Privacy Policy

Privacy Policy

Unless otherwise specified below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This only applies if no other indication is made in the subsequent processing operations.

"Personal data" refers to all information relating to an identified or identifiable natural person.

Server Log Files

You can visit our website without providing any personal information.

Each time you access our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in log data (so-called server log files). These stored data include, for example, the name of the accessed page, date and time of access, IP address, transmitted data volume, and the requesting provider.

Processing is carried out based on Article 6(1)(f) GDPR due to our legitimate interest in ensuring the smooth operation of our website and improving our services.

Your data may be transferred to third countries outside the EU, particularly Canada and the USA, where it is processed. The EU Commission has issued an adequacy decision for Canada. For the USA, an adequacy decision under the Trans-Atlantic Data Privacy Framework (TADPF) exists. Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission’s Standard Contractual Clauses.

Contact

Responsible Entity

If you wish to contact us, you can do so at:

David Lepold
Baumbergerstr. 54A
51371 Leverkusen
Germany
Phone: +49 176 63396899
Email: navarobusiness@gmail.com

Initiating Contact via Email

When you contact us via email, we collect your personal data (name, email address, message content) only to the extent provided by you. The purpose of the data processing is to respond to and process your inquiry.

If the contact relates to pre-contractual measures (e.g., product consultation, offer preparation) or an existing contract, the processing is based on Article 6(1)(b) GDPR.

If the contact is made for other reasons, the processing is based on Article 6(1)(f) GDPR, due to our legitimate interest in responding to your inquiry. You have the right to object to the processing of your data at any time for reasons arising from your particular situation.

Your email address will only be used to process your request and will be deleted in accordance with legal retention periods unless you have consented to further processing.

Use of the Contact Form

When you use our contact form, we collect your personal data (name, email address, message content) only to the extent you provide. The purpose of processing is to facilitate contact with you.

If your request is related to pre-contractual measures or an existing contract, the processing is based on Article 6(1)(b) GDPR.

For other requests, processing is based on Article 6(1)(f) GDPR, due to our legitimate interest in responding to inquiries. You have the right to object at any time.

Your email address will be used solely for processing your request. Your data will be deleted after the legal retention period unless you have agreed to further use.

Customer Accounts & Orders

Customer Account

When opening a customer account, we collect your personal data to the extent specified there. Processing serves to enhance your shopping experience and simplify order processing. The legal basis for processing is Article 6(1)(a) GDPR, based on your consent. You may withdraw your consent at any time, without affecting the legality of prior processing. Your customer account will be deleted upon withdrawal.

Collection, Processing & Disclosure of Personal Data for Orders

We collect and process your personal data only as necessary to fulfill and process your order and inquiries. The provision of data is required for contract execution. Failure to provide it means no contract can be concluded. Processing is based on Article 6(1)(b) GDPR.

Your data may be shared with:

  • Shipping companies, dropshipping/fulfillment providers, payment providers, and IT service providersinvolved in processing your order.
  • Third countries outside the EU (such as Canada and the USA), under appropriate legal safeguards.

Reviews & Marketing

Use of Judge.me

We use the "Judge.me" review system by Judge.me Ltd (c/o Buckworths 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB) to collect and display customer reviews.

After an order, you may receive an invitation from us or Judge.me to leave a review. Data such as email, name, phone number, address, product details, and review content may be processed.

For the UK and the USA, Judge.me ensures appropriate legal protections for data processing.

Review Reminder

After your purchase, we may request a review. Processing is based on Article 6(1)(a) GDPR with your consent. You can revoke consent at any time via email or the unsubscribe link.

Payment Processing (Klarna)

We use Klarna Bank AB (Sveavägen 46, 111 34 Stockholm, Sweden) for payment processing. Your data is transferred for contract fulfillment under Article 6(1)(b) GDPR.

For "Pay Later" or "Financing" options, Klarna may conduct a credit check using external agencies. This processing is based on Article 6(1)(f) GDPR due to Klarna’s legitimate interest in preventing fraud.

For more details, visit:
🔗 Germany: Klarna Privacy Policy
🔗 Austria: Klarna Privacy Policy

Data Subject Rights & Storage Duration

Data Retention

After full contract execution, data is stored only for legal retention periods and then deleted.

Your Rights under GDPR

You have the following rights under Articles 15-20 GDPR:

  • Access to your stored data
  • Correction of incorrect data
  • Deletion of data under certain conditions
  • Restriction of processing
  • Data portability

You also have the right to object to processing under Article 21 GDPR, especially for direct marketing purposes.

Right to Lodge a Complaint

You have the right to file a complaint with a data protection authority if you believe your data is not processed lawfully.

For Germany, you can contact:

📍 State Commissioner for Data Protection and Freedom of Information NRW
Postfach 20 04 44, 40102 Düsseldorf
📞 Phone: +49 211 384240
📧 Email: poststelle@ldi.nrw.de

Final Notes

🔹 Last updated: October 22, 2024