Privacy Policy

1. Responsible Party

The data controller pursuant to Art. 4 (7) GDPR is Maximilian Kuwertz, Katzbachstr. 4, 10965, Berlin, Germany, e-mail: support@spells-ai.com.

2. Hosting

Our online shop is hosted by Shopify International Ltd., Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Data may also be processed in Canada and the USA. The legal basis is Art. 6 (1) lit. b GDPR. For further details see Shopify’s privacy policy: www.shopify.com/de/legal/datenschutz.

3. Server Logfiles

With every access to our website, Shopify automatically collects information in so-called server log files. These include IP address, browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and further technical data.

These data are not assignable to specific persons and are processed to ensure functionality, security and optimization of the service. The legal basis is Art. 6 (1) lit. f GDPR.

4. Contact

If you contact us by e-mail or via the contact options provided, we store and process your details to handle your inquiry. The legal basis is Art. 6 (1) lit. b GDPR, insofar as it concerns pre-contractual measures or contract fulfillment, and Art. 6 (1) lit. f GDPR, as we have a legitimate interest in processing inquiries.

5. Payment Providers

We use PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg, and Shop Pay / Shopify Payments. For details please see PayPal’s privacy policy: www.paypal.com/de/webapps/mpp/ua/privacy-full, and Shopify’s privacy policy. Legal basis: contract performance pursuant to Art. 6 (1) lit. b GDPR.

6. Cookies

Our online shop uses cookies. These are small text files stored on your device. Some cookies are technically necessary to ensure the basic functionality of our shop. These are based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. Other cookies are used for analysis and marketing purposes, e.g. Google Analytics or the Meta Pixel, and are only set with your consent pursuant to Art. 6 (1) lit. a GDPR. You can withdraw or change your consent at any time via the cookie consent tool implemented on our website.

7. Web Analytics and Marketing

We use Google Analytics of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Google also processes data in the USA based on the EU-US Data Privacy Framework or standard contractual clauses. Privacy policy: policies.google.com/privacy. We also use the Meta Pixel (Facebook Pixel) of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Data may also be transferred to the USA. Privacy policy: www.facebook.com/about/privacy. The legal basis for the use of these services is your consent under Art. 6 (1) lit. a GDPR. You may withdraw this consent at any time with effect for the future.

8. Newsletter

We use Brevo (formerly Sendinblue GmbH), Köpenicker Straße 126, 10179 Berlin, for sending newsletters. Registration takes place using the double opt-in procedure. Privacy policy: www.brevo.com/de/legal/privacypolicy. Legal basis: your consent pursuant to Art. 6 (1) lit. a GDPR.

9. Storage Period

We store personal data only as long as legally required or necessary for the fulfillment of the contract. Afterwards the data will be deleted unless statutory retention obligations prevent this.

10. Your Rights

You have the right to obtain information about the data we process, the right to rectification of inaccurate data, the right to erasure, the right to restriction of processing, the right to data portability and the right to object to processing. You also have the right to lodge a complaint with a supervisory authority.

11. Supervisory Authority

The competent authority is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de.