Privacy Policy

Last updated: 09.04.2026

1. Controller

The controller responsible for data processing on this website is:

PRPS GmbH
Burgunder Str. 27
40549 Düsseldorf, Germany
Email: Anna@prps.eu
Phone: +49 211 56921677
Managing Director: Tobias Stefani

2. General Information on Data Processing

As a matter of principle, we process personal data of our users only to the extent necessary to provide a functional website as well as our content and services. Personal data is generally processed only with the user's consent or where processing is permitted by statutory provisions.

3. Legal Bases for Processing

Where we obtain consent for the processing of personal data, Art. 6 (1) (a) GDPR serves as the legal basis.

For the processing of personal data required for the performance of a contract, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.

Where the processing of personal data is necessary to comply with a legal obligation, Art. 6 (1) (c) GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not override the former interest, Art. 6 (1) (f) GDPR serves as the legal basis.

4. Hosting

This website is hosted by Shopify Inc., 151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada. In this context, Shopify processes personal data on our behalf. A data processing agreement (Data Processing Addendum) has been concluded with Shopify. Data transfers to the USA and Canada are based on the EU-US Data Privacy Framework and/or the EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR).

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in reliable and secure web hosting).

5. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.

6. Server Log Files

Each time our website is accessed, information is automatically stored in so-called server log files, which your browser automatically transmits to us. This includes: browser type and browser version, operating system used, referrer URL, hostname of the accessing computer, date and time of the server request, IP address.

This data is not merged with other data sources. Legal basis: Art. 6 (1) (f) GDPR.

7. Contacting Us

If you contact us by email or via a contact form, the data you provide (e.g., name, email address, message) will be stored by us in order to process your inquiry.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) and/or Art. 6 (1) (f) GDPR (legitimate interest in processing inquiries). We delete the data arising in this context once storage is no longer required, or restrict processing if statutory retention obligations apply.

8. Order Processing and Customer Account

We process personal data in the context of order processing (name, address, payment data, email address, and, where applicable, phone number).

Legal basis: Art. 6 (1) (b) GDPR (performance of a contract). Data will be deleted after the expiry of the retention periods under tax and commercial law (generally 6 or 10 years), unless you have consented to further processing.

9. Payment Service Providers

We use external payment service providers to process payments. Your payment data is processed exclusively by the respective payment service provider. Please refer to the privacy policies of the respective provider.

Legal basis: Art. 6 (1) (b) GDPR (performance of a contract).

10. TikTok Pixel

On our website, we use the TikTok Pixel of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. The TikTok Pixel is an analytics tool that makes it possible to measure the effectiveness of advertisements on TikTok and to optimize our advertising measures.

When you visit our website, data is transmitted to TikTok, in particular: IP address, browser type, operating system, pages visited, time of access, interaction data (e.g., clicks, purchases). TikTok may link this data to your TikTok profile.

Legal basis: Art. 6 (1) (a) GDPR (consent) in conjunction with Section 25 (1) of the German Telecommunications-Digital-Services Data Protection Act (TTDSG). The TikTok Pixel is only activated after your express consent via our cookie consent banner. You may withdraw your consent at any time with effect for the future.

Data transfers to third countries: Data may be transferred to the USA. TikTok relies on the EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR) for this purpose.

11. Meta Pixel (Facebook Pixel)

We use the Meta Pixel of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The Meta Pixel enables us to measure the effectiveness of Facebook and Instagram ads and to optimize our advertising campaigns.

When the pixel is activated, the following data is transmitted to Meta: IP address, browser type, operating system, referrer URL, pages visited, time of the page view, interaction data (e.g., clicks, shopping cart actions, purchases). Meta may link this data to your Facebook or Instagram profile.

Legal basis: Art. 6 (1) (a) GDPR (consent) in conjunction with Section 25 (1) TTDSG. The Meta Pixel is activated exclusively after your express consent. You may withdraw your consent at any time.

Data transfers to third countries: Meta transfers data to the USA on the basis of the EU-US Data Privacy Framework.

12. Cookies

Our website uses cookies. Cookies are text files that are stored on the user's device when visiting a website.

Technically necessary cookies are set on the basis of Art. 6 (1) (f) GDPR in conjunction with Section 25 (2) TTDSG. For all other cookies (analytics, marketing), we obtain your consent in accordance with Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TTDSG.

13. Social Media Presences

We operate online presences on TikTok, Instagram, and Facebook. When you visit our social media pages, your data may be processed by the respective platform operator. Please note that your data may be processed outside the European Union.

14. Rights of Data Subjects

You have the following rights vis-à-vis us with regard to your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7 (3) GDPR)

To exercise your rights, please contact: Anna@prps.eu

15. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The supervisory authority responsible for us is:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
(Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen)
Postfach 20 04 44
40102 Düsseldorf, Germany
https://www.ldi.nrw.de