Information about the processing of personal data in the FloraPfote online shop.
GDPR · Shopify · Newsletter
1. Controller
The controller responsible for data processing on this website is:
Provider
Ma&Gu Ventures
Owner: Luan Guri
Sole proprietorship
Address
Kulmbacher Straße 27b
95460 Bad Berneck
Germany
Email
support@florapfote.de
Phone
0176 77743041
2. General Information on Data Processing
We take the protection of your personal data seriously. Personal data is any information that can be used to identify you personally, for example your name, address, email address, telephone number, order data or payment information.
We process personal data only to the extent necessary to provide our online shop, process orders, communicate with you, fulfil legal obligations or on the basis of your consent.
3. What Data We Process
When using our shop, the following data in particular may be processed:
Name, address, billing and delivery address
Email address and telephone number
Order number, ordered products, order history and contract data
Payment data and payment processing information
Shipping and tracking information
Customer account data, if you create a customer account
Communication data, if you contact us by email
Newsletter data, if you subscribe to our newsletter
Review data, if you submit a product review
Technical data such as IP address, browser type, device data, operating system and access times
4. Purposes of Processing
We process personal data for the following purposes:
Providing and technically securing the online shop
Processing orders, payments, shipping and returns
Communicating with customers
Managing customer accounts
Processing cancellations, returns and complaints
Sending newsletters via Shopify Email
Displaying and managing product reviews
Accounting, invoicing and tax documentation
Preventing misuse, IT security and error analysis
5. Legal Bases of Processing
The processing of your personal data is carried out depending on the respective process on the basis of the General Data Protection Regulation.
Contract Performance
Art. 6(1)(b) GDPR, if processing is necessary for orders, payment, delivery, customer account or returns.
Legal Obligation
Art. 6(1)(c) GDPR, for example for tax and commercial law retention obligations.
Consent
Art. 6(1)(a) GDPR, for example for newsletters or non-essential cookies, if such cookies are used.
Legitimate Interest
Art. 6(1)(f) GDPR, for example for IT security, misuse prevention, technical optimization and customer communication.
6. Shopify as Shop System
Our online shop is operated via Shopify. Shopify provides the technical platform for shop display, shopping cart, checkout, customer account, order management and other shop functions.
When using the shop, personal data may be transmitted to Shopify and processed on Shopify servers. This includes in particular technical data, order data, customer data, payment information and communication data, insofar as this is necessary for operating the shop.
7. Payment Providers
We use various payment service providers for payment processing. Depending on the payment method you select in the checkout, the data required for payment processing will be transmitted to the respective payment provider.
Shopify Payments / Stripe
Processing of payment data for credit card payments and other payment methods available via Shopify Payments or Stripe.
PayPal
Processing of payment data if you select PayPal as your payment method.
Klarna
Processing of payment and order data if you select Klarna as your payment method.
Wallets and Cards
Depending on availability, payments may be processed via Visa, Mastercard, American Express, UnionPay, Apple Pay, Google Pay and Shop Pay.
Processing by payment providers is carried out in particular for payment verification, payment processing, fraud prevention and fulfilment of legal obligations.
8. Shipping, Dropshipping and Suppliers
We use dropshipping and shipping partners, in particular via AutoDS. Ordered goods may be shipped directly to you by suppliers or shipping partners.
Depending on the product, shipping may take place from the European Union or from China.
To process your order, necessary data such as name, delivery address, ordered products, telephone number, email address and shipping information may be transmitted to suppliers, fulfilment partners and shipping service providers.
The transfer of data takes place insofar as it is necessary for the delivery of your order.
9. Customer Account
If you create a customer account, we store the data required for this so that you can manage orders, view order information and use the checkout more conveniently.
You may request the deletion of your customer account unless statutory retention obligations prevent deletion.
10. Contact
If you contact us by email, we process your information to handle your request. This includes in particular your email address, your name, your message and, where applicable, order information.
The data will be deleted once your request has been finally processed, provided that there are no statutory retention obligations.
11. Newsletter with Shopify Email
If you subscribe to our newsletter, we use your email address to send you information about offers, products and news from FloraPfote.
The newsletter is sent via Shopify Email. Information may also be processed about whether a newsletter was opened and which links were clicked. This newsletter tracking helps us improve our content.
The newsletter is sent only with your consent. You can withdraw your consent at any time with effect for the future by using the unsubscribe link in the newsletter or by contacting us by email.
12. Product Reviews with AG Product Reviews
In our shop, we use AG Product Reviews to display and manage product reviews.
If you submit a review, depending on the function, your name, review text, star rating, email address, product reference, time of the review and technical information may be processed.
13. Accounting with sevDesk
We use sevDesk for invoicing, accounting and tax documentation. Invoice data, customer data, order data and payment information may be processed for this purpose.
Processing is carried out for contract performance and to fulfil statutory retention and documentation obligations.
14. EComposer
We use EComposer to design and display shop pages. Technical information required for the display and functionality of shop pages may be processed.
15. Cookies and Similar Technologies
Our shop uses cookies and similar technologies. Some cookies are technically necessary for the shop to function, for example for shopping cart, checkout, login, security and language settings.
In addition, Shopify, EComposer and Shopify Email may use cookies or similar technologies to provide shop functions or evaluate newsletter interactions.
According to the current status, we do not use Google Analytics, Meta Pixel, TikTok Pixel or Google Ads conversion tracking.
16. Transfers to Third Countries
When using our shop and our service providers, personal data may be processed outside the European Union or the European Economic Area.
This may be relevant in particular for Shopify, payment service providers, dropshipping partners, shipping partners or suppliers. A transfer only takes place insofar as it is necessary for the respective purposes and suitable safeguards exist or a legal basis applies.
17. Storage Period
We store personal data only for as long as necessary for the respective purposes.
Contract, invoice and accounting data are stored in accordance with statutory retention periods. Communication data is deleted once the request has been completed and no legal obligations prevent deletion. Newsletter data is stored until you withdraw your consent.
18. Your Rights
Within the scope of the legal requirements, you have the following rights:
Right of access to your stored personal data
Right to rectification of incorrect data
Right to deletion of your data
Right to restriction of processing
Right to data portability
Right to object to certain processing operations
Right to withdraw consent given with effect for the future
19. Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority.
20. Contact for Data Protection Requests
If you have any questions about data protection or wish to exercise your rights, please contact us at:
Email: support@florapfote.de
21. Updates to This Privacy Policy
We may update this Privacy Policy if legal requirements, technical functions or service providers used change.
Last updated: 23/05/2026 · FloraPfote.de
