Last updated: September 2026
1. Controller
The controller responsible for processing personal data on this website is:
Eximely UG (limited liability)
Baumgarten 11
96178 Pommersfelden
Germany
Managing Director: Zoer España Manriquez
VAT ID: DE457058152
Email: support@eximely.shop
Phone: +49 151 2037277
Website: https://eximely.shop
2. General Information on Data Processing
We take the protection of your personal data seriously.
Personal data is any information relating to an identified or identifiable natural person. This includes, for example, name, address, email address, telephone number, order information, payment information, and technical data that can be associated with a person or user account.
We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
3. Visiting Our Website
When you access our website, technical information may be processed that is required to provide, secure, and maintain the stability of the online shop.
This may include in particular:
-
IP address or shortened/anonymized IP address
-
Date and time of access
-
Pages accessed
-
Browser type and version
-
Operating system
-
Referrer URL
-
Technical device and connection information
-
Information about errors and security events
Processing is carried out in particular for technical provision of the website, to ensure security, and to detect or prevent misuse.
The legal basis is generally Art. 6 para. 1 lit. f GDPR, insofar as processing is required to safeguard our legitimate interests.
4. Hosting and Technical Operation of the Online Shop
Our online shop is operated via the e-commerce platform Shopify.
In the course of operating the shop, personal data may be processed by Shopify and the technical service providers used by Shopify, insofar as this is necessary for hosting, shop operation, security, checkout, and provision of the respective functions.
Shopify may process personal data in particular in connection with page visits, customer accounts, orders, checkout processes, and technical security functions.
For customers in the European Economic Area, personal data may in particular be processed by the Shopify entity responsible for Europe as well as other affiliated companies and service providers.
For further information on data processing by Shopify, please see Shopify's privacy policy.
5. Orders and Customer Account
When you place an order in our online shop, we process the data necessary to execute the purchase agreement.
This may include in particular:
-
First and last name
-
Billing address
-
Delivery address
-
Email address
-
Telephone number, if provided
-
Ordered products
-
Order number
-
Order date
-
Payment status
-
Shipping and delivery information
-
Other information provided by you in connection with the order
Processing is carried out to process your order, deliver the goods, process payments, provide customer service, and fulfill legal obligations.
The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as processing is necessary to fulfill the contract.
Insofar as we are legally required to retain certain documents, processing is also based on Art. 6 para. 1 lit. c GDPR.
6. Contact
If you contact us by email, telephone, or any other contact method we provide, we process the personal data you provide.
This may include in particular:
-
Name
-
Email address
-
Telephone number
-
Order number
-
Content of your message
-
Other voluntarily provided information
The data is processed to handle and respond to your inquiry.
The legal basis is Art. 6 para. 1 lit. b or lit. f GDPR, depending on the content of the inquiry.
7. Payment Processing
In the course of an order, payment information must be processed.
Depending on the payment method actually offered at checkout, payment data may be transmitted to the respective payment service provider.
Possible payment methods may include credit or debit card, PayPal, Shop Pay, Apple Pay, Google Pay, or Klarna.
Only payment providers that are actually available at checkout are used or data is transmitted to them.
The payment service providers process the data required for payment processing as a general rule in their own capacity as a data controller.
The respective data protection provisions of the payment service provider used may apply additionally.
We do not necessarily receive complete payment data such as full credit card numbers. Processing of such data is generally carried out by the respective payment service provider or the payment system used.
8. Shipping and Delivery
For processing and delivering your order, personal data may be transmitted to shipping and logistics service providers.
This may include in particular:
-
Name
-
Delivery address
-
Telephone number, if required for delivery
-
Email address, if shipping notification is offered
-
Order or shipment information
The transmission is carried out insofar as it is necessary to fulfill the purchase agreement and deliver the ordered goods.
The legal basis is Art. 6 para. 1 lit. b GDPR.
The specific shipping service provider used may vary depending on the order and shipping method.
9. Customer Account
If our online shop allows you to create a customer account, the data entered during registration and use of the customer account may be processed.
This may include in particular name, email address, delivery and billing data, and order history.
Processing is carried out to provide and manage the customer account as well as to process orders.
You can generally have your customer account deleted via the appropriate functions, provided that no legal retention obligations prevent this.
10. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Cookies are small files stored on your device and may, for example, be used to technically provide the online shop, store settings, or – if you have consented – enable statistical or marketing functions.
Technically Required Cookies
Technically required cookies may be used for functions necessary for shop operation.
This may include cookies for:
-
Shopping cart and checkout
-
Session management
-
Security functions
-
Storage of certain settings
-
Compliance with data protection and consent settings
These cookies may be necessary for the shop functions you have requested to be provided properly.
Optional Cookies
Analytics, marketing, and other non-essential technologies are generally only used if an appropriate legal basis exists and – where required – your prior consent has been obtained.
For further information, see our Cookie Policy.
11. Consent Management
We may use consent or cookie management to record and manage your choices regarding non-essential cookies and similar technologies.
In particular, it may be stored whether and to which categories of technologies you have consented or objected.
You can change or revoke your consent at any time for the future via the appropriate data protection settings on our website, insofar as such a function is provided.
12. Google Analytics
If Google Analytics is activated on our shop, Google Analytics may be used for statistical analysis of the use of our website.
In particular, information about page views, interactions, devices used, browsers, and approximate geographic origin may be processed.
Google Analytics is only used if the required legal basis exists and the required consent has been obtained.
In this case, processing is based on Art. 6 para. 1 lit. a GDPR.
If Google Analytics is not activated on our shop, no such data processing takes place via our shop.
13. Google Ads and Conversion Measurement
If we use Google Ads or similar Google advertising functions, technologies for measuring advertising campaigns and attributing conversions may be used.
Non-essential marketing and measurement technologies are only used if an appropriate legal basis exists and – where required – prior consent has been obtained.
For users in the European Economic Area, appropriate consent signals may be taken into account.
If corresponding Google advertising functions are not activated, no processing based on them takes place via our shop.
14. Newsletter and Promotional Emails
If we offer a newsletter and you subscribe, we process your email address and any other data required for sending.
Registration is generally only with your consent.
The legal basis is Art. 6 para. 1 lit. a GDPR.
You can revoke your consent at any time for the future, for example via the unsubscribe link in a newsletter email.
If we do not offer a newsletter or you do not subscribe, your data will not be processed on this basis.
15. Customer Service and Complaints
If you contact us regarding a return, withdrawal, complaint, or other customer matter, we process the data necessary to handle your request.
This may include in particular order number, contact details, product information, communication contents, and any photos or other documents you voluntarily submit.
Processing is carried out to handle your matter, fulfill the purchase agreement, and protect or enforce legal claims.
The legal basis is in particular Art. 6 para. 1 lit. b, c, or f GDPR.
16. Recipients of Personal Data
Personal data may be transmitted to the following categories of recipients to the extent necessary:
-
Shopify and service providers associated with shop operation
-
Payment service providers
-
Shipping and logistics service providers
-
IT and hosting service providers
-
Customer service and communication service providers
-
Tax advisors and other professional advisors
-
Authorities and public agencies, insofar as a legal obligation exists
-
Legal advisors and other service providers, insofar as this is necessary to protect our rights
-
Analytics and marketing service providers, if corresponding services are actually used and the legal requirements are met
Disclosure only takes place if an appropriate legal basis exists for it.
17. Transfer to Third Countries
When using certain service providers, processing of personal data outside the European Union or European Economic Area cannot be ruled out.
Such a transfer only takes place in compliance with the legal requirements of the GDPR.
Where necessary, adequacy decisions of the European Commission or appropriate safeguards such as Standard Contractual Clauses are used in particular.
18. Duration of Storage
We store personal data only as long as necessary for the respective purpose or as long as legal retention obligations exist.
Data related to orders and business transactions may be stored for the duration of the statutory retention periods due to commercial and tax law requirements.
After the respective retention period expires, the data is deleted unless another legal basis or legitimate interest for further storage exists.
19. Your Rights
Subject to the legal requirements, you have the following rights:
Right of Access
You can request information about whether and what personal data we process about you.
Right to Rectification
You have the right to request correction of inaccurate personal data and completion of incomplete data.
Right to Erasure
Under certain circumstances, you can request deletion of your personal data.
Right to Restrict Processing
Under certain circumstances, you can request that we restrict the processing of your personal data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
Right to Object
You can object to certain processing of your personal data, in particular for marketing purposes or on the basis of our legitimate interests.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates applicable data protection laws.
20. Data Protection Officer
If we have appointed a data protection officer, you can contact them with any questions regarding data protection:
Contact details are available from us upon request or are published on our website.
21. Changes to This Privacy Policy
We reserve the right to update this privacy policy at any time to reflect changes in our data processing practices or to comply with legal requirements. The current version is always available on our website.
22. Contact for Data Protection Inquiries
If you have any questions about data protection, your rights, or our data processing, please do not hesitate to contact us using the contact details provided above.