Privacy Policy
1. Controller
Aimad Jaouhar – Cruvio
Aimad Jaouhar, Am Weitgarten 33, 53227 Bonn, Germany
Email: cruvio.de@gmail.com · Phone: +49 1575 1085799
2. General
We process personal data only where necessary to provide a functional website and our content/services, or where you have consented. Legal bases are in particular Art. 6(1) GDPR (a consent, b contract, c legal obligation, f legitimate interest).
3. Hosting / shop platform (Shopify)
This website runs on Shopify (Shopify International Limited, Ireland; Shopify Inc., Canada). When you visit the site and place orders, Shopify processes, on our behalf, inventory, contact, order, payment and usage data as well as server log files (IP address, time, pages accessed). A data processing agreement (Art. 28 GDPR) is in place. Transfers to third countries (e.g. Canada/USA) may occur and are safeguarded by Standard Contractual Clauses / applicable adequacy decisions. Legal basis: Art. 6(1)(b) and (f) GDPR.
4. Cookies & consent
We use technically necessary cookies and — only with your consent — further cookies/services. Consent is obtained via the cookie-consent banner (our theme's built-in consent banner) and can be withdrawn at any time with effect for the future. Legal basis: § 25 TDDDG, Art. 6(1)(a) and (f) GDPR.
5. Order processing & customer account
To process orders we use inventory and contract data (name, address, email, order and payment data) for contract performance (Art. 6(1)(b) GDPR). Statutory retention periods (up to 10 years, § 147 AO / § 257 HGB) remain unaffected (Art. 6(1)(c) GDPR). A customer account is optional and can be deleted at any time.
6. Payment service providers
Payments are processed via PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg). Data required for payment is transmitted to PayPal, whose privacy terms additionally apply. Legal basis: Art. 6(1)(b) GDPR.
7. Fulfilment / printing & shipping via Printful (print-on-demand)
Our products are produced and shipped on a print-on-demand basis by Printful. To fulfil orders we transmit the necessary data (name, delivery address, order contents) to Printful, who processes it on our behalf (Art. 28 GDPR). Printful operates entities in the EU and the USA; depending on the production location, transfers to the USA or other third countries may occur, safeguarded by appropriate guarantees (EU Standard Contractual Clauses / applicable adequacy decisions). Legal basis: Art. 6(1)(b) and (f) GDPR.
8. Contact
If you contact us (email, contact form), your details are processed to handle the request (Art. 6(1)(b) or (f) GDPR) and deleted when no longer needed and no retention obligations apply.
9. Newsletter
If you subscribe to our newsletter (e.g. via the sign-up form on our site), we use your email address to send product news and offers. Subscription uses a double opt-in procedure and is sent via Shopify's email-marketing tools (Shopify) acting as our processor. You can unsubscribe at any time via the link in each email or by contacting us; this withdraws your consent with effect for the future. Legal basis: Art. 6(1)(a) GDPR.
10. Analytics & marketing services
We use Shopify's built-in, largely first-party analytics to understand how our store is used. In addition, our store is connected to the Google & YouTube sales channel (Google Ireland Ltd.), which may set cookies and process usage data for advertising, conversion measurement and product listings; such non-essential processing takes place only with your consent via the cookie banner and may involve transfers to the USA. We also offer Shop Pay / the Shop app (Shopify) as an accelerated checkout. You can withdraw consent at any time with effect for the future. Legal basis: Art. 6(1)(a) and (f) GDPR.
11. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may withdraw consent at any time with future effect. You may lodge a complaint with a supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
12. Storage period
We store personal data only as long as necessary for the stated purposes or as required by statutory retention periods.