This Privacy Policy governs the manner in which the website collects, uses, maintains and discloses information collected from users (each, a 'User') of the website ('Site'). This privacy policy applies to the Site and all products and services offered by Ecomm ByDesign.

This Privacy Policy describes the data protection practices of Ecomm ByDesign (“Ecomm ByDesign,” “we,” “us,” or “our”) in accordance with the General Data Protection Regulation (GDPR) and the Telecommunications Telemedia Data Protection Act (TTDSG) for users located in Germany and the European Union. This Privacy Policy applies to personal data that we collect and process when you access or use our website, mobile application, or other online or mobile services that link to or display this policy (the “Services”).

PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY ACCESSING OR USING THE SERVICES, YOU CONFIRM THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THE PRACTICES DESCRIBED HEREIN.

1. Data Controller

The data controller for the processing of your personal data is:

Ecomm ByDesign
Palestrinastrasse 2, Vaterstetten, 85598, DE
Email: info@ecommbydesign.net

2. Legal Bases for Processing

Under GDPR, we must inform you of the legal bases we rely on to process your data. These include:

• Performance of a contract (Art. 6(1)(b) GDPR) – for processing necessary to provide the Services, handle orders, or communicate with you.

• Consent (Art. 6(1)(a) GDPR) – for processing such as email marketing and cookie placement where required.

• Legal obligation (Art. 6(1)(c) GDPR) – for processing necessary to comply with applicable laws.

• Legitimate interests (Art. 6(1)(f) GDPR) – where processing is necessary for the operation of our business, provided that your rights do not override those interests.

3. Your Data Protection Rights (Art. 12-23 GDPR)

You have the following rights regarding your personal data:

• Right of access – to know what data we process about you.

• Right to rectification – to correct inaccurate or incomplete data.

• Right to erasure ("right to be forgotten") – to delete your data under certain conditions.

• Right to restriction of processing – to limit how we use your data.

• Right to data portability – to receive your data in a machine-readable format.

• Right to object – to object to data processing based on legitimate interest or direct marketing.

• Right to withdraw consent – where we process based on consent, you can withdraw at any time.

To exercise these rights, contact: info@ecommbydesign.net

If you believe that our processing violates data protection laws, you also have the right to lodge a complaint with your local data protection authority (Datenschutzbehörde), particularly:

Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)

https://www.bfdi.bund.de

4. International Data Transfers

Where your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards under GDPR, such as:

• Adequacy decisions by the European Commission

• Standard Contractual Clauses (SCCs) approved by the Commission

• Binding Corporate Rules (BCRs) where applicable

You can request a copy of these safeguards by contacting us.

5. Cookies & Tracking (TTDSG & GDPR)

We use cookies and similar technologies in compliance with the TTDSG, which requires explicit consent before setting non-essential cookies.

We classify cookies as:

• Essential (strictly necessary) – required for site functionality

• Analytics – to understand user behavior (requires consent)

• Marketing – to personalize advertising (requires consent)

We use a cookie banner to obtain your consent. You may withdraw or change your consent at any time.

6. Retention of Personal Data

We retain your personal data only for as long as is necessary for the purposes described in this Policy, including for satisfying legal, accounting, or reporting requirements. We regularly review the need to retain data and securely delete or anonymize data when no longer required.

7. Data Sharing

We only share your data in accordance with GDPR principles:

• With service providers under data processing agreements (Art. 28 GDPR)

• Within our corporate group on the basis of legitimate interests

• With your consent, such as when integrating social media services

• To comply with legal obligations or protect vital interests

We do not sell your personal data.

8. Children’s Privacy

Our Services are not directed to children under the age of 16. We do not knowingly collect personal data from children under 16 without parental consent. If we become aware that we have collected personal data from a child without appropriate consent, we will delete it.

9. Automated Decision-Making and Profiling

We do not make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.

10. Updates to this Privacy Policy

We may revise this Privacy Policy from time to time. If we make material changes, we will notify you (e.g., by email or a prominent notice on our Services). Please review this policy periodically.

11. Contact Us

For any questions or concerns about this Privacy Policy or how we process your data, please contact:

Ecomm ByDesign
Email: info@ecommbydesign.net