Privacy policy

Contact Details of the Controller

The controller responsible for this website within the meaning of the General Data Protection Regulation (GDPR) is Thi Cham Pham, Ravensburgstraße 7, 17034 Neubrandenburg, Germany, Tel.: +49 157 52231077, Email: contact@redgiant.store.
The controller for the processing of personal data is the natural person who, alone or jointly with others, determines the purposes and means of processing personal data.

Data Collected

Whenever you access the contents of this website, data necessary for your visit is temporarily stored to display the site to you. The following data is collected:

  • The website visited

  • Date and time of access

  • IP address

  • Hostname of the accessing computer

  • Source/referrer from which you accessed the website

  • Message indicating whether the retrieval was successful

  • Amount of data transferred

  • Information about the browser type and version used

  • Operating system

The data is processed on the basis of Article 6(1)(f) GDPR.

Cookies and External Services

To make the use of our website convenient and functional, we use so-called cookies. These small text files are stored on your device. Some cookies are active only during your current session and are automatically deleted when you close the browser (“session cookies”). Others are stored for a longer period to recognize settings and usage patterns during future visits (“persistent cookies”).

The processing of personal data via cookies is carried out – depending on the purpose – on the basis of:

  • Art. 6(1)(b) GDPR for performance of a contract,

  • Art. 6(1)(a) GDPR where consent has been granted, or

  • Art. 6(1)(f) GDPR to safeguard our legitimate interest in a technically stable and user-friendly website.

Our website is hosted and technically operated by the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”). Data may also be transmitted to the following affiliated companies: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada; Shopify Data Processing (USA) Inc.; Shopify Payments (USA) Inc.; and Shopify (USA) Inc.

All data collected through our website is processed on Shopify’s servers. We have concluded a data processing agreement with the provider to ensure your data is handled in accordance with data protection regulations and not disclosed to unauthorized third parties.

The transfer of personal data to Canada is based on an adequacy decision by the European Commission, which confirms an adequate level of data protection. For transfers of data to the USA, Shopify uses the European Commission’s Standard Contractual Clauses to ensure a level of data protection comparable to that in the EU.

You can control or block the use of cookies at any time via your browser settings. Please note that disabling certain cookies may mean that not all functions of our website are fully usable.

Contacting Us

When you contact us via email or the contact form provided on this website, the information you provide is used solely to process your request. Depending on the content of your message, this may include personal data such as your name, email address, and any additional information you voluntarily provide.

The legal basis for processing this data is Art. 6(1)(f) GDPR – our legitimate interest lies in responding to your inquiry efficiently and communicating with you. If your message aims at concluding or fulfilling a contract, processing is additionally based on Art. 6(1)(b) GDPR.

Your data will be deleted once your inquiry has been conclusively resolved, unless legal retention obligations prevent deletion.

Use of Customer Data for Direct Marketing

Subscribing to Our Email Newsletter
When you subscribe to our email newsletter, we will regularly send you updates by email about current offers and news from our range. Only your email address is required to receive the newsletter. Additional information is optional and used for personalized addressing if provided.

Subscription is via the double opt-in process: after registering, you will receive an email with a confirmation link. Your subscription only becomes effective when you click this link, ensuring that the registration genuinely originates from you.

By clicking the confirmation link, you give us your explicit consent to process your personal data in accordance with Art. 6(1)(a) GDPR. We also store your IP address and the date and time of registration for protection against misuse and legal verification.

Your data will be used exclusively for sending the newsletter and will not be shared with third parties. You can unsubscribe at any time using the unsubscribe link included in each newsletter or by sending an informal request to the address stated in the legal notice. After unsubscribing, your email address will be promptly removed from our distribution list unless a legal permission or separate consent for further use exists.

Newsletter to Existing Customers
If you have provided your email address in the course of a purchase, we reserve the right to send you information by email about similar products or services from our range without requiring separate consent. This is based on § 7(3) UWG in conjunction with our legitimate interest in direct marketing pursuant to Art. 6(1)(f) GDPR.

You may object to this use of your email address for advertising purposes at any time, free of charge except for transmission costs at basic rates. Upon receipt of your objection, we will stop sending such emails.

Newsletter via Shopify Email
We send our newsletters using Shopify’s “Shopify Email” service. Data you provide during subscription will be used exclusively for sending the newsletter and remain on Shopify’s servers in Canada. Processing is based on your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.

Customer Account
If you create a personal customer account on our website, we process the data you provide in the input form solely for managing your account and processing future orders. The legal basis is Art. 6(1)(b) GDPR, as processing is necessary for pre-contractual measures and contract performance.

Creating a customer account is voluntary. You can request deletion of your account at any time via the contact address provided in the legal notice. After deletion, your data will be removed provided all contractual matters are settled and no legal retention obligations apply.

Order Processing
To process orders via our online shop, we process personal data you provide during the ordering process. Processing is based on Art. 6(1)(b) GDPR to perform pre-contractual measures and fulfill contracts.

If necessary for delivery and payment, we share personal data (e.g., name, address, email, payment details) with involved service providers.

Payment Processing via Shopify Payments
We use “Shopify Payments” provided by Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. When you select a payment method offered by Shopify Payments, your payment data (e.g., name, address, credit card details, bank account, transaction number) will be transmitted to Shopify and, if applicable, other payment providers. Processing is solely for payment processing and based on Art. 6(1)(b) GDPR.

For more information, visit: https://www.shopify.com/legal/privacy

Payment via PayPal
If you select a PayPal payment method, payment is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. Depending on the payment method, personal data (name, address, email address, payment details, and order information) will be transmitted to PayPal. Processing is based on Art. 6(1)(b) GDPR and is limited to what is necessary for payment processing.

PayPal may also perform credit checks, using so-called score values. This is based on Art. 6(1)(f) GDPR to protect against payment defaults.

For more information, visit: https://www.paypal.com/us/legalhub/paypal/privacy-full

Use of Google Analytics 4
We use Google Analytics 4 provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin 4, Ireland. This service helps us analyze how visitors use our website to improve our offering.

Google Analytics 4 operates more privacy-friendly than earlier versions, using events instead of cookies by default. Your IP address may be processed but is automatically shortened so it cannot be directly linked to you.

The legal basis is your consent under Art. 6(1)(a) GDPR, given via the cookie banner. Without consent, no tracking occurs. You may withdraw consent anytime by changing the cookie banner settings.

Processing is based on a data processing agreement with Google. Transfers to the USA are possible, but Google is certified under the EU-US Data Privacy Framework.

More info: https://policies.google.com/privacy

Facebook Pixel (Planned Use)
We reserve the right to use Facebook Pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, for conversion tracking and targeted advertising. With your consent under Art. 6(1)(a) GDPR, user information (e.g., IP address, browser data, visited pages) will be collected and possibly transferred to Meta.

Processing occurs only with prior consent via our cookie consent tool, which can be withdrawn at any time.

More info: https://www.facebook.com/about/privacy

Cookie Consent Tool
We use a cookie consent tool to comply with legal requirements. It appears upon your first visit and lets you choose which cookies and services to consent to. Only non-essential cookies are activated after your express consent.

If personal data such as your IP address is processed, this is based on Art. 6(1)(f) GDPR for a privacy-compliant, user-friendly website, and Art. 6(1)(c) GDPR to fulfill legal obligations.

Your Data Protection Rights
You have the rights to access, rectification, erasure, restriction, notification, data portability, and withdrawal of consent, as per Arts. 15–20 and 7(3) GDPR. You also have the right to object under Art. 21 GDPR.

Storage Period
The duration of data storage depends on the processing purpose, legal basis, and applicable retention periods. Data is deleted once no longer needed, unless retention is legally required.