Izjava o zaštiti podataka o ličnosti

Privacy Policy

This English version is provided for convenience; in case of doubt, the German version shall prevail.

1. Controller

Good Willy EU, owner Zeljko Grujic, Filchnerstraße 10, 81476 Munich, Germany, email: shop@goodwilly.eu, phone: +49 89 904236609. No data protection officer has been appointed, as there is no legal obligation to do so.

2. Hosting and Shop System

Our shop runs on Shopify. The provider for customers in the EU is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes all data arising from visits and orders on our behalf on the basis of a data processing agreement (Art. 28 GDPR).

Data may be transferred to Shopify Inc. in Canada and the USA. Canada is covered by an adequacy decision of the EU Commission; transfers to the USA are based on the EU-US Data Privacy Framework or EU Standard Contractual Clauses. The legal basis is our legitimate interest in operating the shop securely and efficiently (Art. 6(1)(f) GDPR).

3. Server Log Files

When you access the shop, technically necessary data is collected: IP address, date and time, page accessed, referrer, browser and operating system. This data serves the stability and security of the shop (Art. 6(1)(f) GDPR) and is deleted after a short time.

4. Cookies and Consent

We set technically necessary cookies (e.g. shopping cart, checkout, language settings) on the basis of § 25(2) TDDDG and Art. 6(1)(f) GDPR. We only use all other cookies and similar technologies, for example for statistics or marketing, with your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).

We obtain your consent via our cookie banner; you can withdraw or change it there at any time with effect for the future.

5. Orders and Customer Account

To process your order, we process your name, billing and delivery address, email address, phone number if applicable, as well as order and payment data (Art. 6(1)(b) GDPR).

If you create a customer account, we store this data until the account is deleted. You can also place an order without an account.

6. Payment Service Providers

To process payments, we pass on the necessary payment data to the payment service provider you have chosen (Art. 6(1)(b) GDPR).

Depending on the payment method, these are: Shopify Payments (processed by Stripe Payments Europe Ltd., Ireland) and PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. The service providers may carry out their own checks to prevent fraud; their privacy notices also apply.

7. Shipping

For delivery, we pass on your name and delivery address to DHL Paket GmbH, Bonn (Art. 6(1)(b) GDPR). We only pass on your email address or phone number if you have consented to this at checkout so that the carrier can inform you about the delivery (Art. 6(1)(a) GDPR). You can withdraw this consent at any time.

8. Contact

If you write to us by email or via the contact form, we process your details to handle your enquiry (Art. 6(1)(b) or (f) GDPR).

9. Statistics and Marketing

Only if you give your consent via the cookie banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG) do we use:

  • Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to statistically evaluate the use of our shop. IP addresses are truncated in the process.
  • Meta Pixel by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland, to measure the success of our advertising on Facebook and Instagram and to show ads to visitors of our shop.

Data may be transferred to the USA in the process. The transfer is based on the EU-US Data Privacy Framework, under which both providers are certified, and additionally on EU Standard Contractual Clauses. You can withdraw your consent at any time via the cookie banner.

10. Storage Period

We only store personal data for as long as is necessary for the respective purpose. Due to commercial and tax law obligations, we retain order and invoice data for up to eight or ten years (§ 257 HGB, § 147 AO).

11. Your Rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent given with effect for the future (Art. 7(3)).

Right to object: If we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). You may object to advertising at any time without giving reasons.

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

12. Obligation to Provide Data

Without the details marked as mandatory at checkout, we cannot process your order. No automated decision-making pursuant to Art. 22 GDPR takes place.

Last updated: October 2026