SHOP24

Legal

Privacy policy

Privacy policy (Datenschutzerklärung) pursuant to Art. 13 and 14 GDPR. Last updated: January 2026.

1. Controller

SHOP24, Hauptstraße 435, 79576 Weil am Rhein, Germany. E-mail: mail@shop-24.co. Our data protection officer can be reached at the same address, marked “Datenschutzbeauftragter”.

2. Data processed when you visit this website

When you access our pages, our hosting provider automatically records server log data: IP address (shortened after 7 days), date and time of the request, the page requested, referrer URL, browser type and operating system. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the secure and stable operation of the website. Log data is deleted after 30 days.

3. Enquiry and offer requests

If you send us an enquiry, we process the company name, contact person, e-mail address, telephone number, VAT ID where supplied, and the content of your message in order to prepare an offer. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) and, for business correspondence, Art. 6 (1) (f) GDPR.

4. Retention periods

  • Enquiries that do not lead to a contract: deleted after 12 months.
  • Contractual and accounting records: retained for 10 years (§ 147 AO, § 257 HGB).
  • Data erasure certificates for supplied hardware: retained for 3 years.

5. Recipients and processors

Personal data is disclosed only where necessary: to our hosting provider within the EU, to logistics partners for delivery, to our tax advisor and, where legally required, to public authorities. All processors are bound by agreements pursuant to Art. 28 GDPR. We do not transfer personal data to third countries without an adequate level of protection.

6. Cookies and analytics

This website uses only technically necessary cookies required for the operation of the site. We do not employ tracking, profiling or advertising cookies, and we do not embed third-party analytics. Further detail is set out in our cookie policy.

7. Your rights

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
  • Right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR)

8. Right to lodge a complaint

You may lodge a complaint with a supervisory authority, in particular the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.

9. Data security

This site is delivered exclusively over TLS-encrypted connections. Internally, access to customer data is restricted by role, logged and reviewed annually as part of our ISO 9001 audit cycle.