Privacy Policy

This privacy policy explains which personal data we process when you visit our KALDSTUDIOS online shop, shop with us or contact us, for what purposes and on what legal basis we do so, and which rights you have.

1. Controller

KALD STUDIOS GmbH
Königsallee 19
40212 Düsseldorf
Germany
represented by the Managing Director Jennifer Schmidhofer
Email: info@kaldstudios.com

Further details can be found in our Legal Notice. We have not appointed a data protection officer as we are not legally required to do so.

2. Hosting and shop system (Shopify)

Our online shop runs on the Shopify platform. The provider for merchants in Europe is Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”). On our behalf, Shopify stores and processes the data generated when you visit the shop and place orders (including IP address, device and browser information, access times, order and customer data). Our shop data is hosted in the European Union; however, Shopify may also transfer data to Shopify group companies in Canada and the USA. For Canada there is an adequacy decision of the European Commission; for transfers to the USA, Shopify Inc. is certified under the EU-US Data Privacy Framework, and standard contractual clauses are used in addition. We have concluded a data processing agreement with Shopify (Art. 28 GDPR).

The legal basis is our legitimate interest in the secure, stable and efficient operation of our online shop (Art. 6(1)(f) GDPR) and, where you place an order, the performance of the contract (Art. 6(1)(b) GDPR).

If you use features that Shopify offers as an independent controller (e.g. Shop Pay or the Shop app), Shopify's privacy policy also applies: privacy.shopify.com.

Some design files of our shop (e.g. stylesheets) are loaded from our own web server at assets.kald-studios.com. For technical reasons, your IP address is transmitted and briefly stored in server log files (Art. 6(1)(f) GDPR).

3. Orders and contract processing

When you place an order, we process the data you provide in the checkout (name, delivery and billing address, email address, phone number if provided, ordered items, payment and shipping information) in order to perform the purchase contract, send you order and shipping confirmations and process returns. The legal basis is Art. 6(1)(b) GDPR. Mandatory fields are marked; without this information we cannot conclude the contract.

4. Customer account

You may voluntarily create a customer account. For this, we process your email address and the details you store so that you can view your orders and complete future orders more quickly (Art. 6(1)(b) GDPR). You can have your customer account deleted at any time; a message to info@kaldstudios.com is sufficient.

5. Payment processing

To process payments, we pass the necessary data to the respective payment service provider (Art. 6(1)(b) GDPR). Card payments, Apple Pay, Google Pay and Shop Pay are processed via Shopify Payments; the payment service provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. If you choose PayPal, you will be redirected to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, where PayPal's privacy policy applies. Payment service providers may carry out their own checks for fraud prevention and identity verification and are responsible for these themselves.

6. Shipping, warehouse and returns

Warehousing, shipping and returns handling are carried out on our behalf by Beckmann Systemlogistik GmbH (location Köln-Lövenich, Dieselstr. 2, 50859 Köln, Germany) as a processor. For delivery, we pass your name, your delivery address and – so that you can be informed about the delivery – your email address to DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany. The legal basis is Art. 6(1)(b) GDPR; for passing your email address to DHL, our legitimate interest in smooth delivery (Art. 6(1)(f) GDPR).

7. Accounting

To fulfil our obligations under commercial and tax law, we transfer order and invoice data to our accounting software Lexware Office provided by Haufe-Lexware GmbH & Co. KG, Munzinger Str. 9, 79111 Freiburg, Germany, which acts as a processor (Art. 6(1)(c) GDPR).

8. Contact

If you write to us by email or via the contact form, we process your details (e.g. name, email address, phone number if provided and your message) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

9. Newsletter and marketing emails

If you subscribe to our newsletter or consent in the checkout to receive news and offers, we use your email address to send you information about our products. Subscription uses a double opt-in procedure: you will receive an email asking you to confirm your subscription. The legal basis is your consent (Art. 6(1)(a) GDPR). Emails are sent using Shopify's email feature. You can withdraw your consent at any time with effect for the future, e.g. via the unsubscribe link in every email.

10. Back-in-stock notifications (“Notify Me!”)

If an item is sold out, you can ask to be notified as soon as it is available again. For this we use the Shopify app “Notify Me!” (provider: notify-me.io). We process your email address and the requested item solely to inform you about its availability (Art. 6(1)(a) GDPR). The app may record events in the shop (e.g. products viewed); this only happens if you have consented in the cookie banner. You can unsubscribe from the notification at any time.

11. Cookies and consent management

Our shop uses cookies and similar technologies. We set technically necessary cookies (e.g. for the shopping cart, checkout, language setting and storing your cookie choice) on the basis of Section 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR. All other cookies and technologies for statistics, personalisation or marketing are only used with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You make your choice in Shopify's cookie banner and can change or withdraw it at any time via the “Cookie settings” link in the footer.

If you have consented, Shopify may also use data about your use of our shop for its own purposes, for example to improve its services and for personalised advertising (“Shopify Network Intelligence”). In this respect, Shopify is the controller.

If you have an account with Shopify's Shop app and are logged in there, Shopify may send you reminders about our shop via the Shop app (e.g. about your cart, items back in stock or price drops for items you viewed). This depends on your settings in the Shop app; Shopify is the controller in this respect.

12. Social media

Our shop links to our Instagram profile. This is a simple link; only when you click it are you redirected to Instagram (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland), where Instagram's privacy policy applies.

13. Storage period

We only store personal data for as long as is necessary for the respective purpose. Due to obligations under commercial and tax law, we retain contract and invoice data for up to ten years (Section 257 HGB, Section 147 AO). We delete enquiries once they have been fully dealt with and no retention obligation applies. We store data for the newsletter and back-in-stock notifications until you withdraw your consent or unsubscribe.

14. Transfers to third countries

Where data is transferred to recipients outside the EU or EEA (in particular within the Shopify group to Canada and the USA), this only takes place if there is an adequacy decision of the European Commission (e.g. the EU-US Data Privacy Framework) or if appropriate safeguards such as the European Commission's standard contractual clauses have been agreed.

15. Your rights

Under the GDPR, you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).

Right to object: Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21(1) GDPR). You may object to the processing of your data for direct marketing at any time without giving reasons (Art. 21(2) GDPR).

To exercise your rights, simply send a message to info@kaldstudios.com.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

16. No automated decision-making

We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

17. Changes

We will update this privacy policy if our shop, our service providers or the legal situation change. The version published here applies.

Last updated: October 2026