Datenschutzerklärung

This Privacy Policy explains how jannjunea.shop collects, uses, stores, shares, and protects personal data when you visit our website, purchase a product, create or use a customer account, contact us, subscribe to marketing communications, or otherwise interact with our online store and services.

We process personal data in accordance with the General Data Protection Regulation, applicable German data protection laws, and other applicable privacy requirements.

1. Data Controller

The controller responsible for the processing of personal data through this website is:

jannjunea.shop
Email: info@jannjunea.shop

For questions about this Privacy Policy, the processing of your personal data, or the exercise of your data protection rights, contact us using the email address above.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed in connection with:

  • The jannjunea.shop online store;

  • Product browsing and website use;

  • The shopping cart and checkout;

  • Orders, payments, shipping, and delivery;

  • Customer accounts;

  • Returns, refunds, complaints, and customer service;

  • Marketing communications;

  • Cookies and similar technologies;

  • Fraud prevention and website security;

  • Product reviews, surveys, and other customer interactions; and

  • Communications sent to or received from jannjunea.shop.

Third-party websites, applications, payment services, social media platforms, and other independent services may process personal data under their own privacy policies.

3. Personal Data We Collect

The personal data we collect depends on how you interact with jannjunea.shop.

Identity and Contact Information

We may collect:

  • First and last name;

  • Billing address;

  • Shipping address;

  • Email address;

  • Telephone number;

  • Customer account identifiers; and

  • Other contact information supplied by you.

Order and Transaction Information

We may collect:

  • Products ordered;

  • Product variations selected;

  • Order number;

  • Order date;

  • Order value;

  • Discount information;

  • Payment status;

  • Shipping method;

  • Delivery and tracking information;

  • Cancellation information;

  • Return and refund information;

  • Customer service records; and

  • Information relating to payment disputes or chargebacks.

Payment Information

Payments are processed through Shopify and the payment provider selected during checkout.

Depending on the payment method, the relevant provider may process:

  • Payment-card information;

  • Bank account information;

  • PayPal or digital-wallet information;

  • Billing information;

  • Payment authentication information;

  • Transaction identifiers;

  • Payment status; and

  • Fraud and risk-assessment information.

jannjunea.shop generally receives confirmation of payment, payment status, transaction identifiers, and limited payment details rather than complete payment-card or bank-account credentials.

Customer Account Information

If customer accounts are available and you create or use an account, we may process:

  • Account login information;

  • Saved contact and delivery information;

  • Order history;

  • Account preferences;

  • Account activity; and

  • Customer account communications.

You are responsible for keeping your login credentials confidential and notifying us if you suspect unauthorised account access.

Customer Service and Communication Information

When you contact us, we may process:

  • Your name and contact information;

  • The content of your message;

  • Order and transaction information;

  • Photographs, videos, screenshots, or documents supplied by you;

  • Complaint details;

  • Return and refund information; and

  • Records of our communications with you.

Please do not send passwords, complete payment-card numbers, card security codes, banking passwords, or unnecessary sensitive information by email.

Technical and Usage Information

When you visit the website, we and authorised service providers may automatically collect:

  • Internet Protocol address;

  • Browser type and version;

  • Device type;

  • Operating system;

  • Device identifiers;

  • Language and regional settings;

  • Time zone;

  • Referring website or link;

  • Pages and products viewed;

  • Links and buttons selected;

  • Shopping-cart activity;

  • Date and time of access;

  • Session information;

  • Website interaction information;

  • Error and diagnostic information;

  • Security logs; and

  • Approximate location derived from technical information.

Marketing and Preference Information

Where applicable, we may process:

  • Newsletter subscription status;

  • Marketing consent records;

  • Communication preferences;

  • Products and categories viewed;

  • Shopping-cart activity;

  • Responses to advertisements;

  • Advertising identifiers;

  • Campaign attribution information; and

  • Information used to measure marketing effectiveness.

Information From Third Parties

We may receive personal data from third parties involved in providing our website and services, including:

  • Shopify;

  • Payment providers;

  • Shipping and logistics providers;

  • Fulfilment providers;

  • Fraud-prevention providers;

  • Customer-support providers;

  • Analytics providers;

  • Advertising platforms;

  • Social media platforms; and

  • Technology and security providers.

We process such information only where a valid legal basis applies.

4. How We Use Personal Data

We may process personal data for the purposes described below.

Providing and Operating the Website

We may use technical and usage information to:

  • Display and operate the website;

  • Provide shopping-cart and checkout functionality;

  • Maintain customer sessions;

  • Remember essential preferences;

  • Maintain website stability;

  • Diagnose technical problems;

  • Improve website performance; and

  • Protect the website against misuse.

Processing and Fulfilling Orders

We may use identity, contact, order, and payment-related information to:

  • Receive and review orders;

  • Process payments;

  • Confirm purchases;

  • Prepare and dispatch products;

  • Arrange delivery;

  • Provide tracking information;

  • Communicate about order status;

  • Process cancellations;

  • Manage returns and refunds; and

  • Perform the purchase contract.

Managing Customer Accounts

We may process account information to:

  • Create and maintain customer accounts;

  • Authenticate account access;

  • Display order history;

  • Save customer preferences;

  • Provide account-related functions; and

  • Prevent unauthorised access.

Providing Customer Service

We may process communication and order information to:

  • Answer enquiries;

  • Provide product information;

  • Investigate delivery problems;

  • Handle complaints;

  • Process returns and refunds;

  • Resolve payment issues;

  • Address damaged or defective products; and

  • Document customer service activities.

Security and Fraud Prevention

We may process relevant personal data to:

  • Detect suspicious or fraudulent transactions;

  • Prevent unauthorised account access;

  • Protect customers and payment systems;

  • Investigate abuse;

  • Verify orders;

  • Maintain security logs;

  • Enforce our contractual rights; and

  • Protect our website and business.

Legal and Regulatory Compliance

We may process personal data to:

  • Comply with tax and accounting requirements;

  • Maintain legally required business records;

  • Comply with consumer protection rules;

  • Respond to lawful requests from authorities;

  • Address product safety matters;

  • Prevent unlawful activity;

  • Establish, exercise, or defend legal claims; and

  • Fulfil other legal obligations.

Website and Business Improvement

Where legally permitted, we may use aggregated, statistical, technical, or customer interaction information to:

  • Understand website use;

  • Improve website navigation;

  • Evaluate product demand;

  • Improve customer service;

  • Analyse general business performance; and

  • Develop our products and services.

Where consent is legally required for the technologies used for these purposes, processing will begin only after consent has been given.

Marketing

Where permitted by law, we may process contact and preference information to:

  • Send newsletters;

  • Inform you about products and promotions;

  • Provide personalised marketing;

  • Measure campaign effectiveness;

  • Display relevant advertising; and

  • Understand customer interests.

Where consent is required, marketing communications and non-essential tracking will be used only after valid consent has been obtained.

You may unsubscribe from marketing emails at any time by selecting the unsubscribe link in the relevant email or contacting info@jannjunea.shop.

5. Legal Bases for Processing

We process personal data only where a valid legal basis applies.

Performance of a Contract

We process personal data where necessary to:

  • Take steps requested before entering into a contract;

  • Process and fulfil an order;

  • Arrange payment and delivery;

  • Manage returns and refunds;

  • Provide requested customer support; and

  • Create or manage a customer account.

This processing is based on Article 6(1)(b) GDPR.

If required information is not provided, we may be unable to accept or fulfil an order.

Legal Obligations

We process personal data where necessary to comply with legal obligations, including:

  • Tax obligations;

  • Accounting and commercial recordkeeping;

  • Consumer protection requirements;

  • Product safety obligations;

  • Court orders; and

  • Lawful requests from competent authorities.

This processing is based on Article 6(1)(c) GDPR.

Legitimate Interests

We may process personal data where necessary for our legitimate interests or those of a third party, provided that your interests, rights, and freedoms do not override those interests.

Our legitimate interests may include:

  • Operating and improving the online store;

  • Providing effective customer service;

  • Securing the website and customer accounts;

  • Preventing fraud and payment abuse;

  • Maintaining business and transaction records;

  • Understanding general business performance;

  • Protecting our property, systems, customers, and business;

  • Managing legal disputes; and

  • Establishing, exercising, or defending legal claims.

This processing is based on Article 6(1)(f) GDPR.

Consent

Where you voluntarily consent to a specific processing activity, processing is based on Article 6(1)(a) GDPR.

Consent may apply to:

  • Marketing emails;

  • Advertising cookies;

  • Analytics cookies;

  • Personalisation technologies;

  • Advertising pixels; and

  • Other optional services.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Shopify

Our online store is hosted and supported by Shopify. Shopify provides the ecommerce infrastructure that enables us to display products, process orders, manage the checkout, maintain customer information, and operate the online store.

For many processing activities connected with the operation of our store, jannjunea.shop acts as the controller and Shopify processes customer personal data on our behalf.

Shopify may process information including:

  • Customer names and contact information;

  • Order and transaction information;

  • Delivery information;

  • Device and browser information;

  • Internet Protocol addresses;

  • Website interaction information;

  • Customer account information;

  • Fraud-prevention information; and

  • Payment-related information.

For certain Shopify products and customer-facing services, including services through which a customer has a direct relationship with Shopify, Shopify may process personal data as an independent controller under its own privacy terms.

This may include certain processing connected with:

  • Shop;

  • Shop Pay;

  • Shopify accounts;

  • Payment and security services;

  • Shopify Network Intelligence;

  • Enhanced Shopify services; and

  • Fraud-prevention functions.

Shopify may use affiliated companies and authorised subprocessors to provide hosting, payment, security, communication, analytics, and technical services.

7. Payment Providers

The payment methods available for an order are displayed during checkout.

The selected payment provider may process personal data to:

  • Authorise and complete payment;

  • Authenticate the customer;

  • Prevent fraud;

  • Process refunds;

  • Handle payment disputes;

  • Meet financial compliance requirements; and

  • Maintain transaction records.

Payment providers may act as independent controllers for their processing activities. Their own privacy terms may therefore apply.

We disclose only the information reasonably necessary to process the selected payment method.

8. Shipping and Fulfilment Providers

We disclose information necessary to prepare, transport, track, and deliver an order to relevant shipping, warehousing, fulfilment, customs, and logistics providers.

This information may include:

  • Recipient name;

  • Delivery address;

  • Email address;

  • Telephone number;

  • Order contents;

  • Parcel information;

  • Tracking number; and

  • Customs information where required.

Shipping providers may use this information to deliver, redirect, track, hold, or return parcels and to provide delivery notifications.

Where an order crosses national borders, relevant information may be disclosed to customs authorities or other competent authorities as legally required.

9. Other Recipients of Personal Data

Where necessary and legally permitted, personal data may be disclosed to:

  • Shopify and Shopify affiliates;

  • Payment service providers;

  • Shipping and logistics providers;

  • Fulfilment and warehousing providers;

  • Hosting and cloud-service providers;

  • Email and communication providers;

  • Customer-support providers;

  • Fraud-prevention and security providers;

  • Analytics providers;

  • Advertising and marketing providers;

  • Professional advisers, including legal, accounting, and tax advisers;

  • Insurers;

  • Courts, regulators, law-enforcement authorities, and government bodies; and

  • Parties involved in a business sale, restructuring, merger, financing, or acquisition.

Service providers processing data on our behalf may use personal data only for authorised purposes and subject to appropriate contractual, confidentiality, and security requirements.

10. Cookies and Similar Technologies

jannjunea.shop and authorised service providers may use:

  • Cookies;

  • Pixels;

  • Tags;

  • Local storage;

  • Device identifiers;

  • Software development kits; and

  • Similar technologies.

These technologies may be used to:

  • Operate the website;

  • Maintain the shopping cart;

  • Enable checkout;

  • Authenticate users;

  • Remember privacy preferences;

  • Protect the website against fraud;

  • Analyse website performance;

  • Understand visitor interactions;

  • Personalise content;

  • Measure marketing effectiveness; and

  • Display relevant advertising.

Strictly Necessary Technologies

Certain technologies are necessary to provide a digital service expressly requested by the user.

These technologies may be required for:

  • Shopping-cart functionality;

  • Checkout and payment;

  • Account authentication;

  • Website security;

  • Load balancing;

  • Fraud prevention; and

  • Storing privacy choices.

Where permitted by law, strictly necessary technologies may be used without consent.

Blocking these technologies may prevent essential website functions from working correctly.

Optional Technologies

Analytics, advertising, personalisation, and other non-essential technologies are used only after the legally required consent has been obtained.

You may accept, reject, or manage optional technologies using the cookie banner or privacy settings provided on the website.

You may change or withdraw your consent at any time through the available privacy settings. Withdrawal does not affect processing lawfully carried out before consent was withdrawn.

Browser settings may also allow you to delete or block cookies, although browser controls may not manage every type of tracking technology.

11. Analytics

Where consent has been obtained, we may use analytics services to understand how visitors interact with the website.

Analytics providers may process:

  • Internet Protocol addresses;

  • Device and browser information;

  • Cookie identifiers;

  • Pages and products viewed;

  • Links selected;

  • Session duration;

  • Referring websites;

  • Approximate location;

  • Shopping-cart activity; and

  • Purchase events.

Analytics information may be used to improve website functionality, understand general customer behaviour, diagnose problems, and measure website performance.

Optional analytics technologies will not be activated before consent where prior consent is legally required.

12. Advertising and Social Media Technologies

Where consent has been obtained, advertising and social media providers may use pixels, cookies, or similar technologies to:

  • Measure advertisement performance;

  • Attribute purchases to advertising campaigns;

  • Create or measure audiences;

  • Limit repeated advertisements;

  • Personalise advertisements; and

  • Understand interactions with advertisements.

Depending on the technology and service used, these providers may process information under their own privacy policies and may act as independent or joint controllers.

You may reject or withdraw consent for optional advertising technologies through the website’s privacy settings.

13. Marketing Communications

We may send marketing communications where:

  • You have provided consent;

  • The communication is otherwise permitted by applicable law; or

  • Another valid legal basis applies.

Marketing communications may include information about:

  • Products;

  • Promotions;

  • Discounts;

  • Store news; and

  • Other commercial offers.

You may unsubscribe at any time by:

After unsubscribing, we may retain limited information necessary to record and respect your marketing objection.

Unsubscribing from marketing does not prevent us from sending non-promotional communications concerning an order, account, payment, refund, delivery, security matter, or legal notice.

14. International Data Transfers

Shopify, payment providers, technology providers, advertising providers, logistics providers, or other service providers may process personal data outside Germany or the European Economic Area.

Where personal data is transferred to a country outside the European Economic Area, we or the relevant provider use an appropriate legal transfer mechanism where required, such as:

  • An adequacy decision adopted by the European Commission;

  • Standard Contractual Clauses approved by the European Commission;

  • Additional contractual, technical, or organisational safeguards;

  • Another legally recognised transfer mechanism; or

  • Explicit consent in limited circumstances where legally valid.

Where required, the risks and legal protections associated with a transfer are assessed before personal data is transferred.

15. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

The applicable retention period may depend on:

  • The duration of the customer relationship;

  • Whether a customer account remains active;

  • The time required to fulfil an order;

  • Return and refund periods;

  • Payment-dispute and chargeback periods;

  • Fraud-prevention requirements;

  • Security requirements;

  • Applicable limitation periods;

  • Tax, accounting, and commercial recordkeeping obligations;

  • Pending complaints or disputes; and

  • The establishment, exercise, or defence of legal claims.

Order, invoice, transaction, and accounting records may be retained for the periods required by applicable tax and commercial laws.

Customer service communications may be retained for as long as reasonably necessary to resolve the relevant matter, document the outcome, and protect legal rights.

Consent records and marketing objections may be retained where necessary to demonstrate compliance and respect customer preferences.

When personal data is no longer required, it will be deleted, anonymised, or restricted from further use unless continued retention is required by law.

16. Data Security

We and our service providers use appropriate technical and organisational measures intended to protect personal data against:

  • Unauthorised access;

  • Unlawful processing;

  • Accidental loss;

  • Destruction;

  • Alteration;

  • Unauthorised disclosure; and

  • Misuse.

These measures may include:

  • Encryption;

  • Secure communication protocols;

  • Access restrictions;

  • Authentication systems;

  • Security monitoring;

  • Backups;

  • Logging;

  • Staff confidentiality requirements; and

  • Contractual security obligations.

No website, communication method, or storage system can be guaranteed to be completely secure.

You should use a strong and unique password, protect your account credentials, and contact us promptly if you suspect unauthorised activity.

17. Your Data Protection Rights

Subject to the conditions and limitations established by applicable law, you may exercise the following rights.

Right of Access

You may request confirmation of whether we process your personal data and obtain access to that data and relevant processing information.

Right to Rectification

You may request correction of inaccurate personal data and completion of incomplete personal data.

Right to Erasure

You may request deletion of personal data where the applicable legal requirements are satisfied.

Deletion may not be available where continued processing is necessary to comply with a legal obligation, establish or defend legal claims, or fulfil another legally recognised purpose.

Right to Restriction of Processing

You may request restriction of processing in circumstances established by law, including while the accuracy or lawfulness of processing is being reviewed.

Right to Data Portability

Where processing is based on consent or a contract and is carried out by automated means, you may request eligible personal data in a structured, commonly used, and machine-readable format.

Where technically feasible and legally required, you may request that the data be transmitted directly to another controller.

Right to Object

You may object to processing based on legitimate interests for reasons arising from your particular situation.

We will stop the relevant processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or the processing is necessary for legal claims.

You may object at any time to the processing of personal data for direct marketing. After a valid objection, your personal data will no longer be processed for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Right Concerning Automated Decisions

You have the right not to be subject to a decision based solely on automated processing, including profiling, where the decision produces legal effects or similarly significantly affects you, unless the processing is legally permitted and appropriate safeguards are provided.

Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority.

You may generally contact the supervisory authority responsible for your habitual residence, your place of work, or the location of the alleged infringement.

18. Exercising Your Rights

To exercise a data protection right, contact:

Email: info@jannjunea.shop

Please describe your request clearly and provide sufficient information to identify the relevant account, order, or communication.

To protect your personal data, we may need to verify your identity before completing the request. We will request only the information reasonably necessary for verification.

Requests will be handled without undue delay and within the period required by applicable law.

The response period may be extended where legally permitted because of the complexity or number of requests. Where an extension applies, you will be informed as required by law.

Requests are generally processed free of charge. A reasonable fee may be charged, or action may be refused, where a request is manifestly unfounded or excessive and applicable law permits us to do so.

Certain information may be retained despite a deletion request where retention remains necessary to comply with law, prevent fraud, resolve disputes, or establish, exercise, or defend legal claims.

19. Automated Fraud and Security Checks

We and our service providers may use automated systems to identify potentially fraudulent, unauthorised, or high-risk transactions.

These systems may consider information including:

  • Transaction details;

  • Payment status;

  • Internet Protocol address;

  • Device information;

  • Account activity;

  • Delivery information;

  • Previous transaction patterns; and

  • Risk information supplied by fraud-prevention providers.

An order may be delayed, held for review, require additional verification, or be rejected where a significant fraud or security risk is identified.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects unless the processing is permitted by law and the required safeguards are provided.

20. Children’s Personal Data

The website is not specifically directed toward children.

We do not knowingly request personal data from children who cannot legally enter into a purchase contract or provide valid data protection consent without the involvement of a parent or legal guardian.

If you believe that a child has provided personal data without appropriate authorisation, contact info@jannjunea.shop. We will review the matter and take appropriate action.

21. Product Reviews and User Content

Where the website allows customers to submit reviews, photographs, comments, or other content, we may process:

  • The submitted content;

  • The name or identifier selected for publication;

  • Product and order verification information;

  • Submission date;

  • Technical information associated with the submission; and

  • Communications relating to moderation.

Reviews may be checked to prevent fraud, unlawful content, manipulation, or misuse.

Personal information included voluntarily in publicly displayed content may become visible to other website visitors. You should not include unnecessary personal or sensitive information in a public review.

22. Business Transfers

If jannjunea.shop is involved in a merger, acquisition, financing, restructuring, insolvency, sale of assets, or other business transfer, personal data may be disclosed to professional advisers and relevant transaction parties where necessary.

Any recipient must process personal data in accordance with applicable data protection requirements.

Customers will be informed where required by law of a material change affecting the identity of the controller or the processing of personal data.

23. Legal Disclosures

We may preserve, use, or disclose personal data where reasonably necessary to:

  • Comply with applicable law;

  • Respond to a valid court order or authority request;

  • Investigate suspected fraud or unlawful activity;

  • Protect customers or other individuals;

  • Protect the security and integrity of our services;

  • Enforce contractual rights; or

  • Establish, exercise, or defend legal claims.

Where legally permitted, we assess requests for disclosure and disclose only the information reasonably necessary for the relevant purpose.

24. Third-Party Links

The website may contain links to websites or services operated by independent third parties.

We do not control and are not responsible for the privacy, content, security, or data-processing practices of independent third-party websites.

This Privacy Policy does not apply after you leave jannjunea.shop. You should review the privacy information provided by the relevant third party before providing personal data.

25. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

  • Changes to our services;

  • Changes to website functionality;

  • New service providers;

  • Changes to data-processing activities;

  • Legal or regulatory developments;

  • Security requirements; or

  • Operational changes.

The updated version will be published on jannjunea.shop with a revised “Last updated” date.

Where required by law, we will provide additional notice or request renewed consent before a material change takes effect.

26. Contact Information

For privacy questions, data protection requests, consent withdrawals, objections, or complaints concerning the processing of personal data, contact:

jannjunea.shop
Email: info@jannjunea.shop