Data protection

Status: August 20, 2026

The protection of your personal data is important to us. With this privacy policy, we inform you about which personal data is processed when visiting our online shop, placing an order, and using our other services, as well as the rights you are entitled to under the applicable data protection laws.

1. Data Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

alfakher8k
Owner: Michael Torner
Im Gehölz 20, 20255 Eimsbüttel

Phone: +49 152 16703158
Email: service@alfakher8k.de

2. General Information on the Processing of Personal Data

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, your name, address, email address, telephone number, IP address, order information, and payment information.

We process personal data only to the extent necessary to provide our online shop, process orders, communicate with you, fulfill legal obligations, or based on your consent.

3. Legal Bases for Data Processing

We process personal data in particular based on the following provisions:

Art. 6 (1) (a) GDPR – if you have given us your consent, for example for certain marketing measures or non-essential cookies.
Art. 6 (1) (b) GDPR – if processing is necessary for the performance of a contract or for pre-contractual measures, in particular for the processing and fulfillment of your order.
Art. 6 (1) (c) GDPR – if processing is necessary to fulfill a legal obligation.
Art. 6 (1) (f) GDPR – if processing is necessary to protect our legitimate interests or the legitimate interests of a third party, provided your interests or fundamental rights do not override them, for example for the security of our online shop and fraud prevention.

4. Which Data We Process

Depending on how you use our online shop, the following categories of personal data may be processed, among others:

Contact and Master Data: Name, billing address, delivery address, email address, and telephone number.
Order and Transaction Data: Products ordered, order number, shopping cart, order status, returns, cancellations, and past transactions.
Payment Data: Payment method, payment status, transaction information, and the details required for payment processing.
Customer Account Data: If a customer account is used, in particular login data, account settings, and order history.
Communication Data: Information you provide to us during inquiries or as part of customer support.
Technical Data: IP address, browser type, operating system, device information, date and time of access, and technical usage data.

5. Provision and Hosting of the Online Shop via Shopify

Our online shop is operated via the e-commerce platform Shopify. Shopify provides the technical infrastructure we need to provide and operate our online shop.

For merchants in the European Economic Area, the responsible Shopify contracting party is generally Shopify International Limited, Ireland.

In the course of using our online shop, personal data may be processed by Shopify. This may include, in particular, IP addresses, device information, usage data, customer information, order data, and transaction information.

Depending on the processing activity, Shopify may act as our data processor or, for certain proprietary Shopify services, as an independent controller.

The legal basis for processing in connection with the fulfillment of an order is Art. 6 (1) (b) GDPR. Insofar as processing serves the secure and technically reliable provision of our shop, it is based on Art. 6 (1) (f) GDPR.

Further information on the processing of personal data by Shopify can be found in the Shopify Privacy Policy for Consumers.

Data protection inquiries related to certain independent Shopify services can also be submitted via the Shopify Privacy Portal.

6. Visiting Our Website and Technical Access Data

When you visit our website, technically necessary information is processed so that the website can be delivered to your device and operated securely.

This may include, in particular, the following data:

IP address
Date and time of access
Page or file accessed
Browser type and version
Operating system
Device information
Referrer URL
Technical error and security information

Processing is carried out in particular for technical provision, system security, error analysis, and the prevention of abusive or fraudulent access.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is the secure, stable, and functional operation of our online shop.

7. Orders and Contract Fulfillment

When you place an order with us, we process the data you provide as far as it is necessary for the execution of the order.

This includes, in particular:

Name
Billing and delivery address
Email address
Telephone number (if applicable)
Products ordered
Order and transaction information
Payment method and status

Processing is performed to handle your order, process payments, deliver goods, respond to potential inquiries, process returns and refunds, and fulfill our legal obligations.

The legal bases are Art. 6 (1) (b) GDPR and, insofar as legal storage or proof obligations exist, Art. 6 (1) (c) GDPR.

8. Payment Processing

To process payments, the necessary personal data is transmitted to the payment service provider selected by you during checkout.

Which payment methods and providers are available is displayed in the respective checkout process.

In this context, in particular, your name, billing address, payment amount, order number, payment method, and further information required for the respective payment processing may be handled.

The legal basis is Art. 6 (1) (b) GDPR.

9. Shipping and Delivery

Insofar as necessary for the delivery of your order, we will transmit the required data to the shipping or logistics company commissioned with the delivery.

This may include, in particular, name, delivery address, and – if required for delivery – further contact details.

The legal basis is Art. 6 (1) (b) GDPR.

10. Age Verification and Youth Protection

Where a legally required age verification is conducted in connection with our products, the necessary data may be processed to ensure compliance with applicable youth protection regulations.

Processing occurs only to the extent necessary for the respective age verification.

The legal basis is Art. 6 (1) (c) GDPR, insofar as verification is necessary to fulfill a legal obligation.

11. Contacting Us

When you contact us by email, phone, or any other means, we process the data you provide to handle your inquiry.

Depending on the content of your inquiry, processing is based on Art. 6 (1) (b) GDPR if your inquiry is related to a contract or order, or on Art. 6 (1) (f) GDPR for other inquiries.

12. Newsletter and Email Marketing

Insofar as we offer you the opportunity to subscribe to a newsletter or other email marketing communications, we process your email address and, where applicable, further voluntarily provided data to send these messages.

Shipping generally only occurs if there is a corresponding basis under data protection and competition law.

Insofar as shipping is based on your consent, the legal basis is Art. 6 (1) (a) GDPR.

You can revoke your consent at any time with effect for the future. You can use the unsubscribe link at the end of our marketing emails, in particular.

The revocation does not affect the lawfulness of processing carried out prior to the revocation based on your consent.

13. Cookies and Similar Technologies

Our online shop uses cookies and similar technologies. Cookies are small pieces of information that can be stored on your device or read from it.

Some cookies and comparable technologies are technically necessary for the operation of the online shop. They serve, for example, the shopping cart function, secure provision of the website, checkout, session management, or other technically necessary functions.

Insofar as storing information on your device or accessing already stored information is strictly necessary, this is carried out in accordance with the relevant provisions of the Telecommunications-Digital Services-Data Protection Act (TDDDG).

Cookies and comparable technologies that are not technically necessary, especially for certain analytical, marketing, or personalization purposes, are generally only used after you have provided corresponding consent via our consent management tool.

The legal basis for associated processing of personal data in these cases is Art. 6 (1) (a) GDPR.

You can change or revoke your granted consent at any time via the privacy settings or the cookie banner.

14. Analysis, Personalization, and Marketing Technologies

Insofar as we use analytical, personalization, or marketing technologies that are not required for the operation of our online shop, their use occurs only in accordance with the privacy settings you have made and – where required – based on your consent.

In this context, information such as visited pages, product views, shopping cart activities, device information, browser information, IP address, and technical identifiers may be processed.

The legal basis, insofar as consent is required, is Art. 6 (1) (a) GDPR.

15. Shopify Network Intelligence and Advanced Shopify Services

Insofar as Shopify Network Intelligence or comparable advanced Shopify services are activated in our shop, Shopify may process certain data from your interaction with our shop, with Shopify, and, if applicable, with other Shopify merchants, to provide the corresponding Shopify services.

For certain of these processing activities, Shopify may be independently responsible under data protection law.

Further information on this can be found in the Shopify Privacy Policy for Consumers.

16. Recipients of Personal Data

We only pass on personal data if this is necessary for the fulfillment of the stated purposes, a legal obligation exists, you have given your consent, or another legal basis permits the transfer.

Recipients may include, in particular:

Shopify and subcontractors commissioned by Shopify
Payment service providers
Shipping and logistics service providers
IT and hosting service providers
Communication and support service providers
Marketing and analytical service providers (if applicable)
Tax advisors and other professional consultants
Authorities and public bodies, insofar as a legal obligation exists

17. International Data Transfers

In the course of using Shopify and, if applicable, other service providers, personal data may be processed outside of Germany or outside the European Economic Area.

Insofar as there is no adequacy decision by the European Commission for the respective third country, such transfers only take place in compliance with legal requirements for international data transfers and using appropriate safeguards, insofar as these are necessary.

Shopify uses appropriate data protection mechanisms and suitable safeguards for international data transfers.

18. Storage Period

We only store personal data for as long as is necessary for the respective processing purpose or as required by statutory retention periods.

Data from orders and business transactions may be stored beyond the completion of the order, particularly due to commercial and tax law requirements.

After the respective purpose no longer applies and statutory retention periods have expired, the data will be deleted, provided no other legal basis permits further processing.

19. Security of Your Data

We take appropriate technical and organizational measures to protect personal data against loss, unauthorized access, alteration, disclosure, or other unauthorized processing.

Our online shop is provided via an encrypted HTTPS connection. However, please note that data transmission over the Internet can never be guaranteed to be completely risk-free.

20. Your Rights

Within the scope of legal requirements, you are entitled to the following rights, in particular:

Right of access pursuant to Art. 15 GDPR.
Right to rectification pursuant to Art. 16 GDPR.
Right to erasure pursuant to Art. 17 GDPR.
Right to restriction of processing pursuant to Art. 18 GDPR.
Right to data portability pursuant to Art. 20 GDPR.
Right to object pursuant to Art. 21 GDPR.
Right to withdraw consent pursuant to Art. 7 (3) GDPR.

Insofar as we process personal data based on Art. 6 (1) (f) GDPR, you have the right, for reasons arising from your particular situation, to object to this processing pursuant to Art. 21 GDPR.

To exercise your rights, you can contact us at any time:

alfakher8k
Owner: Michael Torner
Im Gehölz 20, 20255 Eimsbüttel, Germany
Email: service@alfakher8k.de

21. Right to Lodge a Complaint with a Data Protection Authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

For our registered office, the following supervisory authority is responsible:

The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22
20459 Hamburg
Germany
Phone: 040 42854-4040
Email: mailbox@datenschutz.hamburg.de

22. Data of Minors

Our offer is not directed at children. We do not knowingly process personal data of children for purposes that are not permitted under applicable legal regulations.

For products whose purchase is subject to legal age restrictions, the respective legal requirements and our corresponding age checks apply.

23. Links to Third-Party Websites

Our online shop may contain links to third-party websites or services. The respective operators are responsible for the processing of personal data on external websites.

Please check the privacy policies of the respective providers when you leave our website via an external link.

24. Changes to This Privacy Policy

We reserve the right to amend this privacy policy if our data processing, services used, or legal requirements change.

The current version is available on this page. The date specified above indicates the status of the current version.

25. Contacting Regarding Data Protection

If you have any questions regarding data protection, the processing of your personal data, or the exercise of your data protection rights, you can reach us at the following contact details: