Privacy Policy

As of: August 2025

1. Responsible Party

NEL Commerce
Offenbacher Straße 109
63263 Neu-Isenburg, Germany
E-Mail: nel@hanna-silberzaubercrafts.de

2. General Information on Data Processing

We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR) and the Telecommunications-Telemedia Data Protection Act (TTDSG). The provision of personal data is neither legally nor contractually required but may be necessary for the conclusion or fulfillment of a contract.

Personal data means any information relating to an identified or identifiable natural person.

3. Data Security (SSL/TLS)

Our website uses SSL/TLS encryption to protect the transmission of confidential content. You can recognize an encrypted connection by "https://" and the lock symbol in the browser's address bar.

4. Server Log Files

When you visit our website, the following data is automatically collected and stored in server log files: accessed page/file, date and time, IP address, amount of data transferred, requesting provider.

Purposes: Operational security, error analysis, abuse prevention
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

5. Hosting & Platform (Shopify)

Our online shop is operated by Shopify International Limited, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland. Processing is based on a data processing agreement according to Art. 28 GDPR.

Data transfer to third countries: Shopify may transfer data to Canada and the USA. For Canada, there is an adequacy decision by the EU Commission. For the USA, the transfer is based on the Standard Contractual Clauses (SCC) because Shopify is not certified under the Trans-Atlantic Data Privacy Framework (TADPF).

More information: Shopify Privacy Policy

6. Contact

When contacting us by email or contact form, we process your data (name, email address, content of the message) exclusively to handle your inquiry.

Legal bases: Art. 6 para. 1 lit. b GDPR (pre-contractual/contractual measures) and Art. 6 para. 1 lit. f GDPR (legitimate interest in communication). We delete the data after processing is complete, unless legal retention periods prevent this.

7. Orders & Contract Processing

To process your order, we process, among other things, name, delivery and billing address, email address, and payment information.

Recipients: Shipping service providers (e.g., DHL), payment service providers, IT service providers, possibly dropshipping partners (direct shipping from manufacturer/supplier).

Legal basis: Art. 6 para. 1 lit. b GDPR (contract fulfillment). Transfer to third countries only occurs if necessary for contract fulfillment.

8. Payment Providers

PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg – Privacy Policy
Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden – Privacy Policy
Shopify Payments / Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland – Privacy Policy
Credit Card via Shopify Payments/Stripe (see above)

We use Sendvio to send our newsletter. Registration is done via double opt-in. You can revoke your consent at any time via the unsubscribe link in the newsletter.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent).

10. Tracking & Marketing Tools

The following services are only used after your consent via our cookie consent tool (§ 25 para. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time in the consent tool with effect for the future.

Google Ads Conversion Tracking – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – Privacy Policy
Meta Pixel – Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland – Privacy Policy
Pinterest Tag – Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland – Privacy Policy
Snap Pixel – Snap Inc., 3000 31st Street, Santa Monica, CA 90405, USA – Privacy Policy

11. Cookies & Consent Management

We use cookies and similar technologies:

Technically necessary cookies (always active): for basic functions and security
Analysis & marketing cookies (only with consent): for reach measurement and personalized advertising

You can change your selection at any time in our cookie consent tool.

12. Storage Duration

We store personal data only as long as necessary for the respective purpose or as required by legal retention periods. After the purpose ceases or the periods expire, the data is deleted unless consent for longer storage exists.

13. Rights of Data Subjects

You have – subject to legal requirements – the following rights under Art. 15–21 GDPR:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object to processing based on Art. 6 para. 1 lit. f GDPR

14. Right to Object under Art. 21 GDPR

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR. If the processing is for direct marketing purposes, you may object at any time; this also applies to profiling to the extent it is related to such direct marketing.

15. Right to Complain to the Supervisory Authority

Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection laws.

Responsible authority for us:
Hessian Commissioner for Data Protection and Freedom of Information
P.O. Box 3163, 65021 Wiesbaden
Tel.: +49 611 14080
E-Mail: poststelle@datenschutz.hessen.de

16. Data Transfers to Third Countries

If data is transferred to countries outside the EU/EEA, this is done – if no adequacy decision exists – based on appropriate safeguards, especially the EU Standard Contractual Clauses (SCC). Copies of the SCC can be provided upon request.

17. Changes to this Privacy Policy

We reserve the right to update this privacy policy to adapt it to changed legal conditions or changes to our services. The version published on our website at the time applies.

Data Protection