Datenschutzerklärung
This Privacy Policy explains how jopokart.shop collects, uses, discloses, stores, and otherwise processes personal information when you visit our website, purchase products, contact us, or otherwise interact with our services.
For privacy-related enquiries:
Email: info@jopokart.shop
1. Data Controller
For personal data processed in connection with jopokart.shop, jopokart.shop acts as the controller where it determines the purposes and means of processing.
Privacy enquiries and data protection requests may be submitted to:
The GDPR requires controllers to provide information concerning identity, contact details, processing purposes, legal bases, recipients, retention, and data-subject rights.
2. Personal Data We May Collect
Depending on how you interact with our website, we may process information including:
Contact Information
This may include:
- name;
- email address;
- telephone number;
- billing details;
- delivery details.
Order Information
This may include:
- products ordered;
- quantity;
- order value;
- transaction status;
- delivery status;
- returns;
- refunds;
- order history.
Payment Information
Payments are generally processed through third-party payment service providers.
Depending on the payment method used, payment providers may process payment card information, billing information, transaction identifiers, and fraud-prevention information.
jopokart.shop does not necessarily receive or store complete payment-card numbers.
Technical Information
When you use our website, certain technical information may be processed automatically, including:
- IP address;
- browser type;
- device information;
- operating system;
- approximate location derived from IP information;
- website activity;
- referral information;
- session data;
- cookie identifiers;
- security logs.
Communications
If you contact us, we may process the content of your correspondence and information necessary to respond to your request.
3. How We Use Personal Data
We may process personal information for purposes including:
- accepting and managing orders;
- processing payments;
- arranging delivery;
- providing order confirmations and updates;
- processing cancellations, returns, and refunds;
- responding to customer service enquiries;
- preventing fraud and misuse;
- maintaining website security;
- complying with accounting, tax, consumer protection, and other legal obligations;
- establishing, exercising, or defending legal claims;
- improving our website and customer experience;
- analyzing website performance where legally permitted;
- sending marketing communications where legally permitted.
4. Legal Bases Under the GDPR
Where the GDPR applies, personal data may be processed on one or more of the following legal bases.
Contract
Processing may be necessary to enter into or perform a contract with you, including processing an order, payment, delivery, return, or refund.
Legal Obligation
We may process information where necessary to comply with legal requirements, including tax, accounting, consumer protection, fraud prevention, and regulatory obligations.
Legitimate Interests
We may process information where necessary for legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
Legitimate interests may include:
- fraud prevention;
- network security;
- protection of our business;
- improving services;
- handling legal claims;
- internal administration.
Consent
Where required, we may rely on consent, including for certain cookies, analytics technologies, or marketing activities.
You may withdraw consent at any time, without affecting processing lawfully carried out before withdrawal.
5. Shopify
Our online store is operated using Shopify technology.
Shopify may process personal data to provide hosting, checkout, security, technical infrastructure, analytics, commerce functionality, fraud prevention, and related services.
Information processed through Shopify may be handled in accordance with Shopify's own privacy and data processing arrangements.
6. Payment Providers
When you choose a payment method, personal information may be shared with payment processors, banks, card networks, digital wallet providers, or other financial service providers as necessary to complete the transaction and prevent fraud.
These providers may act as processors or independent controllers depending on the circumstances.
7. Shipping and Fulfillment Providers
We may disclose necessary personal information to carriers, logistics providers, fulfillment partners, warehouses, and related service providers for the purpose of delivering your order.
Information provided may include your:
- name;
- delivery address;
- telephone number;
- email address;
- order information.
8. Cookies and Similar Technologies
jopokart.shop may use cookies and similar technologies for purposes such as:
- operating the shopping cart;
- maintaining secure sessions;
- remembering preferences;
- checkout functionality;
- fraud prevention;
- measuring website performance;
- analytics;
- advertising, where legally permitted.
In Germany, storing or accessing information on a user's device generally requires consent unless the technology is strictly necessary for transmission or for a digital service expressly requested by the user.
Where legally required, non-essential cookies will only be used after obtaining appropriate consent.
9. Marketing Communications
We may send marketing emails only where permitted under applicable law.
Where consent is required, marketing messages will be sent only after obtaining valid consent.
You may unsubscribe from marketing communications using the unsubscribe mechanism provided in the communication or by contacting:
Transactional messages concerning orders, payments, security, returns, refunds, or important service information are not necessarily marketing communications.
10. Sharing Personal Data
We may share personal data where reasonably necessary with:
- Shopify;
- payment providers;
- shipping and logistics partners;
- hosting and IT service providers;
- security and fraud-prevention providers;
- analytics providers where legally permitted;
- professional advisers;
- accountants;
- legal advisers;
- competent governmental authorities where required by law.
We do not disclose personal data merely because another party requests it. Disclosure to authorities will be made where legally required or otherwise legally justified.
11. International Data Transfers
Some service providers may process data outside Germany or the European Economic Area.
Where GDPR restrictions on international data transfers apply, transfers will be carried out using a legally recognized transfer mechanism, such as:
- an adequacy decision;
- Standard Contractual Clauses;
- another safeguard permitted by GDPR;
- a lawful statutory derogation where applicable.
12. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to satisfy legal obligations.
Retention periods may differ according to the type of information.
Order and transaction records may need to be retained for longer periods where required by German tax, accounting, commercial, or consumer protection legislation.
Customer service correspondence may be retained for a reasonable period to resolve disputes, demonstrate compliance, or protect legal rights.
13. Data Security
We use reasonable technical and organizational safeguards designed to protect personal data against unauthorized access, loss, alteration, misuse, or disclosure.
However, no Internet transmission or electronic storage method can be guaranteed to be completely secure.
Customers should protect their own passwords, devices, and account credentials.
14. Your GDPR Rights
Subject to applicable conditions and exceptions, you may have the right to:
- request access to your personal data;
- request correction of inaccurate information;
- request deletion of personal data;
- request restriction of processing;
- object to certain processing;
- receive certain data in a portable format;
- withdraw consent;
- lodge a complaint with a competent data protection supervisory authority.
The GDPR expressly recognizes rights including access, rectification, erasure, restriction, objection, portability, withdrawal of consent where relevant, and the right to complain to a supervisory authority.
Requests may be sent to:
15. Automated Decision-Making
We may use automated systems to identify potentially fraudulent, abusive, or suspicious transactions.
Where an automated decision produces legal or similarly significant effects and GDPR restrictions apply, affected individuals will receive the protections required by applicable law.
16. Children's Privacy
Our store is not intentionally directed at children who are legally unable to enter into purchases independently.
We do not knowingly seek to collect personal information from children for purposes inconsistent with applicable law.
17. Third-Party Websites
Our website may contain links to websites operated by third parties.
We are not responsible for the privacy practices of independent third-party websites. Customers should review the privacy policies of those services before providing personal information.
18. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business, technology, services, or applicable law.
The most current version published on jopokart.shop will apply from its stated effective date, subject to applicable legal requirements.
19. Contact
For privacy questions or GDPR requests:
jopokart.shop
Email: info@jopokart.shop
- Choosing a selection results in a full page refresh.