Privacy policy
PRIVACY POLICY
Last updated: August 2026
1. PRIVACY AT A GLANCE
The protection of your personal data is important to us. This Privacy Policy explains which personal data we collect and process when you use our online store, for what purposes we process it, and what rights you have under the General Data Protection Regulation (GDPR).
Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, address, email address, telephone number, IP address, payment information and order information.
2. DATA CONTROLLER
The controller responsible for the processing of personal data within the meaning of the GDPR is:
BERRI
Augustenstr. 5
72458 Albstadt
Germany
Email: info@shopberri.com
3. PERSONAL DATA WE PROCESS
Depending on how you use our online store, we may process in particular the following categories of personal data:
• First and last name
• Billing and shipping address
• Email address
• Telephone number, if provided
• Order and transaction information
• Payment information
• Information relating to returns, refunds and complaints
• Customer account information
• Communications with our customer service
• IP address
• Browser, device and network information
• Information about your use of our online store
• Products and pages viewed
• Cart and checkout activity
• Cookies and similar online identifiers
• Marketing and consent preferences
We receive this information directly from you, automatically when you use our online store, or from service providers and partners that we use to provide our services.
4. PURPOSES AND LEGAL BASES FOR PROCESSING
Order Processing and Contract Performance
We process your personal data where necessary to process your order, handle payments, deliver products, process returns and refunds, and communicate with you regarding your order.
The legal basis is Art. 6(1)(b) GDPR.
Legal Obligations
We are required to retain and process certain personal data in order to comply with legal obligations, in particular commercial and tax law requirements.
The legal basis is Art. 6(1)(c) GDPR.
Customer Service and Communication
If you contact us, we process the information you provide in order to respond to and handle your request.
Where your request is related to an order or contract, the processing is based on Art. 6(1)(b) GDPR.
In other cases, processing may be based on our legitimate interest in efficient customer communication under Art. 6(1)(f) GDPR.
Security and Fraud Prevention
We may process personal data in order to protect our online store against fraud, misuse, unauthorized access and other security risks.
The legal basis may be our legitimate interest under Art. 6(1)(f) GDPR in ensuring the secure and reliable operation of our online store.
5. SHOPIFY
Our online store is operated using the Shopify e-commerce platform.
For merchants in the European Economic Area, the provider is generally:
Shopify International Limited
Victoria Buildings, 2nd Floor
1–2 Haddington Road
Dublin 4, D04 XN32
Ireland
Shopify provides the technical infrastructure required to operate our online store and processes personal data that you provide when visiting or using our store, as well as technical data generated during your use of the store.
This may include, in particular, contact information, order information, payment information, device information, browser information, IP address and usage information.
Information may be transferred to Shopify and other service providers in order to provide and improve Shopify’s services and may also be processed outside the European Economic Area where legally permitted.
Further information about Shopify’s processing of personal data is available in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
6. SHOPIFY NETWORK INTELLIGENCE AND ENHANCED SERVICES
We use Shopify Network Intelligence and related enhanced services.
In this context, Shopify may process information about your interactions with our online store together with information about your interactions with Shopify and other Shopify merchants.
This processing may enable Shopify to provide enhanced services, including services relating to security, analytics, personalization, service improvement and, where you have provided the required consent, personalized advertising.
For certain processing activities, Shopify may act as an independent controller.
Information may also be transferred to Shopify and other service providers and processed in countries outside your country of residence.
Where your consent is required for certain processing activities, in particular personalized advertising or non-essential tracking technologies, such processing will only take place after you have provided your consent.
You may change or withdraw your consent choices at any time using the privacy or cookie settings available on our website.
Further information and options for exercising your privacy rights in relation to Shopify are available through the Shopify Privacy Portal.
7. PAYMENT SERVICE PROVIDERS
To process your order, we use Shopify and, depending on the payment methods we offer and the payment method you select, external payment service providers.
These may include, for example:
• Shopify Payments
• PayPal
• Klarna
• Credit and debit card providers
• Apple Pay
• Google Pay
• Other payment service providers offered during checkout
In this context, data such as your name, billing address, order amount, payment information and other information necessary to process the payment may be processed.
Processing is generally carried out for the performance of the purchase contract under Art. 6(1)(b) GDPR.
The respective payment service providers may also process personal data under their own responsibility, for example for fraud prevention, identity verification or compliance with legal obligations. Their own privacy policies apply to such processing.
8. SHIPPING AND DELIVERY
To deliver your order, we provide the necessary personal data to the shipping or logistics provider responsible for delivering your order.
These may include, for example:
• DHL
• Deutsche Post
• Hermes
• DPD
• UPS
• Other shipping providers used by us
As a rule, only the information required for delivery is shared, in particular your name, shipping address and, where necessary and legally permitted, additional contact information.
The legal basis is Art. 6(1)(b) GDPR.
9. COOKIES AND SIMILAR TECHNOLOGIES
Our online store uses cookies and similar technologies.
Technically necessary cookies may be used where required to provide essential functions of our online store, for example shopping cart, checkout, security or language settings.
In addition, where enabled and where you have provided consent, cookies, pixels and similar technologies may be used for analytics, marketing, personalization and advertising purposes.
Where required by law, non-essential technologies are only activated after you have provided your consent.
You may change your choices or withdraw your consent at any time using the cookie or privacy settings available on our website.
10. META – FACEBOOK AND INSTAGRAM
Where we use Facebook and Instagram by Meta, Meta Pixel and/or Meta Conversions API, information about your use of our online store may be transferred to Meta after you have provided the required consent.
This may include, for example:
• Pages and products viewed
• Cart activity
• Checkout activity
• Purchases
• Device and browser information
• IP address
• Cookies and other online identifiers
This information may be used, in particular, to measure the effectiveness of advertising, create statistics, create audiences and display relevant advertising.
The provider is in particular:
Meta Platforms Ireland Limited
Merrion Road
Dublin 4, D04 X2K5
Ireland
Where consent is required, the legal basis for processing is Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future through our cookie or privacy settings.
11. GOOGLE ANALYTICS AND GOOGLE ADS
Where we use services such as Google Analytics and/or Google Ads, cookies or similar technologies may be used after you have provided consent in order to collect information about the use of our online store.
This may include, for example, your IP address, device and browser information, pages viewed, interactions with our online store and information relating to purchases.
This information may be used to analyze the use of our online store, measure the effectiveness of our advertising and optimize our marketing activities.
For users in the European Economic Area, the provider is generally:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Where consent is required, the legal basis for processing is Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future through our cookie or privacy settings.
12. EMAIL AND NEWSLETTER MARKETING
If you subscribe to our newsletter or other marketing communications, we process your email address and, where applicable, other information you voluntarily provide in order to send you information about BERRI, our products, offers and promotions.
Where required by law, such communications will only be sent after you have provided your prior consent.
The legal basis is Art. 6(1)(a) GDPR.
We may retain information relating to your subscription and confirmation in order to document your consent.
You may withdraw your consent at any time with effect for the future, in particular by using the unsubscribe link contained in our marketing emails.
Transactional communications, such as order confirmations or shipping notifications, may still be sent independently of a newsletter subscription where necessary for the performance of the contract.
13. SHOPIFY INBOX AND CUSTOMER COMMUNICATION
Where we use Shopify Inbox or similar communication services, the information you provide as part of your inquiry is processed in order to communicate with you and respond to your request.
This may include, in particular, your name, email address, message content, order information and technical information.
The legal basis depends on the nature of your request and may be Art. 6(1)(b) GDPR for contract-related inquiries or Art. 6(1)(f) GDPR based on our legitimate interest in efficient customer communication.
14. OTHER SHOPIFY APPS AND SERVICE PROVIDERS
We may use additional Shopify apps and external service providers to provide and improve our online store.
Personal data is only processed or transferred where this is necessary for the relevant service and where an appropriate legal basis exists.
Where processing requires consent, such processing will only take place after you have provided your consent.
15. DISCLOSURE OF PERSONAL DATA
Personal data may be disclosed in particular to the following categories of recipients:
• Shopify and affiliated service providers
• Payment service providers
• Shipping and logistics providers
• IT, hosting and cloud service providers
• Marketing and analytics service providers, where permitted
• Tax advisers and other professional service providers
• Authorities and public bodies where disclosure is required by law
Personal data is only disclosed where an appropriate legal basis exists.
16. INTERNATIONAL DATA TRANSFERS
When using Shopify, Meta, Google or other international service providers, personal data may be processed outside Germany or the European Economic Area.
Where personal data is transferred to countries outside the European Economic Area, such transfers are carried out in accordance with the requirements of the GDPR.
Depending on the recipient and destination country, transfers may in particular be based on an adequacy decision by the European Commission or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
17. DATA RETENTION
We retain personal data only for as long as necessary for the relevant processing purpose or for as long as statutory retention obligations apply.
Order, invoice, accounting and payment data may in particular be retained after completion of an order in order to comply with commercial and tax law retention obligations.
Once the purpose of processing no longer applies and applicable statutory retention periods have expired, the data will be deleted or anonymized unless another legal basis permits continued storage.
18. YOUR RIGHTS UNDER THE GDPR
Subject to the applicable legal requirements, you have in particular the following rights:
• Right of access under Art. 15 GDPR
• Right to rectification under Art. 16 GDPR
• Right to erasure under Art. 17 GDPR
• Right to restriction of processing under Art. 18 GDPR
• Right to data portability under Art. 20 GDPR
• Right to object under Art. 21 GDPR
• Right to withdraw consent under Art. 7(3) GDPR
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
To exercise your rights, you may contact us at:
info@shopberri.com
19. OBJECTION TO DIRECT MARKETING
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing.
Following your objection, your personal data will no longer be processed for these purposes.
20. RIGHT TO LODGE A COMPLAINT
Under Art. 77 GDPR, you have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
You may in particular contact the supervisory authority at your habitual residence, your place of work or the place of the alleged infringement.
21. DATA SECURITY
We take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration and unauthorized disclosure.
However, completely risk-free data transmission over the internet cannot be technically guaranteed.
22. EXTERNAL LINKS AND SOCIAL NETWORKS
Our online store may contain links to third-party websites and social networks, for example Instagram, Facebook or TikTok.
If you follow an external link, you leave our online store. The operator of the respective external platform is generally responsible for the processing of personal data on that platform.
Please refer to the privacy information provided by the respective provider.
23. CHANGES TO THIS PRIVACY POLICY
We reserve the right to update this Privacy Policy where necessary due to changes in law, new features of our online store, new service providers or changes to our data processing activities.
The current version will be published in our online store.
24. CONTACT
If you have any questions about privacy or would like to exercise your data protection rights, please contact us:
BERRI
Augustenstr. 5
72458 Albstadt
Germany
Email: info@shopberri.com