Privacy policy

Privacy Policy

1. Controller

WireStyle GmbH
Daimlerstr. 32
76344 Eggenstein-Leopoldshafen
Germany
Email: support@wirestyle.de

2. General information

Provision of data. You are not obliged to provide us with personal data. However, we cannot conclude a contract with you without the data marked as mandatory in the ordering process.

Third countries. Where we transfer data to countries outside the EU/EEA, we do so on the basis of an adequacy decision of the European Commission (e.g. Canada or, for US companies certified under the EU-U.S. Data Privacy Framework, the USA) or of the European Commission's standard contractual clauses (available at commission.europa.eu).

Storage period. We store personal data for as long as necessary for the respective purpose or as long as consent has been given, and beyond that where statutory retention obligations apply or the data is needed to establish, exercise or defend legal claims. For details, see section 16.

3. Shop system and provision of the website

Shopify. Our online shop is operated by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, which processes all data arising in the shop on our behalf, including the data technically transmitted when you access the website (e.g. IP address, date and time, page accessed, browser and operating system). Data may also be transferred to Shopify Inc. in Canada and to service providers in the USA. The legal basis is Art. 6(1)(b) GDPR where the processing serves the initiation or performance of a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in a secure and functional online shop).

Cloudflare. We provide our configurator via Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (delivery, protection against attacks and cookieless audience measurement). In particular, IP address and technical connection data are processed. Cloudflare is certified under the EU-U.S. Data Privacy Framework. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure provision and statistical analysis).

4. Cookies and consent

We use technically necessary cookies and similar technologies (e.g. for the shopping cart, checkout and your cookie choice) on the basis of Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Art. 6(1)(b) or (f) GDPR. We only use all others with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Your choice in the cookie banner is stored so that it can be demonstrated (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).

You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer of the website. This does not affect the lawfulness of processing carried out before withdrawal.

5. Contacting us

If you contact us by email, via the contact form or via WhatsApp, we process your details (e.g. name, email address or mobile number and profile name, content of your message) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries, otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

WhatsApp. For WhatsApp we use WhatsApp Business of WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp also processes data as an independent controller and in the USA; Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework. Information: www.whatsapp.com/legal/privacy-policy-eea.

6. Orders and shipping

To process your order, we process in particular your name, delivery and billing address, email address, phone number, order and payment data and, for custom pictures, your photo and configuration (Art. 6(1)(b) GDPR; retention under Art. 6(1)(c) GDPR). For order processing we use Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany.

Shipping. For delivery we transmit your name, delivery address, email address and phone number to DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany, or for express shipping to DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany. The legal basis is Art. 6(1)(b) GDPR; for the email address used for shipment notifications, Art. 6(1)(f) GDPR (legitimate interest in smooth delivery).

7. Customer account and Shop Pay

If you create a customer account, we process the data stored in it on the basis of Art. 6(1)(b) GDPR. If you choose at checkout to save your details with Shop Pay, Shopify processes them as an independent controller (shop.app/privacy).

8. Payment

We transmit the data required for payment to the payment service provider you select (Art. 6(1)(b) GDPR; for fraud prevention, Art. 6(1)(f) GDPR). Depending on the payment method, these are:

• Shopify Payments (Shopify, see section 3) for card payments, Klarna, Google Pay and Apple Pay,
• Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden,
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Pay),
• Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland (Apple Pay),
• PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

For certain payment methods (e.g. invoice, instalments), Klarna and PayPal may carry out a credit check as independent controllers and decide on it automatically. For payment in advance, we process the data of your bank transfer to allocate the payment.

9. Configurator

If you upload a photo in the configurator, we process it to create a preview, produce the picture and process the order (Art. 6(1)(b) GDPR). Photos may show people.

Railway. The configurator's interface is operated by Railway Corporation, 548 Market St PMB 68956, San Francisco, CA 94104, USA, which processes photos and connection data (e.g. IP address) on our behalf. Railway is certified under the EU-U.S. Data Privacy Framework.

AI-assisted image optimisation. To optimise your photo, we transmit it to a provider of AI-assisted image editing based in the USA, which acts on our behalf.

Sentry. To detect technical errors in the configurator, we use Sentry of Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA. If an error occurs, technical data (e.g. error message, browser, device, IP address) is transmitted. Sentry is certified under the EU-U.S. Data Privacy Framework. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in an error-free configurator).

10. Time-lapse videos

We provide time-lapse videos of the production, which show your motif, via Vimeo, a service of Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA, which acts on our behalf. Vimeo is certified under the EU-U.S. Data Privacy Framework. The legal basis is Art. 6(1)(b) GDPR (§ 12 of our Terms) and, after three years, Art. 6(1)(f) GDPR (legitimate interest in continued access to your video).

11. Withdrawal function

We process the data you enter in our withdrawal function to handle your withdrawal (Art. 6(1)(c) GDPR in conjunction with Section 356a BGB). The function is provided via the Shopify app “EU Widerrufs-Button & Formular” of 401layers UG (haftungsbeschränkt), Dorothea-Erxleben-Str. 1a, 40721 Hilden, Germany, which acts on our behalf.

12. Newsletter and email advertising

Newsletter. If you subscribe to our newsletter, we use your email address for advertising on the basis of your consent (Art. 6(1)(a) GDPR) and log the subscription as proof. You can unsubscribe at any time, e.g. via the link in every email.

Existing customers. If you have purchased from us, we may also use your email address without consent to advertise our own similar products (Section 7(3) German Act against Unfair Competition, UWG; Art. 6(1)(f) GDPR). You can object to this at any time, e.g. via the unsubscribe link in every email or by email to support@wirestyle.de, without incurring any costs other than the transmission costs at the basic rates.

Klaviyo. For sending we use Klaviyo, Inc., 125 Summer Street, Floor 7, Boston, MA 02110, USA, which acts on our behalf and is certified under the EU-U.S. Data Privacy Framework. We analyse whether emails are opened and links are clicked (for the newsletter on the basis of your consent, for existing customers on the basis of Art. 6(1)(f) GDPR). Klaviyo's website tracking only takes place with your consent in the cookie banner.

13. Reviews

Trustpilot. After your order, we transmit your name, email address and order number to Trustpilot A/S, Pilestræde 58, 5th floor, 1112 Copenhagen K, Denmark, so that Trustpilot can invite you to leave a review. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in genuine customer reviews). You can object to this at any time, e.g. by email to support@wirestyle.de. When the review widgets on our website load, your IP address is transmitted to Trustpilot (Art. 6(1)(f) GDPR; legitimate interest in displaying our reviews).

Google reviews. To display our Google reviews, we use the app “Google Reviews by Reputon” of Reputon, 2093 Philadelphia Pike, Claymont, DE 19703, USA. When it loads, your IP address and technical data are transmitted to the provider and to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) (Art. 6(1)(f) GDPR; legitimate interest in displaying our reviews).

14. Analytics and marketing (only with consent)

We only use the following services with your consent in the cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). In particular, your usage behaviour in the shop (e.g. pages and products viewed, cart and purchases), cookie identifiers, IP address and device and browser data are processed, and for purchases possibly also contact data in hashed form.

• Shopify (see section 3): statistics and provision of the events to the following services.
• Mable GmbH, Bahnhofplatz 12, 76137 Karlsruhe, Germany: server-side transmission of the events to the following services, on our behalf.
• Google Analytics 4 and Google Ads (including conversion measurement and remarketing) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland: audience measurement, performance measurement and interest-based advertising. Analytics data is stored for a maximum of 14 months.
• Meta (Facebook, Instagram) of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland: performance measurement and interest-based advertising; Meta may link the data to your account. We are joint controllers with Meta for the collection and transmission (Art. 26 GDPR; agreement: www.facebook.com/legal/controller_addendum). Meta is responsible for your rights regarding the data stored by Meta.
• TikTok of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland: performance measurement and interest-based advertising; TikTok may link the data to your account.

Google, Meta and TikTok may transfer data to the USA and other third countries. Google and Meta are certified under the EU-U.S. Data Privacy Framework; for TikTok, transfers are based on standard contractual clauses.

15. Embedded content

YouTube. YouTube videos (Google Ireland Limited) are only loaded when you click on them. Data such as your IP address is then transmitted to YouTube and cookies may be set (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).

Other apps. When the following content loads, your IP address and technical data are transmitted to the respective provider (Art. 6(1)(f) GDPR; legitimate interest in presenting our content):

• Video gallery: “Cozy YouTube Videos Gallery” of eCommerce Addons, 840 Montée Masson, Mascouche, QC J7K 2L7, Canada,
• Instagram feed: “Instafeed” of Mintt Studio, Rua Parque da República 116, 4430-164 Vila Nova de Gaia, Portugal; the images are loaded from Instagram (Meta Platforms Ireland Limited),
• Shipping cost notice: “Essential Free Shipping Upsell” of Essential Apps, Baltupio g. 45-27, 08324 Vilnius, Lithuania; your country is determined from your IP address.

16. Storage periods

• Order and invoice data: until the commercial and tax retention periods expire (Section 257 German Commercial Code, HGB; Section 147 German Fiscal Code, AO).
• Uploaded photos: for as long as necessary for preview, production, order processing and any complaints.
• Time-lapse videos: at least three years from delivery, thereafter for as long as we continue to provide them.
• Customer account: until the account is deleted.
• Enquiries (email, contact form, WhatsApp): for as long as necessary to handle them; messages relating to an order or contract beyond that, where they are subject to statutory retention obligations (Section 257 HGB, Section 147 AO) or are needed as evidence to establish, exercise or defend legal claims.
• Newsletter: until you unsubscribe; proof of consent for as long as claims relating to the mailing can be asserted.
• Cookies: as stated in the cookie banner or until you withdraw your consent.

In all cases, statutory retention obligations also apply.

17. Your rights

Subject to the statutory requirements, you have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR), the right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR) and the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).