Privacy policy
Privacy Policy
1. Controller
The controller responsible for data processing in the online shop www.1klas.de is:
Petrach e.K., Inhaber: Wolfgang Petrach
Stolzenauerstraße 34, 28207 Bremen, Germany
Phone: +49 (441) 55-979-565
Email: info@1klas.de
2. General
We process personal data only to the extent necessary to provide the online shop, process orders and communicate with you, or where you have given your consent. The legal bases are in particular Art. 6 (1) (a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interest), as well as § 25 TDDDG for accessing information on your device.
3. Hosting and shop system (Shopify)
Our online shop runs on the Shopify platform. The provider for merchants in the EU is Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes all data generated in the shop on our behalf (e.g. server log files with IP address, browser, date and time of access, order and customer data). The legal basis is Art. 6 (1) (b) and (f) GDPR; our legitimate interest lies in the secure and efficient operation of the shop. A data processing agreement is in place with Shopify.
Data may also be transferred to Shopify Inc. (Canada) and affiliated companies in the USA. An EU Commission adequacy decision exists for Canada; transfers to the USA are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses. More information: https://www.shopify.com/de/legal/datenschutz
4. Orders and customer account
To process your order, we process your name, billing and shipping address, email address, phone number if applicable, ordered items and payment information (Art. 6 (1) (b) GDPR). If you create a customer account, we additionally store this data for future orders until you delete your account. Due to retention obligations under commercial and tax law (§ 257 HGB, § 147 AO), order data is stored for up to ten years (Art. 6 (1) (c) GDPR).
5. Payment processing
Payment data is transmitted to the payment service provider you choose to the extent necessary for payment (Art. 6 (1) (b) GDPR):
- Shopify Payments (credit card, Apple Pay, Google Pay, etc.): Shopify International Limited, Dublin, Ireland. Card processing is carried out by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. For Apple Pay or Google Pay, the privacy policies of Apple or Google also apply.
- PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. Privacy policy: https://www.paypal.com/de/legalhub/paypal/privacy-full
Payment service providers may carry out their own checks to prevent fraud.
6. Shipping
For delivery, we transmit your name and delivery address to the commissioned shipping company (e.g. DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn). We only pass on your email address or phone number if you have consented to this during checkout so that the carrier can notify you about the delivery (Art. 6 (1) (a) GDPR); you can withdraw your consent at any time. For age-restricted goods, the recipient's age is checked upon handover (Art. 6 (1) (c) GDPR).
7. Contact and withdrawal function
If you contact us by email, via the contact form or via the "Vertrag widerrufen" (cancel contract) function, we process your details (e.g. name, email address, order number, message) to handle your request (Art. 6 (1) (b) and (c) GDPR). The data is deleted as soon as it is no longer required and no retention obligations apply.
8. Newsletter
If you subscribe to our newsletter, we use your email address to send you information about products and promotions (Art. 6 (1) (a) GDPR). Registration uses the double opt-in procedure. The newsletter is sent via Shopify Email. You can unsubscribe at any time via the link in every email or by sending us a message.
9. Cookies and similar technologies
Our shop uses cookies. We use technically necessary cookies (e.g. for the shopping cart, checkout, login, security and storing your cookie preferences) on the basis of § 25 (2) TDDDG and Art. 6 (1) (f) GDPR. We use all other cookies (e.g. for statistics or marketing) only with your consent pursuant to § 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via the cookie settings. Details can be found in our cookie policy.
10. Recipients
Your data is only passed on to the service providers mentioned above (shop system, payment service providers, shipping companies) and, where applicable, to our tax advisor and authorities if we are legally obliged to do so.
11. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to withdraw any consent given at any time with effect for the future (Art. 7 (3)).
Right to object: Where we process data on the basis of Art. 6 (1) (f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). You may object to processing for direct marketing purposes at any time without giving reasons.
To exercise your rights, simply send a message to info@1klas.de.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen, Am Hauptbahnhof 1, 28195 Bremen.
12. Obligation to provide data
Providing the data marked as mandatory during checkout is required to conclude the contract. Without this data we cannot process your order. No automated decision-making, including profiling, takes place.
The German version of this policy is legally binding. This translation is provided for convenience.
Last updated: 19.10.2026