Data protection

1. Controller

erdkinder, Florian Kuhlert, Straubstr.2, E-Mail: kontakt@kuhlert-media.de .

2. Hosting and Shop System (Shopify)

Our online shop is operated via the Shopify platform by Shopify International Ltd., Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, Ireland. When you visit our website, Shopify processes server log data on our behalf (IP address, date and time, page accessed, browser type). Shopify may transfer data to the USA and Canada; this is based on standard contractual clauses of the EU Commission and the EU-US Data Privacy Framework. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in secure, stable shop operation). Further information: shopify.com/legal/privacy.

3. Order and Contract Processing

To process your order, we process your name, address, email address, possibly telephone number, and order and payment data (Art. 6 para. 1 lit. b GDPR). The data will be passed on to the following service providers as far as necessary for fulfillment:

  • Printing and Shipping Partner: [e.g. Printful Europe / Printify / Gelato – Company, Address] receives name, delivery address, and order content for production and shipping.
  • Shipping Provider: [DHL / DPD / …] receives name, delivery address, and optionally email for shipping notifications.
  • Payment Provider: Shopify Payments (Stripe), PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg), Klarna, Apple Pay/Google Pay – depending on the chosen payment method. These process payment data under their own responsibility.

We store order data for the duration of the statutory retention periods (6 or 10 years, § 147 AO, § 257 HGB).

4. Customer Account

You can voluntarily create a customer account. The data stored there will be deleted if you delete the account or ask us to do so (Art. 6 para. 1 lit. b GDPR).

5. Contact Form and Email

If you write to us via the contact form or by email, we process your information to answer your request (Art. 6 para. 1 lit. b or f GDPR). The data will be deleted after the request has been processed, unless there are retention obligations.

6. Cookies

Our shop uses technically necessary cookies (shopping cart, login, language, security; § 25 para. 2 TDDDG, Art. 6 para. 1 lit. f GDPR). We only set statistics and marketing cookies (e.g. Shopify Analytics, [Meta Pixel / Google Analytics – only if used]) with your consent via the cookie banner (§ 25 para. 1 TDDDG, Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time in the cookie banner.

7. Newsletter

If you subscribe to our newsletter, we store your email address based on your consent (Art. 6 para. 1 lit. a GDPR, double opt-in). Sent via [Shopify Email / Klaviyo / …]. You can unsubscribe at any time via the link in every email.

8. Social Media

We operate profiles on Instagram and TikTok. When accessing these profiles, the data protection regulations of the respective providers apply. We do not integrate social media plugins on our website; the icons are simple links.

9. Fonts

The fonts Neuton and Darumadrop One are loaded [locally from the shop server / via Google Fonts]. When loaded via Google Fonts, your IP address is transmitted to Google Ireland Ltd. (Art. 6 para. 1 lit. a GDPR, consent via the cookie banner). Recommendation: Host fonts locally in the theme, then this paragraph is not necessary.

10. Your Rights

You have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can also lodge a complaint with a data protection supervisory authority, e.g. with the authority responsible for Baden-Württemberg.

11. Changes

We will adjust this statement if the legal situation or our services change. Status: 09/2026.