Datenschutzerklärung

1. Introduction

This Privacy Policy explains how awaytravelbx.shop collects, uses, stores, shares, and otherwise processes personal data when individuals visit our website, create or use customer functions, place orders, contact customer service, or otherwise interact with our online store.

For purposes of applicable data protection law, including the General Data Protection Regulation (“GDPR”), awaytravelbx.shop acts as the controller of personal data for processing activities for which it determines the purposes and means of processing.

Privacy inquiries may be sent to:

Email: info@awaytravelbx.shop

The GDPR requires transparent information concerning the identity/contact details of the controller, processing purposes and legal bases, recipients, retention, international transfers where applicable, and data-subject rights.

2. Personal Data We May Collect

Depending on how you interact with the store, we may process information including:

Identity Information

This may include your name and other information provided when placing an order or contacting us.

Contact Information

This may include:

• email address;
• telephone number;
• billing information; and
• shipping information.

Order Information

This may include:

• products purchased;
• order number;
• order date;
• order value;
• delivery status;
• returns;
• refunds;
• customer-service communications; and
• transaction history.

Payment-Related Information

Payments may be processed through third-party payment processors.

We may receive payment-related information such as payment status, transaction reference, payment method, and limited billing data. Complete payment-card information may be handled directly by the relevant payment provider rather than stored by us.

Device and Technical Information

When you use our website, certain technical information may be processed, including:

• IP address;
• browser type;
• device type;
• operating system;
• website activity;
• referring pages;
• timestamps;
• cookie identifiers; and
• diagnostic information.

Communications

If you contact customer service, we may process the information contained in your message and our related correspondence.

3. Purposes and Legal Bases

We may process personal data for the following purposes.

Fulfilling Orders and Contracts

We process information necessary to:

• accept and process orders;
• collect payment;
• arrange delivery;
• provide order updates;
• manage returns and refunds; and
• provide contractual customer service.

Where the GDPR applies, this processing is generally based on the necessity of processing for the performance of a contract or steps taken at the customer’s request before entering into a contract.

Compliance With Legal Obligations

We may process and retain information where necessary to comply with tax, accounting, consumer-protection, fraud-prevention, regulatory, or other legal obligations.

Legitimate Interests

Where appropriate, we may process data for legitimate business interests such as:

• preventing fraud;
• maintaining website security;
• protecting our legal rights;
• improving operations;
• responding to customer enquiries; and
• maintaining records.

Where legitimate interests are relied upon, we consider whether those interests are overridden by the rights and freedoms of the individual.

Consent

Where required by law, we rely on consent for activities such as certain marketing communications or non-essential cookies and tracking technologies.

Consent may be withdrawn at any time for future processing.

4. Shopify and Service Providers

Our online store is operated using Shopify technology.

Personal data may be processed by Shopify and by other providers that support services such as:

• website hosting;
• ecommerce functionality;
• payment processing;
• order fulfilment;
• logistics;
• customer communications;
• fraud prevention;
• security;
• analytics; and
• technical support.

We disclose personal information only where there is an appropriate purpose and legal basis.

5. Cookies and Similar Technologies

Our website may use cookies, pixels, local storage, and related technologies.

Certain technologies are required for essential functions such as:

• shopping-cart operation;
• checkout;
• security;
• fraud prevention;
• remembering privacy choices; and
• maintaining website sessions.

Other technologies may be used for analytics, personalisation, or marketing only where permitted.

Under German TDDDG §25, accessing or storing information on a user’s device generally requires consent unless an applicable statutory exception applies, including where the technology is strictly necessary to provide a service expressly requested by the user.

Where required, non-essential technologies will be subject to the user’s consent choices.

6. Marketing Communications

If you subscribe to marketing communications, we may use your contact information to send information about products, promotions, or store updates where legally permitted.

You may unsubscribe using the method provided in the relevant communication or by contacting us.

Withdrawal of marketing consent does not affect processing that occurred lawfully before the withdrawal.

7. Sharing Personal Data

We may share personal data with appropriate recipients where necessary, including:

• Shopify and ecommerce infrastructure providers;
• payment processors;
• shipping and logistics providers;
• customer-support providers;
• fraud and security providers;
• professional advisers;
• technology providers; and
• government or regulatory authorities where disclosure is legally required.

We do not authorise service providers to use personal information for unrelated purposes merely because they receive information from us.

8. International Data Transfers

Some service providers may process personal data outside Germany or the European Economic Area.

Where the GDPR applies and personal data is transferred to a country outside the EEA, the transfer will be handled using a lawful transfer mechanism where required, such as an adequacy decision, appropriate contractual safeguards, or another mechanism permitted by applicable law.

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting, tax, contractual, fraud-prevention, and dispute-resolution requirements.

Different categories of information may therefore be retained for different periods.

When information is no longer required, it may be deleted, anonymised, or otherwise securely disposed of where appropriate.

10. Your GDPR Rights

Subject to the conditions and exceptions in applicable law, individuals may have rights including:

• the right to access personal data;
• the right to correct inaccurate data;
• the right to request erasure;
• the right to restrict processing;
• the right to object to certain processing;
• the right to data portability;
• the right to withdraw consent;
• rights concerning certain automated decisions; and
• the right to lodge a complaint with a competent data protection supervisory authority.

To exercise a privacy right, contact:

info@awaytravelbx.shop

We may request information reasonably necessary to verify identity before acting on a request.

11. Security

We use reasonable technical and organisational safeguards designed to protect personal data against unauthorised access, alteration, disclosure, destruction, or loss.

However, no internet transmission, electronic storage system, or security method is completely risk-free.

12. Children’s Privacy

Our website is not intended to encourage children who lack legal capacity to enter into transactions independently.

Where consent of a parent or legal guardian is required under applicable law, we will process personal data accordingly.

13. Third-Party Websites

Our website may contain links to websites operated by third parties.

We are not responsible for the independent privacy practices of third-party websites. Customers should review the privacy information provided by those third parties.

14. Changes to This Policy

We may update this Privacy Policy when our practices, services, technologies, or legal obligations change.

The updated version will be made available through the website and will state its revision date.

15. Contact

For questions, objections, data-access requests, deletion requests, or other privacy matters, contact:

awaytravelbx.shop
Email: info@awaytravelbx.shop