Privacy policy
PRIVACY POLICY
Last updated: August 2026
1. CONTROLLER
The controller responsible for the processing of personal data in connection with this online shop is:
FoodyPack.de
Owner: Habip Sen
Pleikartsförster Str. 1
69124 Heidelberg
Germany
Phone: +49 163 3658074
Email: info@foodypack.eu
2. GENERAL INFORMATION
Foodypack operates this online shop and the associated website, including the related content, features, products and services.
The online shop is technically provided through Shopify.
We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).
This Privacy Policy explains what personal data we process, the purposes for which it is processed, the legal bases for processing and the rights of data subjects.
3. CATEGORIES OF PERSONAL DATA
Depending on how you use our online shop, we may process in particular the following categories of personal data:
• Contact and master data, including name, postal address, billing and shipping address, telephone number and email address;
• company and order information provided in connection with an order or inquiry;
• payment and transaction data where required for payment processing;
• customer account and order information;
• information contained in communications with us, particularly in connection with inquiries, quotations, complaints or support requests;
• technical information, including IP address, browser, device and connection information;
• usage information relating to your interaction with our online shop;
• for individually printed or personalized products, production data provided by the customer, including logos, graphics, print files, text, design information and other information required for production.
4. PURPOSES AND LEGAL BASES FOR PROCESSING
We process personal data in particular for the following purposes:
PRE-CONTRACTUAL MEASURES AND PERFORMANCE OF CONTRACTS
We process personal data to handle inquiries and quotations, process orders and payments, arrange deliveries, communicate with customers and carry out other contract-related activities.
The legal basis is in particular Article 6(1)(b) GDPR.
PERSONALIZED AND CUSTOM-MADE PRODUCTS
For individually printed, personalized or custom-made products, we process logos, graphics, print files, text, approvals and other production information provided by the customer insofar as this is necessary for quotations, design, production approval and manufacturing.
Where necessary for production, this information may be disclosed to production, printing or other fulfilment partners engaged by us.
The legal basis is in particular Article 6(1)(b) GDPR.
LEGAL OBLIGATIONS
Where processing is necessary to comply with statutory retention, tax, commercial or other legal obligations, processing is carried out in particular on the basis of Article 6(1)(c) GDPR.
LEGITIMATE INTERESTS
Where necessary, we process personal data on the basis of our legitimate interests, in particular to ensure the secure and economical operation of our online shop, prevent fraud, maintain IT security and establish, exercise or defend legal claims.
The legal basis is Article 6(1)(f) GDPR.
CONSENT
Where processing requires consent, it is carried out on the basis of Article 6(1)(a) GDPR.
Consent may be withdrawn at any time with effect for the future.
5. SHOPIFY
Our online shop is provided through Shopify.
When our online shop is used, Shopify processes personal data insofar as this is necessary to provide and operate the shop infrastructure and related features.
This may include technical information, device and usage information, as well as order and transaction information.
In connection with the use of Shopify, personal data may also be processed outside the European Economic Area.
Where required, international data transfers are carried out in accordance with applicable legal requirements and appropriate transfer mechanisms.
6. PAYMENT PROCESSING
Depending on the payment method selected during checkout, personal data required for payment processing is transmitted to the respective payment service provider.
The privacy policies of the respective payment service providers also apply.
The payment methods actually available are displayed during checkout.
7. SHIPPING AND LOGISTICS
For the purpose of delivering an order, we transmit the necessary personal data, in particular the customer's name, delivery address and, where applicable, contact information required for delivery, to the respective shipping or logistics service provider.
Depending on the shipping method, shipment size and destination, DHL, UPS, GLS or freight forwarding companies may be used.
8. PRODUCTION AND PRINTING PARTNERS
For individually printed, personalized or custom-made products, data required for production may be transmitted to production, printing and fulfilment partners engaged by us.
The information transmitted is limited to what is necessary to fulfil the respective order.
9. COOKIES AND SIMILAR TECHNOLOGIES
Our online shop uses technically necessary cookies and similar technologies where required for the operation, security and basic functionality of the online shop.
Depending on the technical configuration, analytics, marketing or personalization technologies may also be used.
Where consent is legally required, such technologies are generally only used after the relevant consent has been provided.
Consent may be changed or withdrawn with effect for the future through the available privacy or cookie settings.
10. ANALYTICS, MARKETING AND ADVERTISING
Where analytics, marketing, advertising or comparable third-party services are used, they are used in accordance with applicable data protection laws.
Where consent is required, processing generally takes place only after the relevant consent has been provided.
The analytics, marketing and tracking services actually used in the online shop and their technical configuration are reviewed regularly, and this Privacy Policy is updated where necessary.
11. RECIPIENTS OF PERSONAL DATA
Where necessary for the respective purposes and legally permitted, personal data may be disclosed in particular to the following categories of recipients:
• Shopify and technical service providers associated with Shopify;
• payment service providers;
• shipping and logistics service providers;
• production and printing partners;
• IT, hosting, cloud and security service providers;
• analytics and marketing service providers where they are actually used and the applicable data protection requirements are met;
• public authorities or other bodies where disclosure is required by law.
Personal data is only disclosed where an appropriate legal basis exists.
12. INTERNATIONAL DATA TRANSFERS
In connection with Shopify and, where applicable, other service providers, personal data may be processed outside the European Economic Area.
Where personal data is transferred to third countries, such transfers are carried out in accordance with applicable legal requirements.
This may include, in particular, adequacy decisions of the European Commission, appropriate safeguards such as Standard Contractual Clauses or other legally recognized transfer mechanisms.
13. DATA RETENTION
We generally retain personal data only for as long as necessary for the respective processing purpose.
In addition, statutory retention and documentation obligations may apply, in particular under commercial and tax law.
Once the processing purpose no longer applies and statutory retention periods have expired, personal data is deleted or anonymized in accordance with applicable legal requirements.
14. DATA SECURITY
We implement appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration or unauthorized disclosure.
However, completely risk-free transmission of data over the internet cannot technically be guaranteed.
15. RIGHTS OF DATA SUBJECTS
Where the statutory requirements are met, data subjects have in particular the following rights:
• Right of access pursuant to Article 15 GDPR;
• Right to rectification pursuant to Article 16 GDPR;
• Right to erasure pursuant to Article 17 GDPR;
• Right to restriction of processing pursuant to Article 18 GDPR;
• Right to data portability pursuant to Article 20 GDPR;
• Right to object pursuant to Article 21 GDPR;
• Right to withdraw consent with effect for the future.
Where processing is based on Article 6(1)(f) GDPR, the data subject has a right to object where the statutory requirements are met.
Where personal data is processed for direct marketing purposes, the data subject may object to such processing at any time.
16. RIGHT TO LODGE A COMPLAINT
Data subjects have the right, in accordance with applicable law, to lodge a complaint with a data protection supervisory authority.
You may in particular contact the supervisory authority responsible for the controller or another supervisory authority competent under applicable law.
17. CHILDREN'S DATA
Our services are not specifically directed at children.
We do not knowingly collect personal data from children without an applicable legal basis or any consent that may be legally required.
18. THIRD-PARTY WEBSITES AND LINKS
Our online shop may contain links to third-party websites or online services.
The respective operators are generally responsible for the processing of personal data carried out through such external services.
Please refer to the privacy information provided by the respective third party.
19. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy where necessary due to technical, business, legal or regulatory changes.
The current version will be published in our online shop.
20. CONTACT
If you have any questions about data protection, this Privacy Policy or the exercise of your data protection rights, please contact:
FoodyPack.de
Owner: Habip Sen
Pleikartsförster Str. 1
69124 Heidelberg
Germany
Phone: +49 163 3658074
Email: info@foodypack.eu
Controller within the meaning of the General Data Protection Regulation (GDPR):
Habip Sen
FoodyPack.de
Pleikartsförster Str. 1
69124 Heidelberg
Germany
Last updated: August 2026