Data protection

Privacy Policy

Gotti Cube – Owner Nikolas Heddergott

1. Controller
The controller in the sense of the General Data Protection Regulation is:

Gotti Cube – Owner Nikolas Heddergott

GutsMuthsstraße 2,04177 Leipzig
Germany
Email: contact@gotticube.eu

Further information can be found in the imprint.

2. Hosting and Shop System

Our website is operated via Shopify.

The provider is Shopify International Ltd. (Europe) or Shopify Inc. (Canada/USA).
In the course of use, personal data may be processed on servers outside the EU.

Data transfer takes place on the basis of standard contractual clauses according to Art. 46 GDPR.

Further information:
https://www.shopify.de/legal/datenschutz

3. Collection and Processing of Personal Data

We collect personal data when you:

  • visit our website
  • place an order
  • contact us
  • use our shop

The processed data includes in particular:

  • Name
  • Address
  • Email address
  • Phone number (optional)
  • Payment data
  • Order data

Processing is carried out for contract fulfillment in accordance with Art. 6 Para. 1 lit. b GDPR.

4. Payment Providers

We use various payment services for payment processing:

Shopify Payments

Payment processing is done via Shopify Payments.

Payment data may be transmitted to corresponding payment service providers (e.g., credit card providers, Apple Pay, Google Pay).

PayPal

We offer payment via PayPal.

The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A.
Data processing is carried out in accordance with PayPal's privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Shop Pay

Additionally, we offer payment via Shop Pay (a Shopify service).
Your data may be stored here for faster processing of future purchases.

5. Shipping Service Provider

Delivery is handled by DHL.

The following data is transmitted for delivery:

  • Name
  • Delivery address
  • possibly email address

Processing is carried out for contract fulfillment in accordance with Art. 6 Para. 1 lit. b GDPR.

6. Use of Apps and Third-Party Providers

We use various Shopify apps to optimize our offering:

  • Blockify Age Verification
  • Timesact Pre-order
  • Translate & Adapt (language adaptation)
  • Conversion Bear Trust Badges
  • Judge.me Reviews (customer reviews)
  • SendWILL Email Popups (email collection)
  • Shopify Messaging (customer communication)

This may involve the processing of personal data, in particular:

  • IP address
  • Usage data
  • Email addresses
  • Customer interactions

Processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR (consent) or lit. f GDPR (legitimate interest).

7. Customer Reviews (Judge.me)

We use the Judge.me service to display customer reviews.

The following data may be processed:

  • Name
  • Review
  • possibly other voluntary information

The use is for the purpose of improving our offering.

8. Email Marketing / Popups

On our website, we use popups to collect email addresses (e.g., for offers or information).

Use is only with your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

You can withdraw your consent at any time.

9. Meta Ads (Facebook & Instagram)

We use services from Meta Platforms Ireland Limited for placing advertisements.

If you consent, a tracking pixel is used to evaluate user behavior and optimize advertising.

Data may be transferred to the USA.
Processing is based on your consent.

Further information:
https://www.facebook.com/privacy/policy/

10. Google Merchant Center

We use the Google Merchant Center to display our products on Google.

Product data is transmitted to Google Ireland Limited.

Processing of personal data generally only occurs when interacting with Google services.

11. Cookies and Consent

Our website uses cookies.

When you first visit our website, you can decide via a cookie banner which cookies may be set.

You can withdraw your consent at any time.

12. Customer Account

If you create a customer account, we store your data for simplified order processing.

Use is voluntary.

13. Contacting Us

If you contact us (e.g., by email or form), we process your data to handle your request.

14. Your Rights

You have the right to:

  • Information
  • Rectification
  • Erasure
  • Restriction of processing
  • Data portability
  • Withdraw your consent

15. Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority.