Privacy policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Dennis Götz, eacygrow, Kapellenweg 3, 40882 Ratingen, Germany, Tel.: +49 2102 8918531, E-Mail: support@eacygrow.com. The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the page server (so-called “server log files”). When you call up our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you reached the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

3) Hosting & Content Delivery Network

Shopify

For the hosting of our website and the display of page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website is processed on the provider's servers. We have concluded an order processing contract with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For data transfer to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

4) Cookies

In order to make your visit to our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your end device. Some of these cookies are automatically deleted after the browser is closed (so-called “session cookies”), while others remain on your end device longer and enable page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of the cookie settings of your web browser.

Insofar as personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) lit. b GDPR either for the performance of the contract, in accordance with Art. 6 (1) lit. a GDPR in the event of consent being given, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and can decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting Us

When contacting us (e.g., via contact form or email), personal data is collected. Which data is collected in the case of using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted after final processing of your inquiry. This is the case if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no statutory storage obligations to the contrary.

6) Data Processing When Opening a Customer Account

In accordance with Art. 6 (1) lit. b GDPR, personal data is continued to be collected and processed to the extent required if you provide it to us when opening a customer account. Which data is required for opening an account can be found in the input mask of the corresponding form on our website.

Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully processed, no statutory retention periods prevent this, and there is no legitimate interest on our part in further storage.

7) Use of Customer Data for Direct Advertising

Subscription to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter if you have explicitly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm that you wish to receive newsletters in the future by clicking on a corresponding link.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 (1) lit. a GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace a possible misuse of your email address at a later date. The data collected by us when registering for the newsletter will be used exclusively for the purposes of advertising via the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a message to the controller named at the beginning. After unsubscribing, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

8) Data Processing for Order Fulfillment

8.1 Insofar as it is necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) lit. b GDPR.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data (name, address, email address) provided by you when ordering in order to inform you personally about upcoming updates within the legally prescribed period using a suitable communication channel (e.g., by post or email) as part of our legal duty to inform in accordance with Art. 6 (1) lit. c GDPR. Your contact data will be used strictly for the purpose of notifications about updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.

To process your order, we also work with the following service provider(s) who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

8.2 To fulfill our contractual obligations to you, we work with external shipping partners. We pass on your name as well as your delivery address and, if necessary for delivery, your telephone number, exclusively for the purpose of goods delivery (Art. 6 (1) lit. b GDPR) to a shipping partner selected by us.

8.3 Use of Payment Service Providers

- Apple Pay

If you choose “Apple Pay” by Apple Distribution International (Apple), Cork, Ireland, processing is handled via the “Apple Pay” function of your iOS, watchOS, or macOS device. Apple Pay uses security features integrated into your hardware and software. Processing occurs under Art. 6 (1) lit. b GDPR. Further information: https://support.apple.com/en-us/HT203027

- Google Pay

If you choose “Google Pay” by Google Ireland Limited, Dublin, Ireland, processing is handled via the “Google Pay” application. Google acts as an intermediary. Processing occurs under Art. 6 (1) lit. b GDPR. For transactions over €25, verification (e.g., Face ID, fingerprint) is required. Further information: Google Pay Privacy Notice

- Klarna

Provider is Klarna Bank AB, Stockholm, Sweden. Data transfer occurs for payment processing and, in the case of invoice/installment purchases, for credit checks based on Art. 6 (1) lit. f GDPR. You can object to this processing at any time by messaging us or Klarna.

- PayPal

Provider is PayPal (Europe) S.a.r.l. et Cie, S.C.A., Luxembourg. Data transfer occurs for payment processing and, if necessary, for credit checks (Art. 6 (1) lit. b & f GDPR). You can object to this processing at any time.

- Sofortüberweisung (via Klarna)

Payment is processed via Klarna Bank AB. Your data is transmitted exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b GDPR.

8.4 Electronic Cancellation Option for Long-term Contracts

Consumers who have entered into long-term contracts (e.g., subscriptions) on this website can cancel via an electronic button. Data collection and transmission are based on Art. 6 (1) lit. b and c GDPR.

9) Web Analysis Services

9.1 Google Analytics 4

This website uses Google Analytics 4 (Google Ireland Limited). It uses cookies to analyze website usage. IP addresses are truncated to ensure anonymity. Processing only occurs with your express consent (Art. 6 (1) lit. a GDPR). You can revoke consent via our Cookie Consent Tool. Data is stored for two months. For US transfers, Google complies with the EU-US Data Privacy Framework.

9.2 Google Tag Manager

We use Google Tag Manager to manage website tags. It transfers your IP address to Google but does not analyze data itself. Use requires consent (Art. 6 (1) lit. a GDPR).

10) Retargeting/Remarketing and Conversion Tracking

10.1 Meta Pixel

We use Meta Pixel (Meta Platforms Ireland Limited) for “Custom Audiences” and conversion tracking. This only occurs with your consent (Art. 6 (1) lit. a GDPR). Data may be transferred to Meta Platforms Inc. in the USA.

10.2 Google Ads Conversion Tracking

We use Google Ads to measure the effectiveness of our advertising. Cookies are set for 30 days. Processing requires your consent (Art. 6 (1) lit. a GDPR).

11) Site Functionalities

11.1 Google Web Fonts

For uniform font display, your browser loads web fonts into its cache. This requires consent (Art. 6 (1) lit. a GDPR).

11.2 hCaptcha

To prevent spam and bot attacks, we use hCaptcha (Intuition Machines, Inc.). This is based on our legitimate interest in security (Art. 6 (1) lit. f GDPR).

12) Tools and Miscellaneous

Cookie Consent Tool

We use a tool to obtain and document your consent for cookies. Technically necessary cookies are used to store your preferences (Art. 6 (1) lit. f & c GDPR).

13) Rights of the Data Subject

13.1 You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), notification (Art. 19), data portability (Art. 20), withdrawal of consent (Art. 7 (3)), and to lodge a complaint (Art. 77).

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR DATA BASED ON A BALANCE OF INTERESTS (LEGITIMATE INTEREST), YOU HAVE THE RIGHT TO OBJECT AT ANY TIME. IF YOU OBJECT TO DIRECT MARKETING, WE WILL STOP PROCESSING YOUR DATA FOR THIS PURPOSE IMMEDIATELY.

14) Duration of Storage

Data storage is based on legal retention periods (e.g., commercial and tax law). Data processed based on consent is stored until you withdraw it. Data for contract fulfillment is deleted once the contract is processed and retention periods expire.