Datenschutzerklärung

1. Introduction

This Privacy Policy explains how pgmdress.shop collects, uses, stores, shares, and protects personal data when individuals visit our website, make purchases, contact us, use website features, or otherwise interact with our online store.

For the purposes described in this Privacy Policy, pgmdress.shop acts as the controller of personal data to the extent that it determines the purposes and means of processing.

Privacy enquiries may be sent to:

info@pgmdress.shop

We aim to process personal data in accordance with applicable data protection requirements, including the General Data Protection Regulation where it applies.

2. Personal Data We May Collect

Depending on how you interact with our store, we may process the following categories of personal data.

Identification and Contact Information

This may include:

• Name;
• Billing address;
• Delivery address;
• Email address;
• Telephone number.

Order Information

This may include:

• Products ordered;
• Product size, color, or variant;
• Order number;
• Purchase date;
• Order status;
• Delivery information;
• Return or refund information.

Payment-Related Information

Payments are normally processed through payment providers available through our Shopify-based checkout.

We may receive payment-related transaction information such as:

• Payment status;
• Transaction reference;
• Payment method category;
• Billing information;
• Fraud-screening results where applicable.

Full card data may be processed directly by authorized payment providers rather than stored by pgmdress.shop.

Device and Technical Information

When you visit the website, certain technical information may be collected, including:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Website pages viewed;
• Date and time of access;
• Referring page;
• Technical identifiers;
• Cookie or similar technology identifiers.

Customer Service Information

If you contact us, we may process:

• Your email address;
• Order number;
• Contents of correspondence;
• Photographs submitted regarding a product;
• Return and refund information;
• Other information you voluntarily provide.

3. Purposes and Legal Bases of Processing

Where GDPR applies, personal data will be processed only where a lawful basis exists.

Contract Performance

We may process personal information because it is necessary to perform a contract with you or take steps requested by you before entering into a contract.

This includes processing necessary to:

• Receive orders;
• Process payments;
• Fulfill purchases;
• Arrange delivery;
• Provide order confirmations;
• Handle returns;
• Process refunds;
• Respond to order-related enquiries.

The relevant basis may include Article 6(1)(b) GDPR.

Legal Obligations

We may process or retain information where necessary to comply with legal obligations relating to taxation, accounting, consumer protection, regulatory requirements, fraud prevention, or legally binding requests.

The relevant basis may include Article 6(1)(c) GDPR.

Legitimate Interests

Where permitted, we may process information when necessary for our legitimate interests or those of a third party, provided that such interests are not overridden by the fundamental rights and freedoms of the individual.

Such interests may include:

• Protecting our website;
• Preventing fraud;
• Maintaining network security;
• Improving customer service;
• Defending legal claims;
• Managing our business operations.

The relevant basis may include Article 6(1)(f) GDPR.

Consent

Where consent is legally required, we rely on consent for the relevant processing.

This may apply to:

• Certain marketing communications;
• Certain analytics technologies;
• Advertising cookies;
• Other non-essential tracking technologies.

Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

GDPR Article 6 recognizes consent, contractual necessity, legal obligation, and legitimate interests among the lawful bases for processing.

4. Shopify and E-Commerce Infrastructure

Our online store operates using Shopify technology.

Shopify and its affiliates or service providers may process certain information to provide hosting, checkout, store functionality, security, transaction support, and related services.

The personal information processed through Shopify may depend on the services used, the customer's location, merchant configuration, and payment method.

5. Payment Providers

Payment transactions may be processed through independent payment service providers available at checkout.

These providers may process payment and fraud-prevention information according to their own legal obligations and privacy terms.

We do not ask customers to send full card details or security codes to us by email.

6. Shipping and Fulfillment Providers

In order to deliver purchases, we may provide necessary customer information to shipping, logistics, warehouse, or fulfillment providers.

Such information may include:

• Recipient name;
• Delivery address;
• Telephone number where necessary;
• Email address where necessary for delivery notifications;
• Order or parcel reference.

Information is shared only to the extent reasonably necessary to perform delivery and related services.

7. Service Providers

We may use service providers to support functions such as:

• Website hosting;
• E-commerce infrastructure;
• Payment processing;
• Fraud detection;
• Customer service;
• Email delivery;
• Logistics;
• Security;
• Technical maintenance;
• Analytics where legally permitted;
• Marketing where consent or another lawful basis applies.

Service providers may process information on our behalf or, in some circumstances, act as independent controllers.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Some technologies may be strictly necessary to:

• Maintain shopping-cart functionality;
• Enable checkout;
• Remember security settings;
• Process authentication;
• Prevent fraud;
• Provide functionality expressly requested by users.

Other cookies may be used for analytics, personalization, or advertising only where legally permitted and, where required, after obtaining valid consent.

Under Germany's TDDDG, storing or accessing information on a user's terminal equipment generally requires consent unless the statutory exception for necessary technologies applies.

Users may manage available consent choices through the cookie or privacy controls presented by the website where such controls are provided.

9. Marketing Communications

We may send promotional emails where permitted by applicable law and where required consent has been obtained.

Marketing communications will provide an appropriate method to unsubscribe.

Withdrawal from marketing does not affect transactional communications that are necessary for an existing order, customer-service request, refund, legal notification, or similar non-marketing purpose.

10. International Data Transfers

Some of our technology, e-commerce, payment, fulfillment, or service providers may operate outside Germany or the European Economic Area.

Where GDPR applies to an international transfer, appropriate transfer mechanisms or safeguards will be used where legally required.

These may include adequacy decisions or appropriate contractual safeguards.

11. Data Retention

Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected and for applicable legal, accounting, tax, fraud-prevention, dispute-resolution, warranty, or contractual requirements.

Different categories of information may have different retention periods.

Where no specific statutory retention period applies, we consider factors such as:

• The nature of the data;
• The purpose for which it is used;
• The existence of an active customer relationship;
• Legal limitation periods;
• Security requirements;
• Whether information is required to establish or defend legal claims.

After applicable retention requirements expire, information may be deleted, anonymized, or otherwise handled in accordance with applicable law.

12. Your Data Protection Rights

Where GDPR applies, you may have rights including:

• The right to obtain information regarding processing;
• The right of access;
• The right to rectification;
• The right to erasure where legal conditions are satisfied;
• The right to restriction of processing;
• The right to data portability where applicable;
• The right to object to certain processing;
• The right to withdraw consent;
• The right to lodge a complaint with a competent supervisory authority.

The availability of a particular right depends on the nature and legal basis of the processing.

GDPR Articles 13 and 14 require transparency regarding matters such as controller identity, processing purposes, legal bases, recipients, retention and applicable rights.

13. Exercising Your Rights

To make a privacy request, contact:

info@pgmdress.shop

Please clearly describe your request.

We may request reasonable information necessary to verify your identity before disclosing or changing personal data.

We will not request information that is disproportionate to the verification required.

14. Children

Our store is intended for customers legally capable of entering into purchase transactions or acting with appropriate authorization.

We do not knowingly seek to collect personal data from children for purposes incompatible with applicable law.

If you believe that personal information relating to a child has been improperly submitted to us, contact:

info@pgmdress.shop

15. Security

We use reasonable organizational and technical measures intended to protect personal data against unauthorized access, disclosure, alteration, loss, or misuse.

No online transmission or storage system can be guaranteed to be absolutely secure.

Customers should protect their account credentials and should never send passwords, full card details, or security codes through ordinary email.

16. Disclosure Required by Law

We may disclose personal information where reasonably necessary to:

• Comply with a legal obligation;
• Respond to a lawful government or regulatory request;
• Enforce or defend legal rights;
• Prevent fraud or security incidents;
• Protect users or other persons where required by law.

17. Business Changes

If the operation of pgmdress.shop is reorganized, transferred, merged, or sold, personal data may be transferred as part of the relevant transaction where legally permitted and subject to applicable privacy requirements.

18. Third-Party Websites

Our website may contain links to independent websites or services.

We are not responsible for the privacy practices of independent third parties.

Customers should review the privacy information provided by the relevant third-party service.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, technical, or business developments.

The current version will be published on pgmdress.shop with an updated effective date where appropriate.

20. Contact

For privacy-related requests or questions:

pgmdress.shop
Email: info@pgmdress.shop