Privacy Policy | Splendido e.U.

Protecting your personal data is important to us. In this privacy policy, we transparently inform you about the collection, processing, and use of your data when visiting and using our online shop at www.splendido.at, in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Telecommunications Act 2021 (TKG).

1. Controller

Splendido e.U.
Dayana Bahchevanova
Neubaugasse 24, 8020 Graz, Austria
Telephone: +43 681 20808264
Email: info@splendido.at
Web: www.splendido.at

VAT identification number: ATU80669028
Companies Register number: FN 627740 y
Companies Register Court: Regional Court for Civil Law Matters, Graz

For questions about data protection or to exercise your rights, please contact info@splendido.at.

We have not appointed a data protection officer because the statutory requirements under Art. 37 GDPR are not met.

2. Collection and processing of personal data

2.1 Visiting the website (server log files)

When you access our website, technical data is automatically collected and stored in server log files: IP address, date and time of access, pages and files accessed, amount of data transferred, referrer URL, browser type, operating system.

• Purpose: Ensuring technical functionality, system security (e.g. detecting and preventing attacks), and improving user-friendliness.
• Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in a secure and functional online shop).
• Storage period: Generally 30 days. Longer storage occurs only in the event of security-related incidents.

2.2 Orders / Online shop

To process orders, we collect: first and last name, billing and delivery address, email address, telephone number (if provided), and payment information. Payment data is processed exclusively to fulfil the purchase contract and is forwarded to the respective payment service providers (see section 5).

• Purpose: Contract performance, invoicing, shipping, and customer support.
• Legal basis: Art. 6 para. 1 lit. b GDPR (performance of the contract) and Art. 6 para. 1 lit. c GDPR (legal obligations, in particular statutory retention obligations under § 132 BAO).
• Storage period: Customer data will be deleted upon request after the contractual relationship has ended. Data relevant to accounting (invoices, order documents) will be retained for 7 years in accordance with § 132 para. 1 BAO.

2.3 Customer account

Optionally, you can create a customer account to manage your orders, save delivery addresses, and speed up future orders.

• Data collected: Email address, name, password (stored in encrypted form), optional delivery/billing addresses, order history.
• Legal basis: Art. 6 para. 1 lit. b GDPR (performance of the contract).
• Storage period: The customer account remains active until you request its deletion. Deletion is possible at any time upon request at info@splendido.at.

2.4 Contact form and direct email communication

When using our contact form or making inquiries by email, we collect: name, email address, and any other information you voluntarily provide to process your inquiry.

• Legal basis: Article 6 (1) (a) GDPR (consent by submitting the inquiry) or Article 6 (1) (b) GDPR (for pre-contractual inquiries).
• Storage period: The customer account remains active until you request its deletion. Deletion is possible at any time upon request at info@splendido.at.

2.5 Newsletter

When you sign up for the newsletter, we use your email address to send information about products, offers, and news from Splendido e.U.

• Procedure: Double opt-in (after signing up, you will receive a confirmation email with an activation link).
• Unsubscribe: Possible at any time via the unsubscribe link in every newsletter email or by email to info@splendido.at.
• Legal basis: Article 6 (1) (a) GDPR (consent) in conjunction with Section 174 (5) TKG 2021.
• Storage period: Until consent is withdrawn.

3. Cookies and tracking technologies

Our online shop uses cookies and similar technologies that are divided into four categories. A complete, automatically updated overview of all cookies used (name, provider, storage period, purpose) can be found in our Cookie Policy.

3.1 Strictly necessary cookies

These cookies are required to operate the shop (e.g., shopping cart, security, checkout, language settings). They cannot be deactivated.

Legal basis: Section 165 (3) TKG 2021 in conjunction with Article 6 (1) (f) GDPR.

3.2 Functional cookies

These cookies enable convenience features such as automatic translation, recently viewed products, or saved preferences.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent) in conjunction with Section 165 para. 3 TKG 2021.

3.3 Performance/statistics cookies

We use the following analytics tools only with your consent:

Google Analytics 4 (GA4)
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
GA4 operates with Google Consent Mode v2 enabled and IP truncation. Without your consent, no personal data is transmitted to Google (only aggregated, cookie-less pings for statistical modeling).
GA4 data retention period: 14 months.

Shopify Analytics
Provider: Shopify International Ltd., Dublin, Ireland (see section 4).

Microsoft Clarity
Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. In the EU: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
Purpose: analysis of user behavior using heatmaps, session recordings, scroll and click tracking to optimize user-friendliness and the checkout process.
Data processed: truncated IP address, device and browser information, approximate location (country/region), interactions on the website, page views, time spent on the site, referrer URL. Sensitive form entries (passwords, payment details) are masked by default.
With consent granted, Microsoft Clarity uses, among others, the cookies _clck (1 year), _clsk (1 day), CLID (1 year), MUID (1 year), ANONCHK (10 minutes), MR (7 days), SM (session). Without consent, no cookies are set; Microsoft Clarity then operates in cookieless mode without processing identifying data.
Microsoft Clarity is operated as part of Microsoft cloud services, which are certified according to ISO 27018 (protection of personal data in public clouds) and ISO 27701 (Privacy Information Management System).
Data is transferred to the USA on the basis of the EU-U.S. Data Privacy Framework (Microsoft Corporation is certified), supplemented by standard contractual clauses (SCCs) pursuant to Art. 46 GDPR.
Note: Microsoft Clarity is currently not part of Microsoft's EU Data Boundary. Processing takes place primarily on servers in the USA, protected by the aforementioned safeguards (DPF and standard contractual clauses).
Storage period: up to 13 months in pseudonymized form, unless consent is withdrawn earlier.
Data processing agreement pursuant to Art. 28 GDPR: Microsoft provides a uniform Data Protection Addendum (DPA) for all commercial services, available at microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA.
Further information: privacy.microsoft.com/de-de/privacystatement and clarity.microsoft.com.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent) in conjunction with Section 165 para. 3 TKG 2021.

3.4 Marketing and targeting cookies

We use the following marketing tools only with your consent:

Google Ads
Provider: Google Ireland Limited, Dublin, Ireland. Purpose: Conversion tracking, remarketing, optimization of advertisements.

Meta/Facebook Pixel (via Shopify Facebook & Instagram Channel)
Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Purpose: Conversion tracking, remarketing, audience creation for advertisements. The pixel is operated through the official Shopify Facebook & Instagram Channel using the Shopify Customer Privacy API and automatically respects your cookie consent. The data is transmitted not only via your browser but also additionally server-side via Meta's Conversions API: information such as your email address and telephone number is transmitted in hashed, i.e. anonymized, form, together with order and event data, directly from Shopify's servers to Meta. The scope of this data sharing is configured at the “Optimized” level.

Klaviyo (email marketing and pop-ups)
Provider: Klaviyo Inc., 125 Summer Street, Boston, MA 02110, USA.
EU representative pursuant to Art. 27 GDPR: European Data Protection Office (EDPO), Ground Floor, 71 Lower Baggot Street, Dublin D02 P593, Ireland. Contact via the official request form: edpo.com/gdpr-data-request/
Purpose: Newsletter registration, lead-generation pop-ups, email marketing campaigns, customer segmentation. Data is transferred to the USA on the basis of the EU-U.S. Data Privacy Framework (see section 8). Cookies set: including __kla_id (visitor identification).

Legal basis: Art. 6 para. 1 lit. a GDPR (consent) in conjunction with Section 165 para. 3 TKG 2021.

3.5 Consent and withdrawal

On your first visit to our website, our cookie banner gives you the option to grant consent separately for each category, accept all cookies, or reject all marketing and analytics cookies.

• Consent management: Pandectes GDPR Cookie Consent (Pandectes Ltd., based in Cyprus), integrated with the Shopify Customer Privacy API.
• Withdrawal of consent: You may withdraw your consent at any time with effect for the future. To do so, send us an informal message at info@splendido.at — we will reset your consent and confirm the withdrawal. You can also delete the cookies set by our website at any time in your browser settings; the next time you visit, you will be asked to make your decision again.
• Validity: Consent is stored for 12 months from the time it is given; after that, you will be asked to make a decision again.

4. Platform: Shopify

Our online shop is operated via the Shopify platform.

• Provider for EU customers: Shopify International Ltd., 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
• Parent company: Shopify Inc., 151 O’Connor Street, Ottawa, Canada. The European Commission has adopted an adequacy decision for Canada (Art. 45 GDPR), ensuring an adequate level of data protection.
• Data processing agreement (DPA): in accordance with Art. 28 GDPR.
• Categories of processed data: Shop data, order data, customer data, payment data, and analytics data.

Shopify Network Intelligence: Shopify combines usage data from the shops of many merchants in a platform-wide network (“Shopify Network Intelligence”). The resulting services are therefore also based on data from interactions with other merchants. The data is used to detect fraud, ensure the security and stability of the platform, provide AI functions (e.g. Shopify Magic), and improve product and marketing recommendations. Other merchants do not receive access to your personal data.

Legal bases: The processing of data for fraud detection, security, and platform stability is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in a secure and functional shop). In this respect, you have the right to object to the processing at any time pursuant to Art. 21 GDPR. For advertising and other non-essential purposes, processing is carried out exclusively on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR, which you provide via our cookie banner and may withdraw at any time with effect for the future. Without your consent, Shopify will not use your data for advertising purposes.

Your control options directly with Shopify: Through Shopify’s privacy portal, you can object to the use of your data, request access to it, or request its deletion: https://privacy.shopify.com

Further information: Shopify explains how it processes your data when you visit our shop in its privacy policy for end customers: https://www.shopify.com/legal/privacy/app-users

5. Payment Service Providers

To process payments, we share your payment data with the following service providers:

• Shopify Payments (Stripe): Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland.
• PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg.
• Klarna: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.
• Apple Pay / Google Pay: Apple Distribution International Ltd., Ireland / Google Ireland Ltd., Ireland.

Legal basis: Art. 6 para. 1 lit. b GDPR (performance of the contract).

6. Shipping Service Providers

To ship your orders, we share your name and delivery address with the following shipping partners:

• Österreichische Post AG: Rochusplatz 1, 1030 Vienna, Austria.
• UPS: UPS Europe SRL/BV, Avenue Ariane 5, 1200 Brussels, Belgium.

We use the SendDrop app to create shipping labels for shipments within Austria (SendDrop GmbH, Fürstenweg 12, 83395 Freilassing, Germany). SendDrop processes the name, delivery address, and order data as a processor on our behalf to generate the shipping label and enable shipment tracking.

Legal basis: Art. 6 para. 1 lit. b GDPR (performance of the contract).

7. Apps and Third-Party Services Used

7.1 Google & YouTube Sales Channel

Integration with Google Merchant Center, Google Ads, and YouTube for product listings and advertising.

• Provider: Google Ireland Limited, Dublin, Ireland.
• Legal basis: Art. 6 para. 1 lit. a GDPR (consent for marketing functions).

The transmission does not take place solely via your browser but additionally on the server side: Information such as your email address and telephone number is transmitted in hashed, i.e. anonymized, form together with order and event data directly from Shopify’s servers to Google (conversion measurement or “Enhanced Conversions”). The scope of this data transfer is configured at the “Optimized” level.

7.2 Translation App (Translation Lab)

Purpose: Automatic translation of our website content into your preferred language. Stores your language preference in a functional cookie.

• Legal basis: Art. 6 para. 1 lit. a GDPR (consent for functional cookies).

7.3 Email Marketing and Pop-ups (Klaviyo)

Purpose: Sending newsletters, automated email marketing campaigns, displaying pop-ups for lead generation (e.g., discount promotions), and segmenting customer groups.

• Provider: Klaviyo Inc., 125 Summer Street, Boston, MA 02110, USA.
• EU representative pursuant to Art. 27 GDPR: European Data Protection Office (EDPO), Ground Floor, 71 Lower Baggot Street, Dublin D02 P593, Ireland. Contact via the official request form: edpo.com/gdpr-data-request/
• Data processed: Email address, name (optional), order history, interactions with our emails and website.
• Data transfer to third countries: USA, based on the EU-U.S. Data Privacy Framework (Klaviyo Inc. is certified under the DPF). Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR are also used.
• Legal basis: Art. 6 para. 1 lit. a GDPR (consent given by subscribing to the newsletter or via double opt-in), in conjunction with Section 174 para. 5 TKG 2021.
• Storage period: Until you withdraw your consent (you can unsubscribe at any time via the unsubscribe link in every email).

7.4 Cookie consent management (Pandectes)

See section 3.5.

7.5 Analytics and UX tool (Microsoft Clarity)

See section 3.3.

7.6 EU revocation button (Revoq)

To fulfill the statutory obligation to provide consumers with an easily accessible revocation button, we use the Revoq app. You can submit your contract revocation electronically via the form on the “Revoke contract” page.

Data processed: Order number, name, email address, and the information you provide regarding the revocation.

Purpose: Receipt, processing, and documentation of your contract revocation.

Legal basis: Art. 6 para. 1 lit. c GDPR (compliance with a legal obligation) in conjunction with Art. 6 para. 1 lit. b GDPR (processing of the contractual relationship).

Data processor: Processing is carried out by the app provider Revoq as a data processor on the basis of a data processing agreement (DPA). The data is hosted on servers within the EU; no transfer to third countries takes place.

Storage period: The data is stored for the duration of processing and in accordance with statutory retention and documentation obligations, and is then deleted.

7.7 Invoice and document creation (Order Printer Pro)

We use the Order Printer Pro app to create invoices, delivery notes, and credit notes.

• Data processed: Name, billing and delivery address, order and payment data.
• Purpose: Preparation of the legally required documents pursuant to Section 11 UStG.
• Legal basis: Art. 6 para. 1 lit. c GDPR (compliance with a legal obligation) in conjunction with Art. 6 para. 1 lit. b GDPR.
• Processor: The processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.

7.8 Product comparison (Klarna Search & Compare)

We use the Klarna Search & Compare app, through which our products may appear in Klarna’s search and comparison services. Provider: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

• Data processed: Product and catalog data and, for a session referred via Klarna, device and usage data.
• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the visibility of our product range). You may object to this processing at any time pursuant to Art. 21 GDPR.

7.9 Collaborations with creators (Shopify Collabs)

For working with creators and attributing referred orders, we use Shopify Collabs. Provider: Shopify International Ltd., Dublin, Ireland (see section 4).

• Data processed: Pseudonymous usage and event data from your visit, as well as order data where your order results from a referral link.
• Legal basis: Art. 6(1)(a) GDPR (consent via our cookie banner, “Marketing” category).

8. Data transfers to third countries

Some of the services we use transfer data to servers outside the European Union, particularly to the USA and Canada. We ensure the protection of your data on the following legal bases:

• USA: Transfer based on the EU-U.S. Data Privacy Framework (European Commission adequacy decision of July 10, 2023, C(2023)4745). Certified recipients: Google LLC, Meta Platforms Inc., Microsoft Corporation, Klaviyo Inc. Where additional safeguards are required, Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR are concluded.
• Canada: Adequacy decision by the European Commission pursuant to Art. 45 GDPR (Decision 2002/2/EC).

9. Your rights as a data subject

Under the GDPR, you have the following rights:

• Access (Art. 15 GDPR): Information about the data stored about you.
• Rectification (Art. 16 GDPR): Rectification of inaccurate data or completion of incomplete data.
• Erasure (Art. 17 GDPR): Erasure of your data. Note: Data required for legal or tax obligations (e.g., invoices that must be retained for 7 years pursuant to § 132 BAO) cannot be erased before the retention period expires.
• Restriction of processing (Art. 18 GDPR).
• Data portability (Art. 20 GDPR): provision of your data in a commonly used, machine-readable format.
• Withdrawal of consent (Art. 7 para. 3 GDPR): at any time with effect for the future.
• Right to object to processing based on legitimate interests (Art. 21 GDPR), particularly direct marketing.

To exercise your rights, you can contact us directly by email at info@splendido.at. We will respond to your request within one month (Art. 12 para. 3 GDPR).

10. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR):

Austrian Data Protection Authority (DSB)
Barichgasse 40-42, 1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Web: www.dsb.gv.at

11. Data security

We implement technical and organizational security measures to protect your data from unauthorized access, loss, or misuse:

• SSL/TLS encryption (256-bit) for all data transfers between your browser and our servers (HTTPS).
• Password hashing for customer accounts.
• Access controls and regular updates to our security standards.
• Contractual obligation of all processors to comply with the GDPR.

12. Retention period — overview

Data category	Retention period
Server log files	30 days
Customer account	until deleted by the customer
Order data (accounting)	7 years in accordance with § 132 BAO
Newsletter subscription	until withdrawal
Contact requests	until final processing
Cookie consent	12 months
Google Analytics 4	14 months
Microsoft Clarity	up to 13 months

13. Changes to this Privacy Policy

This Privacy Policy may be updated due to legal changes, new service providers, or technical adjustments. The current version is available at any time at www.splendido.at/pages/datenschutz. We will inform you appropriately of any significant changes.

14. Packaging licensing

As a distributor of packaging, we fulfill our legal obligations in the countries to which we deliver:

🇩🇪 Germany — Packaging Act (VerpackG):
LUCID registration number: DE4314073376548 (Central Agency Packaging Register Foundation, ZSVR)
Dual system: Interzero Recycling Alliance (licensed via Activate by Lizenzero, contract number 102243)

All sales and shipping packaging that we place on the market in Germany is licensed with an approved dual system in accordance with Section 7 VerpackG and reported to the ZSVR as part of the annual data report pursuant to Section 10 VerpackG.

Public register: https://oeffentliche-register.verpackungsregister.org

🇦🇹 Austria — Waste Management Act (AWG) and Packaging Ordinance 2014 (VerpackVO):
ARA licence number: 28148
Collection and recovery system: Altstoff Recycling Austria AG (ARA), Mariahilfer Straße 123, 1062 Vienna
Portal: https://online.ara.at

All household packaging that we place on the market in Austria is licensed with an approved collection and recovery system in accordance with Section 13g AWG. Quantities are reported annually within the deadline specified by ARA.

🇳🇱 Netherlands:
Splendido e.U. is below the statutory threshold of 50,000 kg of packaging per calendar year and is therefore exempt from the registration and contribution obligation with Verpact (formerly Afvalfonds Verpakkingen). Packaging records are maintained internally and can be submitted upon request by the authorities.

🇧🇪 Belgium:
Splendido e.U. places less than 300 kg of packaging on the Belgian market per calendar year and therefore falls below the threshold set by the Cooperation Agreement of 4 November 2008; consequently, there is no registration or contribution obligation.

15. Pinterest Tag and Conversions API

We use the Pinterest Tag and the Pinterest Conversions API of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (hereinafter “Pinterest”).

Tag ID: 2614237900906

Purpose: Collection of conversion data to measure the performance of our Pinterest campaigns, optimize ad delivery, and create audience-based ads (e.g. retargeting).

Data processed:

• IP address (truncated)
• Browser and device information
• Pseudonymous identifiers (cookies, click IDs)
• Pages visited and actions performed (e.g. “Add to Cart”, “Purchase”)
• When transmitted server-side via the Conversions API: hashed email address and order information

Legal basis: Consent pursuant to Art. 6(1)(a) GDPR via our cookie banner (category “Marketing”). Without active consent, the Pinterest Tag is not loaded and no data is transmitted to Pinterest.

Transfer to a third country: Data may be transferred to Pinterest, Inc. in the USA. Pinterest is certified under the EU-US Data Privacy Framework. Pinterest Europe Ltd. acts as a joint controller pursuant to Art. 26 GDPR for certain processing activities; a corresponding agreement is in place.

Storage period: Pinterest stores the data collected in accordance with its retention policies (cookies typically for up to 1 year).

Withdrawal: You may withdraw your consent at any time (see Section 3.5). You can also disable Pinterest advertising in your Pinterest account under “Settings → Privacy and data”.

Further information:

• Pinterest Privacy Policy: https://policy.pinterest.com/de/privacy-policy
• Pinterest Ad-Data Terms: https://policy.pinterest.com/de/ad-data-terms
• Pinterest Data Protection Contact: privacy-support@pinterest.com

The scope of data sharing with Pinterest is configured at the “Optimized” level; transmission takes place both through your browser and server-side via the Conversions API.

16. Custom and made-to-measure items (Made-to-Order inquiries)

For selected pieces of jewelry — particularly rings that are made in your size or as a custom-made item upon request — we provide an inquiry form (“Make it in your size” or “Order a custom size”) on the respective product page. You can use this form to submit a non-binding inquiry about a custom-made item and request an individual indicative-price quotation.

Data processed: First name, email address, desired ring size or a special size specified by you, and the reference to the product inquired about (name, item, and price as the context of the inquiry). The time of the inquiry and your language setting are also processed for technical purposes.

Purpose: Processing your inquiry, preparing an individual quotation (indicative price), and the associated contact and correspondence.

Legal basis: Art. 6 para. 1 lit. b GDPR (performance of pre-contractual measures taken in response to your inquiry). If a contract is subsequently concluded, further processing is governed by Section 2.2 (Orders / Online Shop).

Recipients / Processors: We use Klaviyo for the technical processing of the inquiry and subsequent email communication (see Section 7.3). Klaviyo processes the data as a processor on our behalf; the information in Section 7.3 and Section 8 applies with regard to transfers to third countries and EU representation.

Storage period: We store the data collected as part of a sizing inquiry for a period of 12 months from the last communication, provided that no contract is concluded. If a contract is concluded, the statutory retention periods apply (see Section 12). You may object to the processing at any time or request the deletion of your data (see Section 9).

17. Customer reviews (ShopVote)

We use the ShopVote service to collect and publish customer reviews. After a purchase, we invite you by email to review our shop on ShopVote. This invitation is sent through our email system (Klaviyo, see section 7.3); you then submit the review itself on the ShopVote platform.

Provider: Blickreif GmbH (ShopVote), Schulstraße 46, 80634 Munich, Germany.

Data processed: Order or customer number, email address, and location data (IP address).

Purpose: Sending automated review requests after your purchase, as well as collecting and publishing the reviews submitted.

Legal basis: Art. 6(1)(a) GDPR (consent). Your data is transmitted to ShopVote exclusively on the basis of your consent; you may withdraw this consent at any time with effect for the future.

Data processor: A data processing agreement pursuant to Art. 28 GDPR is in place with Blickreif GmbH. Hetzner Online GmbH is engaged as a subprocessor for web hosting and IT infrastructure.

Transfer to Google (seller ratings): ShopVote is an official Google partner for seller ratings. Reviews submitted via ShopVote are automatically transmitted by ShopVote to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and may be displayed there as part of Google seller ratings — for example, in search results, Google Ads, or Google Merchant Center. The content of the published review (review text, rating, date) and its assignment to our shop are transmitted. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Rating stars are displayed only once the minimum number of reviews specified by Google has been reached; transmission to Google takes place independently of this as soon as the service is activated.

Place of processing: Processing by ShopVote takes place within the European Union or the European Economic Area. As part of the transfer to Google, processing may also be carried out by Google LLC in the United States; Google is certified under the EU-U.S. Data Privacy Framework, for which an adequacy decision pursuant to Art. 45 GDPR has been issued by the European Commission.

Storage period: The data is stored for the duration of the review request and the publication of the review. Upon your withdrawal of consent or request for deletion, the data will be deleted unless statutory retention obligations prevent this.

As of: August 27, 2026