Privacy Policy
Thank you for your interest in our website. The protection of your personal data is very important to us.
In the following, we inform you, in accordance with the General Data Protection Regulation (GDPR) and the Telecommunications-Telemedia Data Protection Act (TTDSG), about the nature, scope, and purpose of processing personal data when using Flatfigures.com.
1. Controller
Flatfigures.com
Weißenfels Wichartz GbR
Rauschendorfer Straße 98
53639 Königswinter · Germany
Email: hello@flatfigures.com
Phone: +49 151 26655440
Responsible for the purposes of the GDPR are the partners:
Lukas Weißenfels & Marius Wichartz
2. Collection and processing of personal data
We process personal data that you voluntarily provide to us when using our website, especially when:
- ordering digital products
- creating a customer account
- contacting us via email or live chat
The following data may be processed in particular:
- First and last name
- Billing and payment data
- Email address
- IP address
- Usage and order data
The processing is carried out for the fulfillment of a contract or for the implementation of pre-contractual measures according to Art. 6 para. 1 lit. b GDPR.
3. Use of the e-commerce platform Shopify
Our online shop is operated via the platform Shopify Inc.,
151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada.
Shopify provides the technical infrastructure for the operation of the online shop. Personal data is processed on Shopify's servers.
Shopify may also use sub-processors in third countries, particularly the USA, in the provision of its services.
Data transfer is based on adequacy decisions (e.g., for Canada) or Standard Contractual Clauses in accordance with Art. 46 GDPR.
Further information on data processing by Shopify can be found at:
https://www.shopify.com/legal/privacy
4. Payment processing
For payment processing, we use the payment services provided by Shopify ("Shopify Payments") as well as connected payment providers, in particular:
- PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
- Stripe Payments Europe Ltd., Ireland
- Klarna Bank AB, Sweden
Processing is carried out for payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
The named payment service providers process personal data independently for the purposes of the GDPR. Their respective privacy policies apply.
5. Cookies and consent management
Our website uses cookies and similar technologies.
Cookies are small text files that are stored on your device and enable certain functions of the website.
The storage of information on your device or access to already stored information is carried out in accordance with § 25 TTDSG.
We use the following categories of cookies:
- Necessary cookies
These are technically required for the operation of the website.
The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest).
- Statistics and analytics cookies
These are only set after your prior consent.
The legal basis is Art. 6 para. 1 lit. a GDPR.
You can adjust or revoke your cookie settings at any time via the cookie banner.
6. Analytics tools (Shopify Analytics / Google Analytics 4)
We use the integrated analysis functions of Shopify Analytics.
If you have consented in the cookie banner, additional analytics tools such as Google Analytics 4 may be used. In this case, pseudonymized usage data (e.g., page views, time spent, origin) is processed.
Processing is based exclusively on your consent in accordance with Art. 6 para. 1 lit. a GDPR.
7. Contact & Live Chat (Shopify Inbox)
If you contact us via email, contact form, or the live chat provided on the website, we process the personal data you provide (e.g., name, email address, message content) to handle your request.
The live chat is provided via the service Shopify Inbox by Shopify Inc. and is technically integrated into the Shopify platform.
Processing is based on:
- Art. 6 para. 1 lit. b GDPR, if the contact is related to the initiation or execution of a contract, or
- Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in efficient and user-friendly communication.
Chat content is stored only as long as necessary to process the request or as long as statutory retention periods exist.
8. Data disclosure
Personal data is only disclosed if:
- this is necessary for the fulfillment of the contract,
- a legal obligation exists, or
- you have explicitly consented.
Recipients include, in particular, hosting, payment, and IT service providers who are contractually obliged to comply with the GDPR.
9. Storage period
Personal data is stored only as long as necessary to fulfill the respective purposes.
Commercial and tax-relevant data are stored in accordance with statutory retention periods.
10. Your rights as a data subject
You have the right at any time to:
- Information (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Withdraw consent (Art. 7 para. 3 GDPR)
To exercise your rights, simply send an informal message to:
hello@flatfigures.com
11. Data security
We implement technical and organizational measures to protect your data against loss, manipulation, or unauthorized access.
Our security measures are regularly reviewed and adapted to the state of the art.
12. Topicality of this privacy policy
We reserve the right to adapt this privacy policy to reflect legal or technical changes.
The current version, available at:
https://flatfigures.com/pages/datenschutzerklaerung always applies.