1. Controller

Summer Made, Owner: Suvaporn Photjananuwat
Zur Kalbacher Höhe 19, 60438 Frankfurt am Main, Germany
Email: contact@summermade.com · Phone: +49 163 6616861

We have not appointed a data protection officer, as we are not legally required to.

2. Your rights

Under the GDPR you have the right to:

• access your data (Art. 15), correction (Art. 16), erasure (Art. 17) and restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interests (Art. 21), and to direct marketing at any time
• withdraw consent at any time with effect for the future (Art. 7(3)), for example via the cookie settings link in our shop footer
• lodge a complaint with a supervisory authority (Art. 77). The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

To exercise your rights, email contact@summermade.com.

3. Hosting and shop system (Shopify)

Our shop runs on Shopify, provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify stores and processes all shop data (visits, orders, customer accounts) on our behalf under a data processing agreement. Data may be transferred to Shopify Inc. in Canada (adequacy decision of the EU Commission) and the USA (EU-US Data Privacy Framework and/or EU standard contractual clauses).

When you visit our shop, technically necessary data are processed: IP address, date and time, pages visited, browser and device information. Legal basis: Art. 6(1)(f) GDPR (secure and stable operation of the shop).

4. Cookies and consent

We use technically necessary cookies (for example for the shopping cart and checkout). Legal basis: § 25(2) TDDDG and Art. 6(1)(b)/(f) GDPR.

All other cookies and tracking (Google Analytics, Meta Pixel) are only used if you agree in our cookie banner. Legal basis: § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can change or withdraw your choice at any time via the cookie settings link in our footer.

5. Orders and customer account

To process your order we need your name, addresses, email, phone number (for delivery), order and payment details. Legal basis: Art. 6(1)(b) GDPR. If you create a customer account, we store your data until you delete the account.

We keep order and invoice data as required by commercial and tax law (§ 257 HGB, § 147 AO): generally 8 years for accounting records and 6 years for business correspondence. Legal basis: Art. 6(1)(c) GDPR.

6. Payment providers

Your payment data are processed directly by the payment provider you choose. Legal basis: Art. 6(1)(b) GDPR.

• Shopify Payments (credit card, Apple Pay, Google Pay and others): processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
• Google Pay: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
• PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
• Klarna: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. For invoice or instalment payments, Klarna may carry out an identity and credit check (Art. 6(1)(b) and (f) GDPR). Details: Klarna's privacy notice.

7. Shipping

We pass your name, delivery address and, where needed for delivery notifications, your email and phone number to the carrier. Legal basis: Art. 6(1)(b) GDPR.

• DHL (all destinations): Deutsche Post AG / DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.
• UPS (USA only): United Parcel Service Deutschland S.à r.l. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany. For shipments to the USA, data are also transferred to the USA to complete delivery and customs clearance (Art. 49(1)(b) GDPR).

For shipments outside the EU, the data required for customs clearance are passed to the customs authorities.

8. Withdrawal function (Revoq)

Our online withdrawal function is provided by the app "Revoq – EU Withdrawal Button" (BuschBytes, Germany), hosted in the EU. When you submit a withdrawal, we process your name, email, order number and the items concerned, to handle your withdrawal and send you a confirmation of receipt. Legal basis: Art. 6(1)(c) GDPR (legal obligation under § 356a BGB) and Art. 6(1)(b) GDPR.

9. Newsletter (Shopify Messaging)

If you subscribe to our newsletter, we send it via Shopify's email tool. We use the double opt-in procedure: you receive an email asking you to confirm your subscription. Legal basis: your consent, Art. 6(1)(a) GDPR. You can unsubscribe at any time via the link in every newsletter or by email. We also record the time of subscription and confirmation as proof of consent (Art. 6(1)(f) GDPR).

10. Google Analytics

With your consent, we use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to understand how visitors use our shop. Google uses cookies and processes, among other things, device and browser data, pages visited and an anonymised IP address. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG. Data are stored for a maximum of 14 months.

11. Meta Pixel (Facebook / Instagram)

With your consent, we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, to measure the success of our ads and show you relevant ads on Facebook and Instagram. We and Meta are jointly responsible for collecting and transmitting the data (Art. 26 GDPR). Data may be transferred to Meta Platforms Inc. in the USA; Meta is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG.

12. Contact by email or phone

When you contact us, we process your details to answer your request. Legal basis: Art. 6(1)(b) GDPR for order-related questions, otherwise Art. 6(1)(f) GDPR. We delete the data once your request is settled, unless legal retention periods apply.

13. Social media links

Our shop contains simple links to our social media profiles. No data are sent to these platforms until you click a link.

14. Changes

We update this privacy policy when our services or the law change. The current version is always available on this page.