1. Who we are
This website, oavo.shop , is operated by Oavo, based in Stuttgart, Germany. Email: oavo1@outlook.com. We are the data controller responsible for your personal data collected through this website.
2. What personal data we collect
Depending on how you use our site, we may collect:
- Account and order data: name, billing and shipping address, email address, phone number, order history.
- Payment data: payments are processed by WooPayments/Stripe. We do not store your full card details ourselves — see Section 5.
- Contact form data: name, email address, and the content of your message when you contact us.
- Technical data: IP address, browser type, device information, and pages visited, collected automatically via cookies and similar technologies.
- Marketing preferences: if you subscribe to emails or newsletters, your email address and engagement with those emails.
3. Why we process your data (legal basis)
We process your personal data for the following purposes, under the GDPR:
- To fulfil orders and contracts (processing payments, arranging shipping, handling returns) — legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- To respond to enquiries submitted via our contact form — legal basis: legitimate interest / pre-contractual measures (Art. 6(1)(b)/(f) GDPR).
- To comply with legal obligations, such as tax and accounting record-keeping — legal basis: legal obligation (Art. 6(1)(c) GDPR).
- To send marketing communications, only where you have opted in — legal basis: consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time.
- To improve our website and prevent fraud, using analytics and security tools — legal basis: legitimate interest (Art. 6(1)(f) GDPR).
4. Cookies
Our website uses cookies necessary for it to function (e.g. shopping cart, checkout) and, where enabled, analytics or marketing cookies. Non-essential cookies are only set with your consent, which you can manage via our cookie banner/settings or your browser settings.
5. Who we share your data with
We share personal data only where necessary, with:
- WooPayments/Stripe — to process payments securely. Stripe acts as an independent data processor/controller for payment data; see Stripe’s own privacy policy.
- Our hosting provider (Hostinger/WordPress.com) — to store and serve website and order data.
- Shipping and fulfilment partners/suppliers — to deliver your order. As some products are shipped directly by our suppliers, your name, address, and order details are shared with them for fulfilment purposes only. Some suppliers may be located outside the European Economic Area (EEA); where this occurs, we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.
- Email/marketing service providers, only if you have opted in to marketing communications.
- Authorities, where required by law.
We do not sell your personal data to third parties.
6. International data transfers
Where any of the recipients above are located outside the EEA (for example, certain fulfilment partners), we take steps to ensure your data is protected to a standard equivalent to EU law, including through Standard Contractual Clauses approved by the European Commission.
7. How long we keep your data
We retain order and invoice data for as long as required by German tax and commercial law (generally up to 10 years for accounting records). Contact form enquiries are kept only as long as needed to resolve your query, unless a longer retention period is legally required. Marketing data is kept until you withdraw consent.
8. Your rights under GDPR
As a data subject, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data (“right to be forgotten”), where applicable
- Request restriction of processing
- Object to processing based on legitimate interest or for direct marketing
- Request data portability
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with your local data protection supervisory authority (in Germany, the relevant Landesbeauftragte für Datenschutz)
To exercise any of these rights, contact us at oavo1@outlook.com.
9. Children’s privacy
Our website is not directed at children under 16, and we do not knowingly collect personal data from children.
10. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last revised. We encourage you to review this page periodically.
11. Contact us
If you have any questions about this Privacy Policy or how we handle your data, contact us at:
Email: oavo1@outlook.com
Based in Stuttgart, Germany