. We may update this policy to reflect legal, operational or service changes; the current version will be published on the website with an updated effective date where appropriate.

Contact and Complaints

Questions, requests and complaints may be emailed to info@katyfurniture.shop. Individuals also have the right to complain to the data protection supervisory authority competent for their place of residence, workplace or the alleged infringement. Contacting us first is welcomed but is not a condition of exercising that right.