Datenschutzerklärung

This Privacy Policy explains how BabybooFashion.shop collects, uses, discloses, retains and protects personal data when you visit the website, place an order, contact customer service or otherwise interact with the store.

For purposes of applicable data-protection law, the operator of BabybooFashion.shop is the controller of personal data processed for the store’s own purposes.

Privacy contact:

BabybooFashion.shop
Email: info@babyboofashion.shop

Personal Data We Collect

Depending on how you use the store, we may process:

• Identity information, including name;
• Contact information, including email address, telephone number, billing address and delivery address;
• Order information, including ordered products, size, colour, price, discounts, order number, returns and refunds;
• Payment-related information, including payment status, payment method and transaction identifiers;
• Payment credentials processed directly by authorised payment-service providers;
• Account information, including login details and saved preferences where customer accounts are available;
• Communications sent to customer service;
• Device and technical information, including IP address, browser type, device type, operating system and language settings;
• Usage information, including pages viewed, links selected, referring pages and interactions with the store;
• Cookie and consent preferences;
• Fraud-prevention and security information;
• Delivery, tracking and fulfilment information; and
• Marketing preferences and interactions where marketing is used.

We do not intentionally require sensitive personal data to complete ordinary purchases. Customers should not send sensitive information unless it is genuinely necessary.

Sources of Personal Data

We may receive personal data:

• Directly from you;
• Automatically from your browser or device;
• From Shopify and technology providers supporting the store;
• From payment processors;
• From delivery, fulfilment and logistics providers;
• From fraud-prevention and security providers;
• From analytics or advertising providers, subject to applicable consent requirements; and
• From other parties where legally permitted.

Purposes and Legal Bases

We process personal data for the following purposes:

Contract Performance

We process necessary data to:

• Display and sell products;
• Process orders and payments;
• Confirm transactions;
• Arrange fulfilment and delivery;
• Provide tracking information;
• Handle cancellations, withdrawals, returns and refunds;
• Respond to order-related requests; and
• Provide customer support.

The legal basis is generally the performance of a contract or steps requested before entering into a contract under Article 6(1)(b) GDPR.

Legal Obligations

We may process and retain information to:

• Maintain tax, accounting and transaction records;
• Respond to lawful government or regulatory requests;
• Fulfil consumer-protection obligations;
• Manage product-safety obligations; and
• Establish required compliance records.

The legal basis is Article 6(1)(c) GDPR.

Legitimate Interests

Where our interests are not overridden by your rights, we may process data to:

• Protect the store, customers and third parties against fraud and misuse;
• Secure the website and investigate incidents;
• Maintain, troubleshoot and improve store performance;
• Manage legal claims;
• Prevent duplicate or abusive transactions; and
• Perform limited business administration and service analysis.

The legal basis is Article 6(1)(f) GDPR. Relevant legitimate interests include operating a secure, reliable and commercially sustainable online store.

Consent

Where required, we rely on consent for:

• Non-essential cookies;
• Certain analytics technologies;
• Personalised advertising or tracking; and
• Email or electronic direct marketing.

The legal basis is Article 6(1)(a) GDPR and, where applicable, German rules governing access to information stored on terminal equipment.

Consent may be withdrawn at any time without affecting processing carried out before withdrawal.

Shopify

The store is hosted using Shopify’s ecommerce infrastructure. Shopify may process personal data to provide hosting, checkout, security, analytics and related platform services.

Shopify may also process certain data for its own legally disclosed purposes. Shopify’s own privacy documentation should be consulted for further information about its processing practices.

Payment Processing

Payments are processed through the payment methods displayed at checkout. Payment providers may receive the information necessary to authenticate, authorise, process and refund a transaction and to prevent fraud.

BabybooFashion.shop generally does not receive complete payment-card credentials where those details are submitted directly to an authorised payment processor.

A payment provider may act as an independent controller for some processing activities. Its own privacy notice will apply to those activities.

Order Fulfilment and Delivery

We may share necessary information with suppliers, warehouses, fulfilment partners, carriers, postal operators and customs service providers for the purpose of preparing, dispatching, tracking and delivering orders.

Shared information may include your name, delivery address, telephone number, email address, order contents and relevant customs information.

Other Disclosures

Personal data may be disclosed:

• To technology, hosting, communication, security and customer-support providers;
• To professional advisers, including legal, accounting and insurance advisers;
• To public authorities where disclosure is legally required;
• To investigate fraud, security incidents or unlawful activity;
• To protect legal rights or bring, exercise or defend legal claims; and
• In connection with a legitimate business reorganisation, merger, acquisition or transfer, subject to applicable safeguards.

We do not sell personal data in the ordinary meaning of selling customer lists for money.

International Data Transfers

Some service providers may process personal data outside Germany or the European Economic Area.

Where GDPR requires safeguards, transfers will be based on a lawful mechanism such as:

• An adequacy decision;
• European Commission Standard Contractual Clauses;
• Appropriate supplementary safeguards; or
• Another legally recognised transfer mechanism.

Information about applicable safeguards may be requested at info@babyboofashion.shop.

Cookies and Similar Technologies

The website may use:

• Strictly necessary cookies required for checkout, security and core functionality;
• Preference cookies that remember selections;
• Analytics cookies used to understand store usage; and
• Advertising or personalisation cookies, where enabled.

Non-essential technologies will be used only where a valid legal basis exists and consent is obtained when required. Refusing non-essential cookies should not prevent access to core shopping functions, although some optional features may work differently.

You can manage available choices through the website’s cookie-consent interface and browser settings. Withdrawal of consent does not affect prior lawful processing.

Marketing Communications

We will send electronic marketing communications only where permitted by applicable law. Where consent is required, marketing will be sent only after valid consent has been obtained.

You may unsubscribe using the link included in a marketing email or by contacting info@babyboofashion.shop.

Transactional messages concerning orders, security, returns or customer-service requests are not marketing communications and may still be sent where necessary.

Data Retention

Personal data is retained only as long as necessary for the purposes for which it was collected, including:

• Completing and administering orders;
• Handling withdrawals, returns and disputes;
• Maintaining security;
• Complying with tax, accounting and commercial record-retention obligations; and
• Establishing, exercising or defending legal claims.

When mandatory retention periods expire and no other lawful reason requires continued storage, personal data will be deleted or anonymised.

Data Security

We use reasonable technical and organisational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access.

No internet transmission or storage system can be guaranteed to be completely secure. Customers should use unique passwords and protect their account credentials.

Your GDPR Rights

Subject to the applicable legal requirements, you may have the right to:

• Obtain confirmation of whether your personal data is processed;
• Request access to your personal data;
• Correct inaccurate or incomplete data;
• Request erasure;
• Request restriction of processing;
• Object to processing based on legitimate interests;
• Object at any time to direct marketing;
• Receive eligible data in a structured, commonly used and machine-readable format;
• Request transmission of eligible data to another controller;
• Withdraw consent at any time; and
• Lodge a complaint with a competent data-protection supervisory authority.

These rights may be subject to lawful exceptions, including mandatory record-retention requirements.

Requests may be sent to info@babyboofashion.shop. We may request information reasonably necessary to verify identity and protect customer data.

Automated Decision-Making

Fraud-prevention tools may automatically evaluate transaction or device information. Where a decision produces legal or similarly significant effects and applicable law grants additional rights, you may request human intervention, express your position and contest the decision.

Children’s Privacy

The store is not intentionally directed at young children, and we do not knowingly collect children’s personal data contrary to applicable law. A parent or legal guardian who believes a child has provided personal data may contact info@babyboofashion.shop.

Changes to This Policy

We may update this Privacy Policy to reflect legal, operational or technical changes. The updated version will be posted on the website with a revised effective date.

Material changes will be communicated where required by law.