Privacy policy

This is an abridged version of our German privacy policy. Only the German version is legally binding; this page is provided for guidance. The law of the Federal Republic of Germany applies; the place of jurisdiction is, to the extent permitted by law, the registered office of SQUIQ GmbH in Leipzig. Mandatory consumer protection provisions of the state in which you have your habitual residence remain unaffected.

You can find the complete and binding version at squiq.de/en/policies/privacy-policy.

1. Controller

SQUIQ GmbH, Albrechtshainer Str. 28, 04316 Leipzig, Germany
Phone: +49 1551 0190479, email: info@squiq.de
Managing Director: Jens Hochthurn · Leipzig Local Court, HRB 42074 · VAT ID no. DE364005331

2. Which data we process and for what purposes

  • Visiting the website. Server log data (IP address, date and time, browser and device information) for the delivery and security of the site, Art. 6(1)(f) GDPR. Hosting and content delivery network: Shopify and Cloudflare.
  • Cookies and comparable technologies. Technically necessary cookies on the basis of Art. 6(1)(f) GDPR, all others only with your consent via our consent tool, Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
  • Contacting us. We process the information you provide in order to deal with your enquiry, Art. 6(1)(b) or (f) GDPR. Services used: Shopify Inbox, WhatsApp Business, Microsoft Bookings as well as Trusted Shops and Trustpilot for review reminders.
  • Customer account and newsletter. Creation and administration of a customer account, Art. 6(1)(b) GDPR. Newsletter dispatch via Shopify Email only with your consent, Art. 6(1)(a) GDPR, which can be unsubscribed from at any time.
  • Order processing. Insofar as this is necessary for delivery and payment, we pass on your data to the commissioned transport company and the commissioned credit institution, Art. 6(1)(b) GDPR. In the case of direct shipment (dropshipping), the supplier receives your name and your delivery address; in the case of freight forwarding goods, it also receives your telephone number for scheduling purposes. Further parties involved: DHL, Shopify Digital Download, Spreadshirt.
  • AI-assisted handling of enquiries. In order to provide our services, we use software with artificial intelligence supplied by Anthropic Ireland Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland. Information may be transferred to Anthropic PBC, USA; the transfer is based on the standard contractual clauses of the European Commission. The processing is carried out strictly for the purpose of performing the contract. Processing for the purposes of training and further developing the provider's AI language models is expressly prevented. A data processing agreement has been concluded with the provider.
  • Electronic withdrawal function. For the legally required electronic withdrawal function we use a solution provided by 401layers UG (haftungsbeschränkt), Dorothea-Erxleben-Straße 1a, 40721 Hilden, Art. 6(1)(b) and (c) GDPR. A data processing agreement has been concluded with the provider.
  • Reach measurement, advertising and retargeting. Only with your consent, Art. 6(1)(a) GDPR: Google Analytics 4, Google Tag Manager, Shopify Analytics, Shopify Network Intelligence, Meta Pixel, Google Ads remarketing and conversion tracking, Microsoft Advertising Universal Event Tracking, Google AdSense as well as the Amazon affiliate programme.
  • Site functionalities. Instagram feed via Mintt Studio, plugins from Facebook, Instagram, LinkedIn, Pinterest and X, YouTube, Google Maps, hCaptcha, Trusted Shops Trustbadge, Microsoft Teams, Microsoft Power BI and Shopsync.
  • Accounting. Lexware Office.

3. Recipients and transfers to third countries

Service providers acting on our behalf process your data in accordance with our instructions on the basis of data processing agreements pursuant to Art. 28 GDPR. Where data is transferred to a country outside the European Economic Area, this takes place on the basis of an adequacy decision of the European Commission or the EU standard contractual clauses.

4. Storage period

The storage period depends on the respective legal basis, the purpose of processing and statutory retention periods, in particular those under commercial and tax law. Data based on consent is stored by us until that consent is withdrawn. Data based on a legitimate interest is stored by us until you exercise your right to object, unless there are compelling legitimate grounds to the contrary.

5. Your rights

You have the following rights vis-à-vis the controller: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), notification (Art. 19), data portability (Art. 20), withdrawal of consent given (Art. 7(3)) as well as lodging a complaint (Art. 77).

RIGHT TO OBJECT: IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, WITH EFFECT FOR THE FUTURE, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. IF YOUR DATA IS PROCESSED FOR THE PURPOSES OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME WITHOUT GIVING REASONS.

6. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement.

7. Authoritative version

In the event of discrepancies between this translation and the German version, only the German version is authoritative.