Privacy policy
Last updated: 16 August 2026
This English version is provided for convenience only. The legally binding version is the German version.
We want you to know which data we process and why. In short: we only collect the data needed to run the shop, handle your orders and course bookings, and communicate with you. We do not sell your data.
1. Controller
The controller responsible for data processing on this website is Kö Keramik GbR, Maximilian Köhler & Lena Köhler, Schattbachstraße 77, 44803 Bochum, Germany, email: hello@koekeramik.de, phone: 015234500884.
2. Hosting and shop platform (Shopify)
Our online shop runs on the Shopify platform (Shopify International Limited, 2nd Floor Victoria Buildings, 1–2 Haddington Road, Dublin 4, Ireland). Shopify processes all data arising in the shop on our behalf (data processing agreement, Art. 28 GDPR). Data may also be transferred to servers outside the EU, in particular to the parent company in Canada (EU adequacy decision) and to the USA; such transfers are safeguarded by the EU-US Data Privacy Framework and standard contractual clauses.
When you visit the website, Shopify collects technically necessary access data (e.g. IP address, date and time, page accessed, browser type). This data is required for the secure operation of the website (Art. 6(1)(f) GDPR).
3. Orders and course bookings
When you place an order or book a course, we process the data required to perform the contract: name, address, email address, phone number where applicable, and order and payment data (Art. 6(1)(b) GDPR). We only pass on data where necessary:
- to the shipping provider delivering your order (name and delivery address),
- to the payment provider you choose — your payment details (e.g. card data) are processed directly by that provider; we do not receive them in full.
We retain invoice and accounting data for as long as commercial and tax law requires (up to 10 years, Art. 6(1)(c) GDPR).
4. Customer account
If you create a customer account, we store the data held there (e.g. name, addresses, order history) until you delete the account or ask us to delete it (Art. 6(1)(b) GDPR).
5. Contacting us
If you contact us by email, phone or a contact form, we process your details to answer your enquiry (Art. 6(1)(b) or (f) GDPR). We delete this data once it is no longer needed and no statutory retention obligations apply.
6. Newsletter
You will only receive our newsletter if you have expressly signed up for it (Art. 6(1)(a) GDPR, double opt-in). You can unsubscribe at any time via the link in every email or by writing to hello@koekeramik.de.
7. Cookies
Our shop uses cookies that are technically necessary for its operation — for example for the cart, checkout and language settings (Section 25(2) TDDDG, Art. 6(1)(f) GDPR). An overview of the cookies used by Shopify is available at shopify.com/legal/cookies. You can delete or block cookies in your browser at any time; some shop features (e.g. the cart) may then be unavailable.
8. Your rights
You have the right to:
- access the personal data we hold about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- withdraw consent you have given, with effect for the future (Art. 7(3) GDPR).
Right to object (Art. 21 GDPR): You may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests.
An informal message to hello@koekeramik.de is all that is needed.
9. Right to lodge a complaint
You also have the right to complain to a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
10. Changes to this policy
We will update this privacy policy when our processes or the legal situation change. The version published here applies.