Datenschutzerklärung

Introduction

This Privacy Policy explains how mcgeeandco.shop collects, uses, stores, shares and otherwise processes personal information when customers and visitors access our website, place orders, communicate with us or otherwise use our services.

We seek to process personal data in accordance with applicable data-protection legislation, including the General Data Protection Regulation (GDPR) and applicable German privacy and electronic-communications requirements.

Under the GDPR, processing of personal data requires an applicable legal basis, such as consent, performance of a contract, compliance with a legal obligation or legitimate interests where the relevant requirements are satisfied.

Data Controller

For personal-data processing associated with the operation of this online store, the relevant store operator acts as the controller where applicable.

Store contact information currently provided is:

mcgeeandco.shop
Email: info@mcgeeandco.shop

German and EU transparency requirements may require additional controller identification and address information to be published. Those genuine business details must be made available by the store operator where legally required.

Personal Information We May Collect

Depending on how you interact with our website, we may process information including:

Identity Information

• Name;
• Billing name;
• Delivery recipient name; and
• Account information.

Contact Information

• Email address;
• Telephone number where supplied;
• Billing address; and
• Delivery address.

Order Information

• Products ordered;
• Quantity;
• Order value;
• Order number;
• Transaction history;
• Returns;
• Refunds;
• Cancellations; and
• Customer-service history.

Payment Information

Payments may be processed by Shopify and third-party payment providers.

We may receive payment-related information such as:

• Payment status;
• Payment method;
• Transaction identifiers; and
• Limited payment information.

Full payment-card information may be handled directly by authorised payment processors rather than stored by mcgeeandco.shop.

Technical Information

When you use our website, information may be processed such as:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Cookie identifiers;
• Session information;
• Website activity;
• Referring URLs; and
• Technical logs.

Communications

If you contact us, we may process:

• Your message;
• Email address;
• Order details;
• Attachments;
• Complaint information;
• Return information; and
• Previous correspondence.

How We Use Personal Data

We may use personal data to:

• Operate the website;
• Provide requested products and services;
• Process orders;
• Process payments;
• Arrange delivery;
• Provide order notifications;
• Process cancellations;
• Manage statutory withdrawal requests;
• Handle returns and refunds;
• Provide customer support;
• Prevent fraud and abuse;
• Protect website security;
• Maintain business and tax records;
• Comply with legal obligations;
• Establish or defend legal claims;
• Improve store functionality; and
• Send marketing communications where legally permitted.

Legal Bases for Processing

Depending on the activity, processing may rely on:

Performance of a Contract

Processing may be necessary to:

• Process your order;
• Receive payment;
• Deliver products;
• Communicate about your order;
• Process returns; and
• Provide customer service relating to the transaction.

Legal Obligations

We may process information where necessary to comply with obligations relating to:

• Taxation;
• Accounting;
• Consumer rights;
• Product safety;
• Fraud prevention where legally required;
• Regulatory requirements; and
• Legal proceedings.

Legitimate Interests

Where permitted, we may process information for legitimate interests such as:

• Protecting our website;
• Preventing fraud;
• Securing transactions;
• Improving business operations;
• Responding to legitimate enquiries; and
• Establishing or defending legal claims.

Where legitimate interests are relied upon, we consider the relevant interests, necessity of processing and effects on individuals.

Consent

Where legally required, we may request consent before processing information for activities such as:

• Certain marketing communications;
• Certain advertising technologies;
• Analytics cookies; and
• Other non-essential technologies.

Where processing is based on consent, you may withdraw consent for future processing, without affecting the lawfulness of processing carried out before withdrawal.

Shopify

Our online store is hosted using Shopify's ecommerce technology.

Shopify may process information in connection with:

• Hosting;
• Checkout;
• Store functionality;
• Security;
• Fraud prevention;
• Payments where applicable;
• Customer accounts; and
• Related ecommerce services.

Shopify's role and processing activities may depend on the specific service, configuration and market involved.

Service Providers

We may use third parties to support store operations, including:

• Hosting providers;
• Payment processors;
• Shipping and logistics companies;
• Fulfilment providers;
• Analytics providers;
• Customer-service tools;
• Email providers;
• Fraud-prevention providers;
• Accounting providers; and
• Technical service providers.

We disclose personal information only to the extent reasonably necessary for the relevant service, legal requirement or legitimate business purpose.

Shipping Providers

To deliver an order, we may provide shipping providers with information such as:

• Recipient name;
• Delivery address;
• Contact details;
• Order reference; and
• Information reasonably necessary for delivery.

Cookies and Similar Technologies

Our website may use cookies, pixels, local storage and similar technologies.

Some technologies are necessary for functions such as:

• Shopping carts;
• Checkout;
• Security;
• Authentication;
• Fraud prevention; and
• Remembering privacy choices.

Other technologies may be used for analytics, personalisation or advertising.

Under §25 TDDDG, storing information on or accessing information from a user's terminal device generally requires consent unless an applicable statutory exception applies, including where the technology is strictly necessary to provide a digital service expressly requested by the user.

Where required, non-essential technologies will therefore be activated only after appropriate consent.

Cookie Choices

Where a cookie-consent interface is provided, users can use it to:

• Accept applicable cookies;
• Reject non-essential cookies; or
• Change privacy preferences.

Withdrawal or modification of consent applies prospectively.

Marketing Communications

Where permitted by law, we may send marketing communications concerning products, promotions or store updates.

Where consent is required, marketing will be sent on the basis of valid consent.

Recipients may unsubscribe using the mechanism provided in a communication or by contacting:

info@mcgeeandco.shop

Transactional communications relating to an order are not necessarily marketing communications.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for applicable legal obligations.

Retention periods may depend on:

• The nature of the information;
• Whether an order was placed;
• Tax and accounting obligations;
• Consumer-protection requirements;
• Fraud-prevention requirements;
• Applicable limitation periods; and
• The need to establish, exercise or defend legal claims.

Information will be deleted, anonymised or otherwise handled appropriately when continued retention is no longer necessary, subject to legal obligations.

International Data Transfers

Shopify and other service providers may process information in countries outside Germany or the European Economic Area.

Where international transfers are subject to GDPR restrictions, appropriate transfer mechanisms and safeguards will be used where required, such as:

• Adequacy decisions;
• Standard Contractual Clauses; or
• Other legally recognised safeguards.

Data Security

We use reasonable administrative, organisational and technical measures designed to protect personal information against:

• Unauthorised access;
• Unlawful disclosure;
• Loss;
• Misuse;
• Destruction; and
• Alteration.

No internet-based system can be guaranteed to be completely secure.

Customers should also take appropriate steps to protect passwords, accounts and devices.

Your GDPR Rights

Subject to the conditions and exceptions contained in applicable law, individuals may have rights including:

• The right to access personal data;
• The right to rectify inaccurate data;
• The right to erasure;
• The right to restriction of processing;
• The right to data portability;
• The right to object to certain processing;
• The right to withdraw consent;
• Rights relating to certain automated decision-making; and
• The right to lodge a complaint with a competent supervisory authority.

The GDPR expressly provides rights of access, rectification and erasure, among other data-subject rights.

Exercising Your Privacy Rights

To submit a privacy request, contact:

info@mcgeeandco.shop

We may request information reasonably necessary to verify identity before acting on a request.

Children

Our store is not intended to knowingly collect personal data from children in circumstances prohibited by applicable law.

If you believe that a child has provided personal information unlawfully, contact us.

Third-Party Links

Our website may contain links to independent third-party websites.

We are not responsible for the privacy practices of websites that we do not control.

Users should review the privacy information of third-party websites before providing personal information.

Changes to This Privacy Policy

We may update this Privacy Policy where appropriate to reflect:

• Changes in law;
• Changes to Shopify functionality;
• Changes in service providers;
• Changes in store practices; or
• Security and operational developments.

The updated policy will display a revised "Last Updated" date.

Contact

Privacy questions and requests may be directed to:

mcgeeandco.shop
Email: info@mcgeeandco.shop