Privacy Policy
Your privacy matters to us. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have over it. We are committed to handling your information responsibly and in line with the GDPR/DSGVO and the German TDDDG.
1. Data Controller
THE ARCIVE UG (haftungsbeschränkt), Talstraße 3, 13189 Berlin, Deutschland. E-Mail: hello@arcive.shop
2. What We Collect
When you visit our site or place an order, we may collect:
- Personal details such as your name, email address, phone number, and delivery address
- Payment information, processed securely by our payment provider (we never store card details ourselves)
- Technical data including IP address, browser type, and pages visited, gathered through cookies and analytics tools
- Your marketing preferences (whether you have opted in to hear from us by email)
3. Legal Basis for Processing (Art. 6 GDPR / DSGVO)
- Art. 6(1)(b) GDPR – Contract: We process your data to fulfil your order, manage your account, and provide our services.
- Art. 6(1)(c) GDPR – Legal obligation: We retain certain data to comply with commercial and tax law (§ 147 AO, § 257 HGB) for up to 10 years.
- Art. 6(1)(f) GDPR – Legitimate interest: We process data for fraud prevention, IT security, and service improvement.
- Art. 6(1)(a) GDPR – Consent: For marketing emails and non-essential cookies/tracking. You may withdraw consent at any time.
4. How We Use Your Data
We use your information to process and fulfil orders, send order confirmations and shipping updates, respond to customer service messages, send marketing emails (only with opt-in consent), and improve our site.
5. Google Analytics and Google Tag Manager
We use Google Tag Manager and Google Analytics (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to analyze website usage. These tools collect data including anonymized IP addresses, pages visited, and session duration. Data may be transferred to Google servers in the USA, which is covered by the EU-US Data Privacy Framework (adequacy decision of 10 July 2023).
Legal basis: your prior consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. These tools are only activated after you give consent via our cookie banner. You may withdraw consent at any time via your cookie settings. Google's privacy policy: https://policies.google.com/privacy.
6. Cookies
We use cookies in accordance with § 25 TDDDG. Essential cookies are set without consent as they are strictly necessary. Non-essential cookies (analytics, marketing) are only set after you provide consent via our cookie consent banner. You can manage or withdraw your cookie preferences at any time.
7. Who We Share Your Data With
We do not sell your data. We share it only with trusted third parties who help us run the business: shipping carriers (for delivery), payment processors (for secure transactions), analytics providers (Google Analytics, with your consent), and email marketing platforms (if you have subscribed). All third parties are required to handle your data in compliance with applicable law.
8. How Long We Keep Your Data
- Order and transaction data: 10 years (§ 147 AO, § 257 HGB)
- Customer account data: duration of account plus 3 years after closure
- Marketing consent records: until withdrawal, plus 3 years for proof of consent
- Analytics data: 14 months (Google Analytics default retention)
- Support communications: 3 years
9. Your Rights
Under GDPR, you have the right to access, correct, erase, restrict, and port your personal data, and to object to processing. Where processing is based on consent, you may withdraw consent at any time. To exercise any of these rights, email hello@arcive.shop.
10. Right to Lodge a Complaint
You have the right to lodge a complaint with your local data protection supervisory authority. In Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin, Tel.: +49 30 13889-0, E-Mail: mailbox@datenschutz-berlin.de.
11. Security
We use industry-standard security practices to keep your data safe. No system is completely infallible, and we cannot guarantee total security for data transmitted over the internet.
12. Changes to This Policy
We may update this policy from time to time. Any changes will appear on this page with a revised date at the top.
13. Contact
For any questions about your data or this policy, contact us at hello@arcive.shop.