PRIVACY POLICY


1. GENERAL INFORMATION

We take the protection of your personal data seriously. This privacy policy explains how we collect, use, and store your data when you visit our online store.

The controller responsible for data processing on this website is:

SLEEP-OVER
Fatos Veseli
Audre-Lorde-Straße 27
10997 Berlin, Germany
mail@sleepovereurope.com


2. DATA COLLECTION WHEN VISITING THE WEBSITE

When you visit our Shopify store, your browser automatically transmits data to our server. This data is temporarily stored in log files and includes:

  • IP address
  • Date and time of access
  • Browser type and version
  • Operating system
  • Referrer URL
  • Pages visited

This data is processed to ensure the stability, security, and proper functioning of the website.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)


3. COLLECTION AND PERSONAL USE OF DATA

We collect personal data only when you voluntarily provide it, for example:

  • When placing an order
  • When subscribing to our newsletter
  • When contacting us (e.g. via email)

This may include:

  • Name
  • Address
  • Email address
  • Payment details
  • Phone number (if provided)

We use this data to:

  • Process your order
  • Handle payments and delivery
  • Respond to your inquiries
  • Send marketing communication (only with your consent)

Legal basis:

  • Art. 6 para. 1 lit. b GDPR (contract)
  • Art. 6 para. 1 lit. a GDPR (consent)


4. DATA SHARING

We share your data only where necessary:

  • With Shopify Inc. (our e-commerce platform provider)
  • With payment providers (e.g. PayPal, Stripe, Shopify Payments)
  • With shipping providers (e.g. DHL, Deutsche Post)

All service providers process data on our behalf and are contractually obligated to comply with data protection regulations.


5. SHOPIFY AS DATA PROCESSOR

Our store is hosted by Shopify Inc., 151 O’Connor Street, Ottawa, Ontario K2P 2L8, Canada. Your data may be transferred to countries outside the European Economic Area (EEA), including Canada and the United States.

Shopify relies on appropriate safeguards such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Participation in the EU-U.S. Data Privacy Framework (where applicable)

For more information, please refer to Shopify’s Privacy Policy.


6. NEWSLETTER

If you subscribe to our newsletter, we will use your email address to send you updates about our products, collections, and events. Registration takes place via a double opt-in procedure.

We may analyze newsletter performance (e.g. open and click rates) to improve our communication. You can unsubscribe at any time via the link provided in every email.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)


7. COOKIES AND CONSENT MANAGEMENT

Our website uses cookies and similar technologies. Essential cookies are required for the operation of the website and are set automatically. All other cookies (e.g. analytics and marketing cookies such as Meta Pixel) are only used after you have given your explicit consent via our cookie banner.

We use Consentmo to manage cookie consent. You can change or withdraw your consent at any time via the cookie settings.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent) and §25 TTDSG


8. DATA STORAGE

We use the Meta Pixel provided by Meta Platforms Ireland Ltd..

The Meta Pixel allows us to track user behavior after they interact with our advertisements on platforms such as Instagram or Facebook. This helps us measure ad performance and optimize our marketing. The processing only takes place after you have given your consent via the cookie banner.
The data collected may be transferred to Meta servers in the United States. Meta participates in the EU-U.S. Data Privacy Framework.

We have entered into a joint controllership agreement with Meta pursuant to Art. 26 GDPR.

More information: https://www.facebook.com/privacy/policy/

You can withdraw your consent at any time via the cookie settings.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)


9. DATA STORAGE

We store personal data only as long as necessary for the purposes stated above or as required by legal retention obligations.


10. YOUR RIGHTS

You have the right to:

  • Access your personal data (Art. 15 GDPR)
  • Rectify inaccurate data (Art. 16 GDPR)
  • Erase your data (Art. 17 GDPR)
  • Restrict processing (Art. 18 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdraw consent at any time (Art. 7 para. 3 GDPR)

You also have the right to lodge a complaint with a supervisory authority.


11. CONTACT

If you have any questions about this privacy policy or your data, please contact:
mail@sleepovereurope.com

 

12. CHANGES TO THIS POLICY

We may update this privacy policy from time to time. The latest version will always be available on our website.