Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

Steve Marofke
Adlergestell 437
12527 Berlin
Germany

Email: ridemount.kontakt@gmail.com
Phone: +49 162 2481096

2. General Information on Data Processing

We process personal data only to the extent necessary to provide our online store, process orders and enquiries, comply with legal obligations, or where processing is based on your consent.

Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, address, email address, telephone number, order information, payment data and technical usage data.

The relevant legal bases include in particular:

• Art. 6(1)(a) GDPR where you have given your consent;
• Art. 6(1)(b) GDPR for taking steps prior to entering into a contract and for the performance of a contract;
• Art. 6(1)(c) GDPR for compliance with legal obligations;
• Art. 6(1)(f) GDPR for the purposes of our legitimate interests.

3. Provision of the Online Store by Shopify

Our online store is operated using the Shopify e-commerce platform.

The provider for merchants within Europe is generally:

Shopify International Limited
Victoria Buildings, 2nd Floor
1–2 Haddington Road
Dublin 4, D04 XN32
Ireland

Shopify provides the technical infrastructure that enables us to operate our online store, checkout process, customer management and other store functions.

When you use our online store, Shopify processes technical access data and, where you place an order or use a customer account, your contact, order, customer and transaction data. This processing is carried out to provide and secure the store and to process your order.

Where Shopify processes personal data on our behalf, such processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.

The legal basis for processing in connection with the operation of the online store and order fulfilment is Art. 6(1)(b) GDPR. Where processing serves the technical security, troubleshooting and stability of the store, it is based on Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our online store.

International Data Transfers

Shopify International Limited may use other Shopify companies and subprocessors. Personal data may therefore also be processed outside the European Union or the European Economic Area, particularly in Canada, the United States or other countries.

Where no adequacy decision by the European Commission exists for the respective recipient country, transfers are made on the basis of appropriate safeguards, in particular the European Commission's Standard Contractual Clauses or other legally permitted transfer mechanisms.

Further information on data processing by Shopify can be found in Shopify's privacy policy.

4. Access Data and Server Log Files

When you access our online store, Shopify's technical systems automatically collect information. This may include in particular:

• IP address;
• date and time of access;
• page or file accessed;
• amount of data transferred;
• browser type and browser version;
• operating system;
• previously visited website;
• requesting internet service provider;
• device and session information.

This data is processed to technically provide the online store, ensure stability and security, detect errors and prevent abusive access.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and functional operation of our online store.

5. Cookies and Similar Technologies

Our online store uses cookies and comparable technologies. Cookies are small text files stored on your device.

Necessary Cookies

Some cookies are technically necessary to provide the online store and its basic functions. These include, for example, cookies for:

• the shopping cart;
• the ordering and payment process;
• logging into a customer account;
• security and fraud prevention;
• storing your privacy preferences.

Processing is carried out on the basis of Section 25(2) TDDDG. Where personal data is processed in this context, processing is based on Art. 6(1)(b) or Art. 6(1)(f) GDPR.

Optional Cookies and Tracking Technologies

Cookies and comparable technologies that are not technically necessary, particularly those used for statistics, analytics, personalisation or advertising, are only used if you have given your prior consent via our cookie banner.

The legal basis for storing or accessing information on your device is Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Art. 6(1)(a) GDPR.

You can change or withdraw your consent at any time with effect for the future via the cookie settings of our online store.

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

6. Orders and Contract Fulfilment

When you place an order in our online store, we process the information you provide in order to process and fulfil the contract.

This may include in particular:

• first and last name;
• billing and delivery address;
• email address;
• telephone number, where provided;
• goods ordered;
• order and transaction data;
• selected payment and shipping method;
• information relating to returns, withdrawals and complaints.

Mandatory information is marked accordingly. Without this information, we may not be able to process or fulfil your order.

The legal basis is Art. 6(1)(b) GDPR.

Where we retain data in order to comply with tax, commercial or statutory retention obligations, processing is based on Art. 6(1)(c) GDPR.

After the contract has been fully processed, further processing of your data will generally be restricted and the data will be deleted after the applicable statutory retention periods have expired, unless another legal basis permits or requires longer storage.

7. Customer Account

Where our online store offers the option of creating a customer account, you may create an account to save your information for future orders and view your orders.

In this context, we process in particular your login, contact, address and order data.

Processing is carried out for the provision of the customer account and the processing of orders on the basis of Art. 6(1)(b) GDPR.

You may request deletion of your customer account at any time using the corresponding function in your account or by contacting us. Order and invoice data subject to statutory retention obligations may continue to be stored after your customer account has been deleted.

8. Contacting Us

If you contact us by email, contact form, telephone or by other means, we process the information you provide in order to handle your enquiry.

This may include in particular:

• name;
• email address;
• telephone number;
• content of your message;
• order number and order information.

Where your enquiry relates to a contract or an order, processing is based on Art. 6(1)(b) GDPR.

For general enquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is in handling and responding to your enquiry.

Where you have consented to additional processing, Art. 6(1)(a) GDPR is the legal basis.

9. Shipping and Delivery

To deliver your order, we transfer the data required for delivery to the shipping service provider commissioned by us.

This generally includes:

• name;
• delivery address;
• telephone number, where applicable;
• email address, where applicable;
• shipment information.

The transfer of data necessary for delivery is based on Art. 6(1)(b) GDPR.

We currently use the following shipping service provider:

DHL Paket GmbH

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

Where your email address or telephone number is transferred to a shipping service provider solely for the purpose of providing shipment notifications or arranging flexible delivery, this will only take place where an appropriate legal basis exists, in particular your consent pursuant to Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future.

10. Payment Processing

For the processing of payments, we transfer the necessary data to the payment service provider selected by you and, where applicable, to participating banks, financial institutions and technical service providers.

The data processed may include in particular:

• name;
• billing address;
• order amount;
• currency;
• order number;
• email address;
• payment status;
• depending on the payment method, additional payment or account information.

Processing is generally carried out for the performance of the contract pursuant to Art. 6(1)(b) GDPR.

Depending on the payment method selected, the payment service provider may process personal data under its own responsibility under data protection law. In such cases, the respective provider's privacy policy also applies.

Shopify Payments

Where you select a payment method offered through Shopify Payments, payment processing is carried out through Shopify and the respective participating payment or financial service providers.

Contact, order, payment, device and transaction data may be processed. Processing may also serve identity verification, fraud prevention, risk assessment and compliance with legal obligations.

Depending on the specific processing activity, the legal bases are Art. 6(1)(b), (c) and (f) GDPR.

PayPal

Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.

If you select PayPal as your payment method, the data necessary for payment processing will be transferred to PayPal.

The legal basis is Art. 6(1)(b) GDPR. Further processing, particularly for fraud prevention and risk assessment, may be carried out by PayPal under its own responsibility.

Klarna

Provider: Klarna Bank AB (publ), Sweden.

If you select a Klarna payment method, the data necessary for payment processing and, where applicable, identity, creditworthiness or fraud checks will be transferred to Klarna.

The legal bases are Art. 6(1)(b) GDPR and, where legally permissible risk or fraud assessments are carried out, Art. 6(1)(f) GDPR.

11. Fraud Prevention and Security

To prevent fraudulent orders, abusive payments and other unlawful activities, Shopify, payment service providers and, where applicable, other security service providers may analyse order, payment, device, network and transaction data.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to protect our online store, our customers and our payment processes against fraud and misuse.

Where a payment service provider is legally required to carry out certain checks, processing is additionally based on Art. 6(1)(c) GDPR.

12. Withdrawals, Returns and Complaints

If you exercise your right of withdrawal, use our withdrawal function, return goods or submit a complaint, we process the contact, order, shipping and communication data necessary for this purpose.

Processing is carried out to handle your withdrawal, return or complaint on the basis of Art. 6(1)(b) GDPR and, where applicable, to comply with legal obligations pursuant to Art. 6(1)(c) GDPR.

13. Newsletter and Email Marketing

If you subscribe to our newsletter, we use your email address to regularly send you information about our products and offers.

Subscription is based on your consent pursuant to Art. 6(1)(a) GDPR. Where a double opt-in procedure is used, we store the registration and confirmation in order to document your consent.

You may withdraw your consent at any time with effect for the future, for example by using the unsubscribe link at the end of each marketing email or by contacting us.

14. Analytics, Marketing and Shopify Pixel

Where we use analytics, marketing or advertising services, information about your use of our online store may be processed. This may include in particular:

• pages and products viewed;
• shopping cart activity;
• purchases and order values;
• referrer information;
• device and browser information;
• IP address;
• cookie and online identifiers;
• interactions with advertisements.

Analytics and marketing services that are not technically necessary are only activated after you have given your prior consent.

The legal bases are Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

You may withdraw your consent at any time via the cookie settings of our online store.

Important: This section must be supplemented with the specific analytics, advertising and tracking services actually activated in your Shopify store. Your German privacy policy currently contains the same unresolved placeholder.

15. Shopify Apps and Other Third-Party Providers

We may use apps and extensions from the Shopify App Store or other providers to provide additional functionality.

Depending on their functionality, these apps may have access to store, customer, order, communication or usage data.

The following Shopify apps with potential access to personal data are currently listed in our privacy policy:

• Timesact Pre-order
• 17TRACK
• Omnisend

These are the three apps explicitly named in your current German privacy policy.

16. Social Media Links

Our online store may contain links to our profiles on social networks, in particular Instagram.

In the case of simple links, merely visiting our online store generally does not establish a direct connection to the respective social network. A connection is established only when you click on the relevant link and are redirected to the provider's website.

The provider may then process, in particular, your IP address, device information and information about the page accessed. The respective provider is responsible for any further processing.

Instagram

The provider in Europe is generally:

Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland

Further information can be found in Meta's privacy policy.

17. Storage Period

We store personal data only for as long as necessary for the respective processing purpose.

After a contract has been fully processed, the data is generally restricted from further processing and deleted after the applicable statutory retention periods have expired.

Business and tax-related documents may in particular be retained in accordance with the applicable statutory retention periods.

Where processing is based on your consent, we generally store the data until you withdraw your consent, unless another legal basis or retention obligation applies.

In individual cases, data may be stored for longer where this is necessary for the establishment, exercise or defence of legal claims.

18. Your Rights

Subject to the applicable statutory requirements, you have in particular the following rights:

• right of access pursuant to Art. 15 GDPR;
• right to rectification pursuant to Art. 16 GDPR;
• right to erasure pursuant to Art. 17 GDPR;
• right to restriction of processing pursuant to Art. 18 GDPR;
• right to data portability pursuant to Art. 20 GDPR;
• right to object pursuant to Art. 21 GDPR;
• right to withdraw consent pursuant to Art. 7(3) GDPR;
• right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR.

To exercise your rights, you may contact us using the contact details provided above.

Withdrawal of Consent

You may withdraw consent you have given at any time with effect for the future.

The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

Right to Object

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object to such processing at any time.

We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time. Following your objection, the data will no longer be used for direct marketing purposes.

19. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority.

For a controller established in Berlin, the competent authority is in particular:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Germany

You may also contact the data protection supervisory authority of your habitual residence, place of work or the place of the alleged infringement.

20. Data Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, alteration or disclosure.

Data transmission in our online store is generally encrypted using TLS or SSL. An encrypted connection can generally be identified by “https://” in your browser's address bar.

21. Updates to this Privacy Policy

We may amend this Privacy Policy if the legal situation, our online store, the Shopify functions and apps used, payment methods or other data processing activities change.

The version of this Privacy Policy published on this website at the relevant time applies.

Last updated: August 2026