Privacy policy

Controller

Finxful GmbH, Kirchengasse 15a, 92318 Neumarkt, Germany
Represented by: Luis Böhm (Managing Director)
Email: info@finxful.com

Purposes and legal bases

Operating the shop, processing orders, customer accounts, payment and shipping (Article 6(1)(b) GDPR).
Communication and support (Article 6(1)(b)/(f) GDPR).
Marketing/newsletters (double opt-in) based on consent (Article 6(1)(a) GDPR; consent can be withdrawn at any time).
IT security, fraud prevention and server logs (Article 6(1)(f) GDPR, legitimate interests).

Hosting and shop platform

Our shop operates on the Shopify platform. Shopify processes personal data on our behalf (Article 28 GDPR) and, where applicable, as a joint controller. Data may be transferred to third countries; appropriate safeguards, such as EU standard contractual clauses, are used.

Payment and shipping providers

Depending on your selection, we send payment data to the relevant payment provider (e.g. Stripe, PayPal or Klarna) and shipping data to the chosen carrier (e.g. DHL or DPD), in each case to perform the contract (Article 6(1)(b) GDPR).

Cookies and similar technologies

We use technically necessary cookies. We use non-essential cookies and technologies, such as those for analytics and marketing, only with your consent through our consent tool. You can change your choice at any time in the cookie settings. Accepting and declining are equally available.

Server logs

When you visit the website, information such as your IP address, the date and time of the request, URL/referrer and user agent is processed (Article 6(1)(f) GDPR, operation and IT security).

When you subscribe, we store your email address and document the double opt-in. You can withdraw your consent at any time using the unsubscribe link (Article 6(1)(a) GDPR).

Retention

We process personal data only for as long as necessary for the relevant purposes or as required by statutory retention periods, particularly under commercial and tax law.

Your rights

You have rights of access, rectification, erasure, restriction of processing and data portability, as well as the right to object to processing based on legitimate interests. You can withdraw consent at any time with future effect. You may also lodge a complaint with a data protection supervisory authority.

Data protection enquiries

Please contact info@finxful.com.

Last updated: 15 October 2025