1. Who we are
This website, oavo.shop, is operated by Oavo. Oavo is the controller responsible for your personal data collected through this website. You can find our full contact details in our Imprint. Email: hallo@oavo.shop
2. What personal data we collect
Depending on how you use our site, we may collect:
- Account and order data: name, billing and shipping address, email address, phone number, order history.
- Payment data: payments are processed by our payment providers (PayPal, Klarna, WooPayments/Stripe). We do not store your full card details ourselves.
- Contact form data: name, email address and the content of your message when you contact us.
- Technical data: IP address, browser type, device information and pages visited, collected automatically via cookies and similar technologies.
- Marketing preferences: if you subscribe to our newsletter, your email address and your interaction with our emails.
3. Why we process your data (legal basis)
- To fulfil orders and contracts (processing payments, arranging shipping, handling returns) – performance of a contract (Art. 6(1)(b) GDPR).
- To answer enquiries submitted via our contact form or email – pre-contractual measures / legitimate interest (Art. 6(1)(b) and (f) GDPR).
- To comply with legal obligations, such as tax and accounting record-keeping – legal obligation (Art. 6(1)(c) GDPR).
- To send marketing communications, only where you have opted in – consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time.
- To measure and improve our advertising (Meta Pixel), only with your consent via our cookie banner – consent (Art. 6(1)(a) GDPR, § 25 TDDDG).
- To keep our website secure and working – legitimate interest (Art. 6(1)(f) GDPR).
4. Cookies
Our website uses cookies that are necessary for it to work (e.g. shopping cart, checkout). Marketing cookies (e.g. Meta Pixel) are only set with your consent, which you can give, refuse or change at any time via our cookie banner. Details can be found in our Cookie Policy.
5. Who we share your data with
We share personal data only where necessary, with:
- Payment providers (PayPal, Klarna, WooPayments/Stripe) – to process your payment. They are independently responsible for payment data; please see their own privacy policies.
- Our hosting provider (Hostinger) – to store and run the website and order data.
- Suppliers and shipping partners – to deliver your order. Because some products are shipped directly by our suppliers, your name, address and order details are passed on to them for delivery only. Some suppliers may be located outside the European Economic Area (EEA); in that case we use appropriate safeguards (such as EU Standard Contractual Clauses).
- Meta Platforms Ireland Ltd. (Meta Pixel) – only if you have consented to marketing cookies.
- Email/newsletter providers – only if you have subscribed.
- Authorities – where required by law.
We do not sell your personal data.
6. Transfers outside the EU/EEA
Where a recipient is located outside the EEA, we ensure an adequate level of protection, e.g. through an EU adequacy decision (such as the EU-US Data Privacy Framework) or Standard Contractual Clauses approved by the European Commission.
7. How long we keep your data
We keep order and invoice data for as long as required by German tax and commercial law (generally up to 10 years). Enquiries are kept only as long as needed to answer them, unless a longer period is required by law. Marketing data is kept until you withdraw your consent.
8. Your rights
You have the right to:
- access the personal data we hold about you,
- have inaccurate data corrected,
- have your data deleted, where applicable,
- restrict processing,
- object to processing based on legitimate interest or for direct marketing,
- data portability,
- withdraw your consent at any time, with effect for the future,
- lodge a complaint with a data protection supervisory authority (in Baden-Württemberg: Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).
To exercise your rights, simply email us at hallo@oavo.shop.
9. Children
Our website is not directed at children under 16, and we do not knowingly collect personal data from children.
10. Changes to this policy
We may update this privacy policy from time to time. The current version is always available on this page.
Last updated: October 2026