Privacy policy

Courtesy translation – the German version is legally binding.

1. Controller

CTA-Dichtungen, owner Muhammad Tayyab Iftikhar
Langenberger Str. 77, 42551 Velbert, Germany
Phone: +49 179 4898965, email: info@cta-dichtungen.de

2. General

We process personal data only insofar as this is necessary to operate the shop, process orders and answer enquiries, or insofar as you have given your consent. The legal bases are Art. 6(1) GDPR, in particular point (b) (contract and pre-contractual measures), point (c) (legal obligations, e.g. retention obligations), point (f) (legitimate interest in the secure and economical operation of the shop) and point (a) (consent).

3. Shop system and hosting: Shopify

Our shop runs on the Shopify platform. For customers in the EU the provider is Shopify International Limited, Victoria Buildings, 2nd floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. On our behalf, Shopify stores and processes the data that arise when you visit the shop and place orders (data processing on behalf of the controller under Art. 28 GDPR). Data may also be transferred to Shopify Inc. in Canada (adequacy decision of the EU Commission) and to service providers in the USA; the basis there is the EU-US Data Privacy Framework or the standard contractual clauses of the EU Commission. When you visit the shop, scripts are also loaded from shop.app, a Shopify service for the "Shop" features (e.g. signing in with Shop during checkout). Further information: https://www.shopify.com/legal/privacy

4. Visiting the shop

When you open the shop, technically necessary data are processed (e.g. IP address, date and time, page visited, browser and operating system) in order to deliver the pages and ensure security (Art. 6(1)(f) GDPR).

5. Cookies and consent

For the cart, the checkout and security, the shop sets technically necessary cookies (§ 25(2) TDDDG, Art. 6(1)(b) and (f) GDPR). Cookies for statistics or marketing are only set with your consent, which you give via the cookie banner and can withdraw there at any time (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).

With your consent, Shopify collects anonymised visitor statistics for us (e.g. pages visited, where visits come from, device) so that we can improve the shop. We do not use advertising or analytics services of other providers (e.g. Google or Meta).

6. Orders and customer account

For your order we process the details you provide during checkout (name, delivery and billing address, email address, phone number if applicable, items ordered, payment method). If you create a customer account, we also store these data for future orders until you delete the account (Art. 6(1)(b) GDPR).

We keep order and invoice data for as long as commercial and tax law requires (§ 257 HGB, § 147 AO): invoices and other accounting vouchers 8 years, books and annual financial statements 10 years, commercial and business letters 6 years.

7. Payment processing

Depending on the payment method chosen, we pass the data required for payment to the respective payment service provider (Art. 6(1)(b) GDPR):

PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, https://www.paypal.com/de/legalhub/privacy-full

8. Shipping

For delivery we pass your name and delivery address to the carrier and, if you agree during checkout, also your email address or phone number for shipment notifications (Art. 6(1)(b) or (a) GDPR). We ship with DHL or Deutsche Post (Deutsche Post AG / DHL Paket GmbH, Charles-de-Gaulle-Str. 20, 53113 Bonn, Germany) or DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany).

9. Contact by email or phone

If you contact us by email or phone, we process your details in order to answer your enquiry (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed and no retention obligations apply.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw your consent at any time with effect for the future (Art. 7(3) GDPR). Please contact info@cta-dichtungen.de.

11. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, https://www.ldi.nrw.de