Privacy policy

This English version is a translation for your convenience. The German version is the legally binding one.

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

ALECOO GmbH
Biberacher Straße 1
88339 Bad Waldsee
Germany
Email: info@alecoo.de

Personal data is any data that can be used to identify you personally. This website uses SSL or TLS encryption. You can recognise the encrypted connection by “https://” and the lock symbol in the address bar of your browser.

2. Hosting and shop system (Shopify)

Our online shop is operated via Shopify. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes on our behalf all data that arises when you visit the website and place orders. The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (our legitimate interest in a secure and reliable shop). We have concluded a data processing agreement with Shopify. Data may also be transferred to Shopify Inc. in Canada and to service providers in the USA (see section 11).

When you access the website, information transmitted by your browser is collected automatically (server log files): the page accessed, date and time of access, amount of data transferred, referring page, browser used, operating system and IP address. We need this data to provide the website in a stable and secure manner (Art. 6(1)(f) GDPR).

3. Cookies and consent

Our website uses cookies and similar technologies. We use technically necessary cookies, for example for the shopping cart and the ordering process, on the basis of Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Art. 6(1)(f) GDPR. We use all other cookies and technologies, in particular for analytics and marketing, only with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You give your consent via the cookie banner. You can withdraw or change it there at any time with effect for the future.

4. Contacting us

If you write to us by email or via the contact form, we process your details in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR. We delete the data as soon as your enquiry has been fully dealt with and no statutory retention obligations prevent this.

5. Customer account and orders

To process your order, we process the data you provide: name, address, email address, telephone number where applicable, items ordered and payment information. The legal basis is Art. 6(1)(b) GDPR. If you create a customer account, we store your data for further orders. You can have the account deleted at any time; a message to info@alecoo.de is sufficient.

For delivery, we pass on your name, your address and, where necessary for delivery, your email address to the shipping company commissioned (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany).

6. Payment service providers

Depending on the payment method chosen, we pass on the data required for payment to the respective payment service provider (Art. 6(1)(b) GDPR):

  • Shopify Payments (credit card, Apple Pay, Google Pay, Shop Pay and others): processing is carried out by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. For Shop Pay, Shopify International Limited is also involved.
  • PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
  • Klarna: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. For certain payment methods, Klarna may carry out an identity and credit check; Klarna provides details in its own privacy notice.

7. Newsletter and email marketing (Klaviyo)

If you subscribe to our newsletter, we use your email address to send you news and offers on a regular basis. Registration uses the double opt-in procedure: you receive an email in which you confirm your registration. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe from the newsletter at any time via the unsubscribe link in every email or by sending a message to info@alecoo.de.

To send our emails we use Klaviyo, a service of Klaviyo, Inc., 125 Summer Street, Boston, MA 02110, USA. Klaviyo processes the data on our behalf. To improve our emails, Klaviyo evaluates whether emails are opened and which links are clicked, and links this to your purchasing and usage behaviour in our shop. In the process, data is transferred to the USA (see section 11).

8. Analytics and marketing

We use the following services only if you have given your consent in the cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your consent at any time via the cookie banner.

  • Google Analytics and Google Ads: the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics evaluates the use of our website statistically. With Google Ads we measure whether an advertisement has led to an order, and we can later show suitable advertisements to visitors to our website.
  • Meta Pixel: the provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. With the pixel we measure the success of our advertisements on Facebook and Instagram and can show suitable advertisements there to visitors to our website.
  • Shopify analytics: Shopify evaluates on our behalf how the shop is used, for example which pages and products are viewed.

With these services, data may be transferred to the USA (see section 11).

9. Our social media presence

On our website we show posts from our Instagram profile. For this we use the app “Instafeed” from the provider Mintt Studio. The images are loaded via the provider’s servers; in the process, your IP address is transmitted. The legal basis is our legitimate interest in an appealing presentation of our offer (Art. 6(1)(f) GDPR).

We also link to our Instagram profile. Data is only transferred to Meta when you click the link. Meta’s privacy policy applies to the processing there.

10. Storage period

We store personal data only for as long as is necessary for the respective purpose. We keep order and invoice data for up to ten years in accordance with commercial and tax law. We delete data that we process on the basis of your consent when you withdraw your consent.

11. Transfers to countries outside the EU

Some of the service providers mentioned also process data outside the European Union, in particular in the USA and in Canada. For Canada, there is an adequacy decision of the European Commission. We base transfers to the USA on the adequacy decision for the EU-US Data Privacy Framework, insofar as the recipient is certified under it, and otherwise on the standard contractual clauses of the European Commission.

12. Your rights

You have the right to obtain information about the data we hold about you (Art. 15 GDPR), and the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).

Right to object: Where we process your data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation. You can object to processing for direct marketing purposes at any time without giving reasons (Art. 21 GDPR).

To exercise your rights, a message to info@alecoo.de is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

Last updated: October 2026