Privacy policy

Privacy Policy

1. Who we are

Postereyes operates this store and website, including all related information, content, features, tools, products and services (the “Services”).

Our store is hosted by Shopify, which provides the ecommerce platform that enables us to provide the Services to you.

2. Scope

This Privacy Policy explains how we collect, use, and disclose personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of personal information.

3. What personal information we collect

When we use the term “personal information,” we mean information that identifies you or can reasonably be linked to you.

3.1 Information you provide to us

a) Contact and order details, such as name, billing address, shipping address, email address, phone number, and order details.

b) Account information, if you create an account, such as username, password, preferences, and settings.

c) Communications, such as messages you send to customer support.

3.2 Information collected automatically

a) Device and connection information, such as IP address, browser, device identifiers, and basic log information.

b) Usage information, such as how you navigate and interact with the Services.

c) Cookies and similar technologies (see Section 10).

3.3 Payment information

Payments are processed by Shopify and payment providers. We receive information such as payment status, transaction details, and confirmation. We do not store full payment card details.

4. Sources of personal information

We may collect personal information:

a) Directly from you when you create an account, place an order, contact us, or otherwise provide information.

b) Automatically through the Services and your device, including through cookies and similar technologies.

c) From service providers that support the store, such as Shopify, payment providers, shipping providers, analytics providers, and advertising partners, where applicable.

5. Purposes of processing

We use personal information to:

a) Provide the Services, including processing orders, payments, shipping, returns, refunds, and customer support.

b) Provide, tailor, and improve the Services, including understanding how customers use the store and improving the shopping experience.

c) Marketing and advertising, such as sending promotional communications and showing advertisements, including on third party websites and platforms, where allowed by law.

d) Operate, secure, and protect the Services, including fraud prevention and abuse detection.

e) Comply with legal obligations and respond to lawful requests.

6. Legal basis (EEA and UK)

If you are located in the EEA or UK, we process personal information under GDPR on one or more of the following legal bases:

a) Performance of a contract (Article 6(1)(b)), to process and deliver your order and handle returns and support.

b) Legal obligation (Article 6(1)(c)), for example bookkeeping and tax compliance.

c) Legitimate interests (Article 6(1)(f)), for security, fraud prevention, operating and improving the Services, and direct marketing where permitted.

d) Consent (Article 6(1)(a)), where required, for example for marketing communications and for analytics and advertising cookies. You can withdraw consent at any time with future effect.

7. Disclosures and recipients

We may disclose personal information to third parties only as necessary to operate the store and provide the Services, including:

a) Shopify, for store hosting and ecommerce infrastructure.

b) Payment providers, to process payments.

c) Shipping and fulfillment providers, to deliver orders and handle returns.

d) Service providers supporting the store (for example IT support).

e) Analytics and advertising partners, where applicable and subject to your choices and applicable law.

8. International transfers

Shopify and some service providers may process personal information outside your country, including outside the EEA or UK. Where required, we rely on recognized transfer mechanisms such as the European Commission Standard Contractual Clauses, unless the transfer is to a country recognized as providing an adequate level of protection.

9. Data retention

We retain personal information for as long as necessary to provide the Services, handle returns and customer support, and comply with legal retention duties (for example invoices and accounting records). We then delete or anonymize the information where feasible.

10. Cookies

10.1 Necessary cookies

We use strictly necessary cookies and similar technologies required for the store to function, for example to enable cart and checkout, maintain session security, and prevent fraud.

10.2 Analytics and advertising cookies

We may use analytics and advertising cookies to understand how the Services are used, improve performance, and show relevant ads. Where required by law, these cookies are set only with your consent. You can manage your choices at any time via the cookie banner or cookie settings on the website.

10.3 Managing cookies in your browser

You can also control cookies through your browser settings and delete stored cookies at any time. Blocking necessary cookies may affect the functionality of the store, including checkout.

11. Your rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, and to object to certain processing. Where processing is based on consent, you may withdraw consent at any time with future effect. You may exercise your rights by contacting us using the details in Section 14.

12. Right to lodge a complaint

If you are in the EEA or UK, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement.

13. Whether providing data is required

If you place an order, we require certain personal information (such as name, address, and payment and contact details) to perform the contract and deliver your purchase. If you do not provide the required information, we may not be able to process or fulfill your order.

14. Automated decision making and profiling

We do not use automated decision making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

15. Contact

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

Email: hello@postereyes.art

Address: Paul Ehrlich Straße 21, 61118 Bad Vilbel, Germany

For the purposes of applicable data protection laws, Postereyes is the controller of your personal information.

16. Shopify information

Shopify Consumer Privacy Policy: https://www.shopify.com/legal/privacy/consumers

Shopify Privacy Controls Portal: https://privacy.shopify.com/en

Shopify general privacy policy: https://www.shopify.com/legal/privacy