Privacy policy

Last updated: 04 August 2025


This Privacy Policy describes how we collect, use, and share your personal data when you visit or make a purchase from Bullacelets via [bullacelets.myshopify.com] (the “Site”). We take your privacy seriously and comply with the requirements of the General Data Protection Regulation (GDPR) and Telecommunications and Telemedia Data Protection Act (TTDSG).





1. Controller



The party responsible for data processing on this website (“Controller”) pursuant to Art. 4(7) GDPR is:


Annabel Beyer von Jutrzenka-Morgenstern

Bullacelets

Schloss 1

86704 Tagmersheim

Germany

Email: info@bullacelets.com





2. Collection and Use of Personal Data



We collect and process your personal data only as necessary and in accordance with applicable laws.



a) Device Information



Collected data: IP address, browser type, operating system, referring URLs, time zone, cookie identifiers, and device identifiers.

Purpose: To display the Site correctly, ensure security, and analyse usage for improvements.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).



b) Order Information



Collected data: Name, billing and shipping address, payment details, email address, phone number.

Purpose: To fulfil orders, process payments, ship products, and communicate with you.

Legal basis: Art. 6(1)(b) GDPR (contract performance); Art. 6(1)(c) (legal obligation).



c) Customer Support



Collected data: Name, email, message content.

Purpose: To respond to inquiries and provide customer support.

Legal basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract-related communication).





3. Cookies and Tracking Technologies



We use cookies and similar technologies (e.g. pixels, tags) to improve user experience and analyse traffic. Non-essential cookies are only used with your explicit consent.


Essential cookies: For shopping cart, login, and site security.

Analytics/Marketing cookies: Only after your opt-in consent via the cookie banner.


You may adjust your cookie preferences at any time via our cookie settings.


For more details about the cookies we use, please see our [Cookie Policy] or click “Cookie Settings” on the website footer.





4. Sharing of Personal Data



We do not sell or rent your data. However, we may share data with third parties as necessary to operate our business:



a) Shopify



We use Shopify Inc. (151 O’Connor Street, Ottawa, ON K2P 2L8, Canada) to host and operate our online store. Shopify processes your data as our data processor under GDPR Article 28.





b) Other Third Parties



We may share personal data:


  • with payment providers (e.g. Stripe, PayPal)
  • with shipping providers (e.g. DHL)
  • to comply with legal obligations (e.g. tax, fraud prevention)
  • with marketing or analytics services (only with consent)






5. Behavioural Advertising



With your consent, we may use your data for personalised ads (e.g., Facebook, Google Ads, Instagram).

You can opt out at any time via:







6. SMS Marketing / Abandoned Cart



If you opt in to receive SMS messages, we may use cookies to detect when you abandon a shopping cart. We will send reminders only if you’ve explicitly consented to SMS communication. Your consent status will never be shared with third parties.





7. Data Retention



We store your personal data only as long as necessary for legal, contractual, or commercial purposes.


  • Order data: retained for at least 10 years (German tax law)
  • Marketing consent: until withdrawn
  • Customer support: deleted after resolution unless legally retained



You may request deletion at any time, subject to retention obligations.





8. Your Rights Under the GDPR



You have the right to:


  • Access your data (Art. 15 GDPR)
  • Rectify inaccurate data (Art. 16 GDPR)
  • Erase your data (“right to be forgotten”, Art. 17 GDPR)
  • Restrict processing (Art. 18 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdraw consent at any time (Art. 7(3) GDPR)
  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)




Supervisory authority for Germany (Bayern):



Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 27, 91522 Ansbach

https://www.lda.bayern.de/


To exercise your rights, please contact us at: info@bullacelets.com





9. Data Transfers



We and some of our service providers (like Shopify) may transfer data to countries outside the EEA, including the USA and Canada.

These transfers are protected by:


  • Adequacy decisions (e.g. Canada)
  • Standard Contractual Clauses (SCCs) approved by the European Commission



You can request a copy of the relevant safeguards by emailing us.





10. Automated Decision-Making



We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.


Our processor (Shopify) may use limited automated tools (e.g., IP denylisting) for fraud prevention, which do not have significant individual impact.





11. Do Not Track



Our website does not respond to “Do Not Track” signals from browsers, as there is no unified standard. We respect your privacy through our consent tools.





12. Changes to This Policy



We may update this Privacy Policy from time to time, for legal or operational reasons.

Please check this page regularly for updates. The most recent version is always valid.





13. Contact



If you have questions about this Privacy Policy or wish to exercise your data rights, contact:


Annabel Beyer von Jutrzenka-Morgenstern

Email: info@bullacelets.com