Privacy Policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

This shop runs on Shopify. The provider is Shopify International Limited, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify stores and processes on our behalf all data generated when you visit the shop or place an order.

We have concluded a data processing agreement with Shopify under Article 28 GDPR. The legal bases are our legitimate interest in secure and efficient shop operation (Article 6(1)(f) GDPR) and performance of a contract (Article 6(1)(b) GDPR).

When you visit our pages, data sent by your browser is collected automatically: IP address, date and time of the request, page accessed, referrer URL, browser type and operating system. This data is used for technical delivery, security and troubleshooting. It is not combined with other data sources.

Legal basis: Article 6(1)(f) GDPR.

When you place an order, we process the data needed to fulfil it: name, shipping and billing address, email address, telephone number where provided, and order and payment information.

We share this data with:

• the payment provider you select to process payment;
• the appointed delivery provider to deliver your order;
• our tax adviser and the tax authorities where required by law.

Legal bases: Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(c) GDPR (legal obligations, including commercial and tax retention periods of six to ten years).

Depending on your chosen payment method, we send the information needed to process payment to the relevant provider, such as PayPal, Apple, Google or the card processor. These providers are independently responsible for their processing; their privacy notices also apply.

Legal basis: Article 6(1)(b) GDPR.

You can order from us without creating an account. If you create one, we retain the data stored in it until you delete the account. Legal basis: Article 6(1)(b) GDPR.

If you contact us by email or through a form, we retain the information you provide to deal with your request. The legal basis is Article 6(1)(b) GDPR for contract-related requests and otherwise Article 6(1)(f) GDPR.

If you subscribe to our newsletter, we process your email address to send information about products and promotions. Registration uses double opt-in: after signing up, you receive a confirmation email and are subscribed only after clicking its confirmation link.

The legal basis is your consent under Article 6(1)(a) GDPR. You can withdraw consent at any time using the unsubscribe link in each email or by contacting support@alpenwarm.de. This does not affect the lawfulness of processing before withdrawal.

We use Klaviyo to send the newsletter. The provider is Klaviyo, Inc., 125 Summer Street, Boston, MA 02110, USA. On our behalf, Klaviyo processes your email address, other details you provide, information about how you use our emails—including opens and link clicks—and shop activity such as viewed products and abandoned carts. This helps us tailor newsletters to your interests and measure their effectiveness.

We have concluded a data processing agreement with Klaviyo under Article 28 GDPR. Klaviyo also processes data in the United States. We rely on the EU-US Data Privacy Framework and, additionally, the European Commission's Standard Contractual Clauses under Article 46(2)(c) GDPR.

Your data remains stored with Klaviyo until you unsubscribe. We then delete it or add it to a suppression list so that you receive no further emails. More information is available in Klaviyo's privacy notice at klaviyo.com/legal/privacy-notice.

We use strictly necessary cookies so that the shop works, including for the cart and language settings. The legal basis is Section 25(2) TDDDG together with Article 6(1)(f) GDPR.

We use cookies and technologies that are not strictly necessary—particularly analytics and marketing technologies—only with your consent. The legal basis is Section 25(1) TDDDG together with Article 6(1)(a) GDPR. You may change your selection at any time.

The following services are used only if you have consented through the cookie banner. The legal basis in each case is Section 25(1) TDDDG together with Article 6(1)(a) GDPR. You can withdraw consent for the future at any time by changing your cookie choices; this does not affect the lawfulness of prior processing.

Meta Pixel (Facebook and Instagram)

Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

The Meta Pixel records the pages you visit and actions you take in our shop, such as viewing a product, adding it to your cart, or completing an order. It processes your IP address, device and browser information, online identifiers including cookie IDs, and event data. We use this to measure advertising performance and show relevant advertising on Facebook and Instagram.

Meta also processes the data for its own purposes. We and Meta are joint controllers under Article 26 GDPR for collection and transmission; Meta is solely responsible for subsequent processing. Transfers to the United States may occur and rely on the EU-US Data Privacy Framework and Standard Contractual Clauses. Data is generally retained for up to 24 months. More information: facebook.com/privacy/policy.

Google Analytics and Google Ads

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics evaluates how you use our shop, including pages viewed, visit duration, source of visit, approximate location based on a truncated IP address, device and browser data, and online identifiers. The IP address is truncated before analysis. Google Ads and conversion tracking also let us measure whether an advertisement led to an order and display advertisements on Google services and partner sites.

We have a data processing agreement with Google. Transfers to the United States may occur and rely on the EU-US Data Privacy Framework and Standard Contractual Clauses. User and event data is retained for up to 14 months. More information: policies.google.com/privacy.

TikTok Pixel

Provider for users in the European Economic Area: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

The TikTok Pixel records the pages you visit and actions you take, including product views, cart activity and purchases. It processes IP address, device and browser data, online identifiers and event data. We use this to measure TikTok advertising performance and target advertising.

Transfers to TikTok group companies outside the European Union, including the United States, Singapore and China, cannot be ruled out. The European Commission has not issued an adequacy decision for China. TikTok relies on Standard Contractual Clauses under Article 46(2)(c) GDPR; a level of data protection equivalent to the European standard cannot be guaranteed. Data is generally retained for up to 13 months. More information: tiktok.com/legal/privacy-policy-eea.

Some services process data outside the European Union. In such cases, we rely on an adequacy decision by the European Commission or Standard Contractual Clauses under Article 46(2)(c) GDPR.

We retain personal data only for as long as necessary for its purpose or as required by statutory retention periods. We then delete the data or restrict its processing.

You have the right to:

• access your stored data (Article 15 GDPR);
• correct inaccurate data (Article 16 GDPR);
• erasure (Article 17 GDPR);
• restriction of processing (Article 18 GDPR);
• data portability (Article 20 GDPR);
• object where processing is based on a legitimate interest (Article 21 GDPR);
• withdraw consent for the future (Article 7(3) GDPR).

To exercise these rights, email support@alpenwarm.de.

You have the right to complain to a data protection supervisory authority if you believe your data is being processed in breach of the GDPR. The competent authority is the authority for your usual place of residence, place of work, or the location of the alleged infringement.

We update this privacy policy when our processing changes or the law requires it. The current version is always available on this page.

Last updated: September 2026

This shop runs on Shopify. The platform provider is Shopify International Limited, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify stores and processes on our behalf all data generated when you browse the shop or place an order.

Visiting our site automatically records data sent by your browser: IP address, request date and time, requested page, referrer URL, browser type and operating system. We use it for technical delivery, security and troubleshooting, and do not combine it with other data sources.

When you order, we process what is needed to fulfil it: name, billing and shipping address, email, phone number where provided, and order and payment details. We share this with your payment provider, the carrier delivering your order, and our accountant or tax authorities where legally required. If you create an account, we keep its data until you delete the account.

Depending on your payment method, we pass the information needed to process payment to the relevant provider—for example PayPal, Apple, Google or the card processor. These providers are independently responsible for their processing, and their privacy notices also apply.

If you email us or use a contact form, we keep what you send to handle your request.

If you subscribe to our newsletter, we process your email address to send product and promotion updates. Sign-up uses double opt-in: you receive a confirmation email and are subscribed only after clicking its confirmation link. You can unsubscribe using the link in every email or by writing to support@alpenwarm.de.

We use Klaviyo, Inc., 125 Summer Street, Boston, MA 02110, USA. Klaviyo processes your email address, details you provide, email interactions such as opens and clicks, and shop activity such as viewed products and abandoned carts, so we can tailor newsletters and measure results. Your data remains with Klaviyo until you unsubscribe, after which we delete or suppress it. See Klaviyo's privacy notice.

We use strictly necessary cookies for functions such as the cart and language setting. Where local law requires opt-in consent for non-essential cookies, including analytics and advertising, we set them only after you agree in our cookie banner. You can change your choice at any time.

The following services are used only where you have consented in the cookie banner, or in opt-out jurisdictions until you opt out.

Meta Pixel: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; Meta Platforms, Inc. may also be involved outside the EEA and UK. The pixel records pages visited, shop actions, IP address, device and browser data, and cookie identifiers to measure and improve Facebook and Instagram advertising.

Google Analytics and Google Ads: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and, for US users, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. These services measure site use and whether advertisements lead to orders.

TikTok Pixel: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland and, for US users, TikTok Inc., 5800 Bristol Parkway, Culver City, CA 90230, USA. The pixel records page views and actions such as product views, carts and purchases to measure and target TikTok advertising.

Several services process data in other countries, including Ireland and the United States. Where required, we and our providers use recognised safeguards such as the EU-US Data Privacy Framework or Standard Contractual Clauses.

We keep personal data only as long as needed for the purpose for which it was collected or as required by law, such as for accounting records. We then delete it or restrict its processing.

Wherever you live, you can normally ask us what data we hold, correct inaccurate data, delete your data, and object to or restrict certain processing. Write to support@alpenwarm.de to exercise these rights. We may first need to verify your identity.

United Kingdom

The UK GDPR and Data Protection Act 2018 apply. You also have rights to data portability and to withdraw consent at any time where processing is based on consent. You can complain to the Information Commissioner's Office at ico.org.uk.

United States — California

If you are a California resident, the CCPA as amended by the CPRA gives you rights to know, delete, or correct personal information, opt out of its “sale” or “sharing” for cross-context behavioural advertising, limit use of sensitive personal information, and not be discriminated against for exercising these rights. We do not sell personal information for money, but sharing data with advertising partners such as Meta, Google and TikTok may count as a “sale” or “sharing” under California law. You can opt out through our privacy choices or by sending a Global Privacy Control signal from your browser.

Canada

PIPEDA applies to your data. You may request access or correction and withdraw consent by writing to support@alpenwarm.de. If we cannot resolve your concern, you may complain to the Office of the Privacy Commissioner of Canada. In Québec, the province's private-sector privacy law as amended by Law 25 also applies, and you may complain to the Commission d'accès à l'information du Québec.

Australia

We handle your data under the Australian Privacy Principles in the Privacy Act 1988. You may request access or correction by writing to support@alpenwarm.de. If we cannot resolve your complaint, you may contact the Office of the Australian Information Commissioner.

New Zealand

We handle your data under the Information Privacy Principles in the Privacy Act 2020. You may request access or correction by writing to support@alpenwarm.de. If we cannot resolve your complaint, you may contact the Office of the Privacy Commissioner.

European Economic Area and Switzerland

If you are in the EEA or Switzerland, the GDPR or Swiss Federal Act on Data Protection applies as described in the first section above, regardless of the language you are reading.

We update this policy when our data practices change or the law requires it. The current version is always available on this page.

Last updated: September 2026