Privacy Policy
We appreciate your interest in our online shop. Protecting your personal data is very important to us. Below, we provide you with detailed information about how we process your personal data.
1. Responsible person
Dr. Melaxin Germany
Sixty Street 4b
50733 Cologne (Rhineland)
Germany
Email: info@melaxin-cosmetics.de
2. Collection and storage of personal data when visiting the website
When you access our website, the browser used on your device automatically sends information to the server of our shop system (Shopify).
This data is:
-
IP address
-
Date and time of the request
-
Time zone difference GMT
-
Browser type and version
-
Operating system and interface
-
Referrer URL
-
Access status / HTTP status code
This data is processed by Shopify International Ltd., Ireland, as a technical service provider.
Legal basis: Art. 6 para. 1 lit. f GDPR(legitimate interest in providing a functional website).
3. Hosting & shop system (Shopify)
Our shop is accessed via:
Shopify International Ltd.
, 2nd Floor, 1-2 Victoria Buildings, Haddington Road,
Dublin 4, D04 XN32, Ireland
operated.
Shopify stores customer data, orders, payment information (excluding full credit card numbers), and metadata. Shopify may transfer data to the USA (standard contractual clauses according to the GDPR).
Legal basis: Art. 6 para. 1 lit. b GDPR(performance of a contract) and Art. 6 para. 1 lit. f GDPR(IT infrastructure).
4. Data collection during orders
When you place an order, we process the following data:
-
name
-
address
-
E-mail address
-
Phone number (optional)
-
Ordered products
-
Payment method
-
Invoice data
Legal basis: Art. 6 para. 1 lit. b GDPR– processing for the execution of the purchase contract.
5. Payment service providers
5.1 Shopify Payments
If you pay by credit card, Apple Pay or SEPA via Shopify Payments, data processing is carried out by:
Stripe Payments Europe Ltd. (for Shopify Payments)
Data processed:
-
name
-
Billing address
-
Credit card data (tokenized)
-
IP address
Legal basis: Art. 6 para. 1 lit. b GDPR
5.2 PayPal
Payments via PayPal are processed by:
PayPal (Europe) S.à rl et Cie, SCA
Data transferred:
-
name
-
address
-
e-mail
-
Payment amount
-
IP address
Legal basis: Art. 6 para. 1 lit. b GDPR
5.3 Klarna
When selecting Klarna (instant / invoice / installment payment), a credit check will be carried out by Klarna:
Klarna Bank AB (publ.)
Sveavägen 46, 111 34 Stockholm, Sweden
Klarna verifies identity and creditworthiness using its own databases.
Legal basis:
Article 6 paragraph 1 letter b GDPR(contract)
Article 6 paragraph 1 letter f GDPR(protection against payment defaults)
6. Shipping provider DHL
For delivery purposes, we will transmit the necessary data to:
DHL Parcel GmbH
Data transmitted:
-
name
-
address
-
Optionally, email for shipping notifications
Legal basis: Art. 6 para. 1 lit. b GDPR
7. Cookies
Our Shopify store uses cookies for:
-
Shopping cart function
-
Language settings
-
Session deployment
-
Cash register function
:
-
Necessary cookies:Art. 6 para. 1 lit. f GDPR
-
Marketing or tracking cookies:only with consent, Art. 6 para. 1 lit. a GDPR
(Do you want tracking via pixels like Meta or TikTok? → I can add that!)
8. Making contact
When you contact us (via email), we store:
-
E-mail address
-
your name (if given)
-
Message content
Legal basis: Art. 6 para. 1 lit. a GDPR(consent) or lit. b (contract initiation).
9. Storage period
We store personal data in accordance with:
-
Retention obligations (e.g. 10 years according to the German Commercial Code/Tax Code)
-
technical requirements
-
Shopify deletion guidelines
10. Your rights (GDPR)
You have at any time:
-
Right of access(Art. 15 GDPR)
-
Right to notification(Art. 16 GDPR)
-
Right to erasure(Art. 17 GDPR)
-
Right to restriction of processing(Art. 18 GDPR)
-
Right to data portability(Art. 20 GDPR)
-
Right to object(Art. 21 GDPR)
Please send inquiries to: info@melaxin-cosmetics.de
11. Revocation of consent
You can withdraw your consent at any time by email.
12. Data transfer to third countries
Shopify, Klarna, PayPal and Stripe may transfer data to countries outside the EU.
This is done on the basis of Standard Contractual Clauses (SCCs)pursuant to Art. 46 GDPR.
13. Safety
We use TLS/SSL encryption for the entire website.
14. Changes to the Privacy Policy
We reserve the right to amend this privacy policy if changes become necessary.
