Privacy policy

Privacy Policy

1) Introduction and Contact Details of the Controller

1.1

We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data means any data through which you can be personally identified.

1.2

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Dennis Brunn
Finkeldeweg 123
12557 Berlin
Germany
Tel.: 01709023876
Email: shop@greenclimbershome.com

The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1

When you use our website solely for informational purposes—that is, if you do not register or otherwise provide us with information—we collect only the data transmitted by your browser to the website server (“server log files”).

When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • The page of our website visited
  • Date and time of access
  • Amount of data sent in bytes
  • Source or referring page from which you accessed the website
  • Browser used
  • Operating system used
  • IP address used, where applicable in anonymised form

The processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

The data is not disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

2.2

For security reasons and to protect the transmission of personal data and other confidential content, such as orders or enquiries sent to us, this website uses SSL or TLS encryption.

You can recognise an encrypted connection by the “https://” prefix and the padlock symbol in your browser’s address bar.

3) Hosting and Content Delivery Network

Shopify

For the hosting of our website and the display of its content, we use the system provided by:

Shopify International Limited
Victoria Buildings, 2nd Floor
1–2 Haddington Road
Dublin 4, D04 XN32
Ireland
(“Shopify”)

Data is also transferred to:

Shopify Inc.
150 Elgin Street
Ottawa, ON K2P 1L4
Canada

All data collected through our website is processed on the provider’s servers.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

When data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Data Sharing and Behavioural Advertising – Shopify Network Intelligence

Our online store is hosted by Shopify. We participate in Shopify Network Intelligence and Shopify’s Enhanced Services programme.

This means that Shopify may collect transactional and behavioural data from our customers and combine and analyse it with data from other participating online stores.

This aggregated and pseudonymised information is used to train machine-learning models, generate product recommendations across participating stores and optimise marketing capabilities. This may include, for example, creating target audiences for advertising networks such as Meta and Google.

If you are a resident of the European Economic Area, the United Kingdom or Switzerland, we obtain your explicit consent before engaging in this tracking. In this case, the processing is carried out on the basis of your consent in accordance with Article 6(1)(a) GDPR.

You may withdraw your consent with effect for the future and opt out of behavioural profiling across the Shopify merchant network at any time by visiting the Shopify Consumer Privacy Portal.

The withdrawal of your consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

5) Cookies

To make visiting our website attractive and enable the use of certain functions, we use cookies. Cookies are small text files stored on your device.

Some of these cookies are automatically deleted when you close your browser (“session cookies”), while others remain on your device for a longer period and allow website settings to be stored (“persistent cookies”). In the latter case, you can find the applicable storage period in your web browser’s cookie settings overview.

Where personal data is also processed through individual cookies used by us, the processing is carried out:

  • in accordance with Article 6(1)(b) GDPR where necessary for the performance of a contract;
  • in accordance with Article 6(1)(a) GDPR where you have given your consent; or
  • in accordance with Article 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and providing a customer-friendly and effective website experience.

You can configure your browser to inform you when cookies are being set and decide individually whether to accept them. You can also prevent cookies from being accepted in certain cases or altogether.

Please note that the functionality of our website may be limited if you do not accept cookies.

6) Contacting Us

When you contact us, for example through a contact form or by email, personal data is processed exclusively for the purpose of handling and responding to your enquiry and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) GDPR.

If your enquiry relates to a contract, Article 6(1)(b) GDPR provides an additional legal basis for processing.

Your data will be deleted when the circumstances indicate that the matter in question has been conclusively resolved, provided that no statutory retention obligations prevent its deletion.

7) Data Processing When Opening a Customer Account

In accordance with Article 6(1)(b) GDPR, personal data will be collected and processed to the extent necessary if you provide it to us when opening a customer account.

The data required to open an account can be found in the input fields of the relevant form on our website.

You may request the deletion of your customer account at any time by sending a message to the controller at the address stated above.

Once your customer account has been deleted, your data will also be deleted, provided that:

  • all contracts concluded through the account have been fully completed;
  • no statutory retention periods prevent deletion; and
  • we have no legitimate interest in continuing to store the data.

8) Data Processing for Order Fulfilment

8.1

Where necessary for contract fulfilment, delivery and payment purposes, the personal data collected by us will be disclosed to the appointed shipping company and financial institution in accordance with Article 6(1)(b) GDPR.

If, on the basis of a corresponding contract, we are required to provide you with updates for goods containing digital elements or for digital products, we process the contact details you provided when placing your order, including your name, address and email address.

We process this information to notify you personally of forthcoming updates through an appropriate communication channel, such as by post or email, within the legally prescribed period and in fulfilment of our statutory information obligations under Article 6(1)(c) GDPR.

Your contact details will be used strictly for the purpose of notifying you about updates that we are required to provide. For this purpose, we will process your information only to the extent necessary to provide the relevant notification.

To fulfil your order, we also work with the service provider or providers specified below, which assist us wholly or partly with the performance of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

8.2 Printify

For order fulfilment, we use the following provider:

Printify Inc.
108 West 13th Street
Wilmington, Delaware 19801
USA

Your name, address and, where applicable, other personal data will be disclosed to the provider in accordance with Article 6(1)(b) GDPR exclusively for the purpose of fulfilling your online order.

Your data will be disclosed only to the extent actually necessary to fulfil your order.

For transfers of data to the United States, the provider relies on the European Commission’s Standard Contractual Clauses, which are intended to ensure compliance with European data protection standards.

8.3 Use of Payment Service Providers

Shopify Payments

One or more online payment methods provided by the following provider are available on this website:

Shopify International Limited
Victoria Buildings
1–2 Haddington Road
Dublin 4, D04 XN32
Ireland

If you select a payment method offered by the provider under which you make payment in advance, such as payment by credit card, the payment information you provided during the ordering process will be disclosed to the provider.

This information includes your name, address, bank and payment-card details, currency and transaction number, as well as information concerning the contents of your order.

Your data will be disclosed in accordance with Article 6(1)(b) GDPR exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

9) Rights of the Data Subject

9.1

Applicable data protection law grants you the following rights as a data subject in relation to the processing of your personal data by us as the controller.

The conditions for exercising these rights are governed by the respective legal provisions cited below:

  • Right of access in accordance with Article 15 GDPR
  • Right to rectification in accordance with Article 16 GDPR
  • Right to erasure in accordance with Article 17 GDPR
  • Right to restriction of processing in accordance with Article 18 GDPR
  • Right to be informed in accordance with Article 19 GDPR
  • Right to data portability in accordance with Article 20 GDPR
  • Right to withdraw consent in accordance with Article 7(3) GDPR
  • Right to lodge a complaint in accordance with Article 77 GDPR

9.2 Right to Object

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT-MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT-MARKETING PURPOSES.

10) Duration of Personal Data Storage

The duration for which personal data is stored is determined according to the applicable legal basis, the purpose of the processing and, where relevant, the applicable statutory retention period, such as retention periods under commercial and tax law.

Where personal data is processed on the basis of explicit consent in accordance with Article 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.

Where statutory retention periods apply to data processed in connection with contractual or similar obligations on the basis of Article 6(1)(b) GDPR, this data will be routinely deleted once the applicable retention periods have expired, provided that:

  • it is no longer required for the performance or initiation of a contract; and
  • we have no legitimate interest in continuing to store it.

Where personal data is processed on the basis of Article 6(1)(f) GDPR, the data will be stored until you exercise your right to object under Article 21(1) GDPR, unless:

  • we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms; or
  • the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for direct-marketing purposes on the basis of Article 6(1)(f) GDPR, the data will be stored until you exercise your right to object under Article 21(2) GDPR.

Unless otherwise stated in this Privacy Policy in relation to specific processing activities, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.


Copyright notice: This Privacy Policy was prepared by the specialist lawyers of IT-Recht Kanzlei and is protected by copyright (https://www.it-recht-kanzlei.de).

Last updated: 28 July 2026