The controller responsible for data processing is:
We are pleased about your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your personal data.
Privacy Policy
Last updated: September 2026
1. Controller
The controller responsible for the processing of personal data is the operator of this online shop named in the heading of this Privacy Policy and/or in the legal notice (Imprint).
The controller's contact details can be found in the information provided there.
Our online shop offers exclusively digital products and digital content. No physical goods are shipped. Therefore, no personal data is processed for the purpose of handling physical shipments or for transferring data to shipping service providers.
2. General Information on Data Processing
We process personal data only insofar as this is necessary to provide our website, perform contracts, process inquiries, handle payments, comply with legal obligations, or on the basis of consent you have provided.
Personal data means any information relating to an identified or identifiable natural person.
Processing is carried out in particular on the basis of the following legal grounds:
-
Art. 6(1)(a) GDPR – consent
-
Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures
-
Art. 6(1)(c) GDPR – compliance with a legal obligation
-
Art. 6(1)(f) GDPR – legitimate interests
3. Hosting and Server Log Data
Our website is operated via Wix.com.
When you access our website, technically necessary information may be processed. This may include, in particular:
-
IP address
-
Date and time of access
-
Pages and content accessed
-
Browser type and browser version
-
Operating system
-
Referrer URL
-
Technical information required to provide and secure the website
Processing is carried out in particular for the technical provision, stability, and security of our website and for detecting and preventing misuse and attacks.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional operation of our online shop.
Server and technical log data is generally stored only for as long as necessary for the purposes stated above. Where technically provided for, such data is generally automatically deleted or overwritten after a short period, usually within approximately 7 days, unless longer storage is necessary to investigate a specific security incident.
Wix processes personal data in accordance with its own Privacy Policy and may use affiliated companies and sub-processors for this purpose. Processing may also take place outside the European Union or the European Economic Area. Wix describes the relevant data transfers and service providers in its current privacy documentation.
4. Orders and Contract Processing
When you order a digital product from our online shop, we process the data necessary to perform the contract.
This may include, in particular:
-
First and last name
-
Email address
-
Billing and/or payment details
-
Order details
-
Products purchased
-
Date and scope of the order
-
Contact details where necessary
Processing is carried out to process your order, provide the purchased digital content, communicate with you, and comply with legal obligations.
The legal basis is Art. 6(1)(b) GDPR.
Where we are legally required to retain certain documents, further processing is carried out on the basis of Art. 6(1)(c) GDPR.
Since we offer exclusively digital products, no data is required for physical shipping.
5. Customer Account
Our website may provide the option to create a customer account.
When registering for and using a customer account, the following data may be processed in particular:
-
Name
-
Email address
-
Login or access credentials
-
Order history
-
Information about purchased digital products
-
Other data stored by the user in their customer account
Processing is carried out to establish and manage the customer account and to provide the associated functions.
The legal basis is Art. 6(1)(b) GDPR.
You may generally request the deletion of your customer account, unless statutory retention obligations or other legitimate reasons prevent immediate deletion.
6. Wix Forms / Contacting Us
We use Wix Forms for contact and inquiry forms.
If you contact us via a form, we process the data you enter. This may include, in particular:
-
Name
-
Email address
-
Other contact details provided voluntarily
-
Content of your message
-
Any attachments or other information you provide
Processing is carried out to process and respond to your inquiry.
The legal basis is Art. 6(1)(f) GDPR. If your inquiry concerns the conclusion or performance of a contract, Art. 6(1)(b) GDPR may also apply.
The data is deleted once your inquiry has been conclusively dealt with and there are no statutory retention obligations or legitimate reasons for further storage.
7. Wix Chat / Live Chat
A live chat function provided by Wix may be used on our website.
When you use the chat, the information you provide during the communication is processed. This may include, in particular:
-
Name or name provided
-
Email address, if provided
-
Content of the communication
-
Time of the communication
-
Images or other files you provide, where applicable
Processing is carried out to handle your inquiry and communicate with you.
The legal basis is Art. 6(1)(f) GDPR. If the communication serves the preparation or performance of a contract, Art. 6(1)(b) GDPR may also apply.
Please do not provide information through the chat that is not necessary for processing your inquiry.
8. Wix Stores
We use Wix Stores to provide and operate our online shop.
Product, order, customer, and account data may be processed insofar as this is necessary to provide the shop and process orders.
Processing is carried out in particular on the basis of Art. 6(1)(b) GDPR.
Since our offering consists exclusively of digital products, no processing takes place for the organization or execution of physical goods shipments.
9. Payments via Wix Payments
We use Wix Payments to process payments.
Depending on the payment method selected, credit or debit card payments and other payment methods supported by Wix Payments, including Apple Pay and Google Pay, may be processed.
We generally receive only the information necessary to process and allocate the payment. We do not store complete payment or card details ourselves insofar as this is not necessary for a particular payment transaction or required by law.
Payment processing may require the involvement of other payment service providers, payment networks, and financial institutions. Wix states in particular that information relating to payments may be transferred to participating payment networks, banks, and providers of the respective payment method.
The legal basis for payment processing is Art. 6(1)(b) GDPR.
Where processing is necessary to comply with statutory tax or commercial retention obligations, the legal basis is Art. 6(1)(c) GDPR.
As part of payment processing, Wix, participating payment service providers, or financial institutions may carry out automated checks for fraud prevention and risk management. These checks may be carried out under the responsibility of the respective payment service provider.
10. PayPal
We also offer PayPal as a payment option.
If you select PayPal as your payment method, the data required to process the payment is transmitted to PayPal. This may include, in particular, your name, email address, payment information, billing details, transaction data, and other information required to process the payment.
Processing is carried out for the performance of the contract pursuant to Art. 6(1)(b) GDPR.
PayPal generally processes personal data for its own purposes and under its own responsibility under data protection law. PayPal's Privacy Policy therefore also applies to processing carried out by PayPal.
11. Newsletter
We offer a newsletter and use the newsletter functions provided by Wix for this purpose.
If you subscribe to our newsletter, we process, in particular, your email address and, where applicable, your name.
The newsletter is generally sent only after obtaining your prior consent.
The legal basis is Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future, for example by using the unsubscribe link contained in each newsletter.
After unsubscribing, your email address is generally removed from the active newsletter distribution list. Data required to demonstrate that consent was granted or required due to statutory obligations may continue to be stored.
12. Wix Site Search
The Wix Site Search function may be used on our website.
When using the search function, technical information and the search terms you enter may be processed insofar as this is necessary to provide and improve the search function.
Processing is carried out to provide the search function expressly requested by you and is therefore generally based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR insofar as necessary for technical provision and security.
13. GoAffPro / Affiliate and Referral Program
We use GoAffPro to technically manage our affiliate and referral program.
If you access our website via a corresponding affiliate or referral link, technical information may be processed to attribute the referral and cookies or similar technologies may be placed on your device where applicable.
This may include, in particular, information about the referral link, a referral ID, and technical identifiers.
Where cookies or similar technologies are used that are not strictly necessary, they are used only on the basis of your prior consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.
The details of the technologies used by GoAffPro and its data processing are additionally governed by the information provided by the respective provider.
14. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Cookies are small files stored on your device or used to access information already stored on your device.
We distinguish in particular between:
14.1 Technically Necessary Cookies
Technically necessary cookies are required for certain functions of our website to be provided, for example:
-
Shopping cart and shop functions
-
Customer account
-
Login
-
Security functions
-
Basic Wix functions
-
Storage of certain technical settings
Where cookies or similar technologies are strictly necessary for the provision of a digital service expressly requested by you, consent pursuant to Section 25(1) TDDDG is generally not required.
14.2 Non-Essential Cookies
Non-essential cookies or similar technologies are used only where the corresponding consent has been obtained, unless a statutory exception applies.
You may provide or refuse your consent through our cookie banner and adjust your settings there.
Consent that has been granted may be withdrawn or adjusted at any time with effect for the future via the cookie settings.
15. Cookie Consent Management
We use the cookie consent management functions provided by Wix.
The cookie banner allows, in particular, the acceptance or rejection of non-essential cookies and the adjustment of individual settings.
Your cookie settings decision may be stored so that we can respect your selection.
Wix provides functions through which non-essential cookies and scripts can be blocked depending on the consent given.
16. No Independent Analytics or Advertising Tracking Services
To the best of our current knowledge, we do not use independent services such as Google Analytics, Google Ads, Meta Pixel, or comparable external advertising tracking services.
In particular, we do not use the services mentioned above to create user profiles for personalized advertising.
This does not exclude technically necessary functions of the platform and applications we use. Wix itself may provide its own technical or statistical functions as part of its platform. Where consent is required for such functions, this is taken into account through the cookie consent management system.
17. Legal Bases and Legitimate Interests
Where we process personal data on the basis of Art. 6(1)(f) GDPR, our legitimate interests include, in particular:
-
The technical provision of our website
-
Ensuring the security of our systems
-
Preventing misuse and fraud
-
Processing customer inquiries
-
Managing our online shop
-
Asserting or defending legal claims
18. Recipients of Personal Data
Personal data may, insofar as necessary for the purposes stated above, be transferred to or processed by the following categories of recipients in particular:
-
Wix and companies affiliated with Wix
-
Technical service providers and sub-processors of Wix
-
Payment service providers and payment networks
-
PayPal
-
Providers of affiliate/referral systems
-
Tax advisors and other service providers engaged to fulfill legal obligations
-
Authorities and other bodies where there is a legal obligation to do so
Data is disclosed only insofar as there is an appropriate legal basis under data protection law.
Wix states that, depending on the functions and services used, international data transfers may also take place. Such transfers are subject to the appropriate data protection mechanisms and safeguards specified by Wix.
19. Transfers to Third Countries
When using Wix and certain services connected with Wix, personal data may be processed outside the European Union or the European Economic Area.
According to its own information, Wix uses appropriate data protection mechanisms depending on the recipient and transfer. These may include adequacy decisions of the European Commission or Standard Contractual Clauses.
Any such processing takes place exclusively within the framework of the applicable data protection requirements.
20. Retention Period
We generally store personal data only for as long as necessary for the respective purpose.
In addition, statutory retention obligations may apply. In particular, documents relevant under commercial and tax law may be retained for the periods prescribed by law.
After the applicable retention period has expired, the data will be deleted unless another legal basis or legitimate interest permits or requires further storage.
21. Data Security
We take appropriate technical and organizational measures to protect personal data against loss, destruction, manipulation, unauthorized access, or other unauthorized processing.
The security measures used are regularly reviewed and, where necessary, adapted in accordance with technological developments and existing risks.
22. Obligation to Provide Personal Data
When placing an order, you must provide the personal data that is necessary to establish and perform the contract.
Without this data, an order or the provision of the purchased digital product may not be possible.
The provision of additional data that is not strictly necessary is generally voluntary.
23. Automated Decision-Making and Profiling
We generally do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
However, as part of payment processing, the payment service providers we use may carry out their own automated checks, for example for fraud prevention or risk management. The respective payment service provider is generally responsible for this processing.
24. Your Rights
Subject to the applicable legal requirements, you have, in particular, the following rights:
Right of Access – Art. 15 GDPR
You may request information as to whether and which personal data we process about you.
Right to Rectification – Art. 16 GDPR
You may request the correction of inaccurate personal data or the completion of incomplete personal data.
Right to Erasure – Art. 17 GDPR
Under the statutory conditions, you may request the deletion of your personal data.
Right to Restriction of Processing – Art. 18 GDPR
Under the statutory conditions, you may request the restriction of the processing of your personal data.
Right to Data Portability – Art. 20 GDPR
Under the statutory conditions, you have the right to receive certain personal data in a structured, commonly used, and machine-readable format or to request its transmission to another controller.
Right to Withdraw Consent – Art. 7(3) GDPR
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
The lawfulness of processing carried out prior to withdrawal remains unaffected.
25. Right to Object – Art. 21 GDPR
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data where such processing is based on Art. 6(1)(e) or Art. 6(1)(f) GDPR.
Where personal data is processed for the purpose of direct marketing, you may object to such processing at any time.
Following an objection, the personal data concerned will no longer be processed for these purposes unless there are compelling legitimate grounds for the processing or the processing serves the establishment, exercise, or defense of legal claims.
26. Right to Lodge a Complaint with a Data Protection Authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
The following data protection supervisory authority is generally responsible for our company:
The Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI)
Ludwig-Erhard-Str. 22, 7th floor
20459 Hamburg
Germany
Telephone: +49 40 428 54-4040
Email: mailbox@datenschutz.hamburg.de
The contact details correspond to the current information provided by the HmbBfDI.
The right to lodge a complaint exists independently of any other administrative or judicial remedies.
27. Data Protection Officer
No data protection officer has been appointed for our company because, based on our current organizational structure, we are not legally required to appoint one.
Under Section 38 BDSG, the legal obligation for non-public bodies generally applies where at least 20 persons are regularly employed in the automated processing of personal data. Additional statutory special cases also apply.
28. External Links
Our website may contain links to external third-party websites.
We have no influence over the data processing or content of those external websites. The respective operator is solely responsible for the processing of personal data on linked websites.
We recommend reviewing the respective privacy policies of the external providers.
29. Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy if legal requirements, the services we use, or the nature of our data processing change.
The current version published on our website shall apply in each case.
Last updated: September 2026
