Privacy Policy
Privacy Policy
1. Controller
The controller responsible within the meaning of the General Data Protection Regulation (GDPR) is:
LoveLEDlights
Owner: Luke Anton Kolb
Lidelstraße 25
81245 Munich
Germany
Email: business@loveledlights.de
Phone: +49 171 3899977
2. General Information on Data Processing
We process personal data of our users only to the extent necessary to provide a functional website as well as our content and services. Processing generally takes place only with the user's consent (Art. 6(1)(a) GDPR), for the performance of a contract (Art. 6(1)(b) GDPR), for compliance with legal obligations (Art. 6(1)(c) GDPR), or for the protection of our legitimate interests (Art. 6(1)(f) GDPR).
Personal data will be deleted as soon as the purpose for storing the data no longer applies and no statutory retention obligations prevent deletion.
3. Hosting and Shop System
Our online shop is operated on the Shopify platform (Shopify International Ltd. / Shopify Inc.). Shopify processes data collected through our shop (e.g. order data, payment data, and usage data) on our behalf based on a data processing agreement.
This may involve the transfer of data to third countries (including the United States), which is based on appropriate safeguards (e.g. Standard Contractual Clauses).
The legal basis for processing is Art. 6(1)(b) and Art. 6(1)(f) GDPR.
[Review and supplement details based on Shopify's current privacy documentation if necessary.]
4. Server Log Files
Whenever our website is accessed, information is automatically collected that your browser transmits to us (e.g. browser type, operating system, referrer URL, time of the request, shortened IP address).
This data is used for the technical provision and security of the website.
The legal basis for processing is Art. 6(1)(f) GDPR.
5. Cookies and Consent Management
Our website uses cookies.
Technically necessary cookies are used based on Art. 6(1)(f) GDPR and/or Section 25(2) TDDDG.
All non-essential cookies (e.g. cookies for analytics or marketing purposes) are only used with your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR.
You can withdraw your consent at any time via the cookie settings.
[Adapt according to the consent management tool used.]
6. Order Processing and Customer Account
To process your order, we process the data you provide (e.g. name, address, email address, order details).
Processing is carried out for the performance of the contract pursuant to Art. 6(1)(b) GDPR.
Where statutory retention periods exist (e.g. under commercial or tax law), certain data will be stored for a longer period accordingly (Art. 6(1)(c) GDPR).
7. Payment Processing
We use external payment service providers to process payments.
Payment data entered during the payment process is processed independently by the respective provider.
The legal basis for processing is Art. 6(1)(b) GDPR.
Depending on the selected payment method, the following providers may be involved:
PayPal – PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg.
Privacy Policy: paypal.com/de/legalhub/paypal/privacy-full
Klarna – Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.
Privacy Policy: klarna.com/de/datenschutz
TWINT – TWINT AG, Stauffacherstrasse 31, 8004 Zurich, Switzerland.
Privacy Policy: twint.ch/datenschutz-geschaeftskunden
Credit Card Visa – Visa Inc. / Visa Europe.
Privacy Notice: usa.visa.com – Global Privacy Notice
Mastercard and Maestro – Mastercard International Incorporated.
Privacy Notice: mastercard.com – Global Privacy Notice
Apple Pay – Apple Inc.
Privacy Notice: apple.com – Apple Pay & Privacy
USDC (Stablecoin) – Circle Internet Group, Inc.
Privacy Policy: circle.com/legal/privacy-policy
The actual card and wallet transactions (Visa, Mastercard, Maestro, Apple Pay) are processed through the payment service provider integrated into our shop.
[Once known: Add the name and privacy link of this provider, e.g. Shopify Payments / Stripe.]
When selecting a payment method, the data required for processing the payment will be transmitted to the respective provider.
In individual cases, this may involve transfers to third countries based on appropriate safeguards.
8. Shipping
To deliver your order, we provide the necessary data (name, delivery address, and, if applicable, email address/telephone number for shipment tracking) to the contracted shipping provider.
The legal basis for processing is Art. 6(1)(b) GDPR.
Depending on the destination country, we use the following shipping providers:
DHL (DHL Paket GmbH / Deutsche Post DHL Group): group.dhl.com/de/datenschutz.html
UPS (United Parcel Service): ups.com – Privacy Notice
DPD (DPD Deutschland GmbH): dpd.com/de/de/datenschutz
GLS (General Logistics Systems Germany GmbH & Co. OHG): gls-pakete.de/datenschutzerklaerung
bpost (Belgium): bpost.be/en/privacy
Colis Privé (France): colisprive.fr/politique-de-confidentialite
SEUR (Spain/Portugal): seur.com – Privacy Policy
BRING (Posten Bring, Sweden/Norway): bring.com/privacy-policy
Royal Mail (United Kingdom): royalmail.com/privacy-notice
Australia Post (Australia): auspost.com.au/privacy
Canada Post (Canada): canadapost – Privacy Policy
New Zealand Post (New Zealand): nzpost.co.nz/about-us/privacy-centre
USPS (United States): about.usps.com – Privacy Policy
Saudi Post (SPL) (Saudi Arabia): splonline.com.sa/en/privacy-policy
Emirates Post (United Arab Emirates): emiratespost.ae/privacy-policy
As well as potentially local shipping partners depending on the destination country.
For deliveries to countries outside the EU/EEA, data transfers to third countries may occur.
9. Contact
If you contact us by email, telephone, or via a contact form, we process your information to handle your request.
The legal basis is Art. 6(1)(b) GDPR (for contract-related inquiries) or Art. 6(1)(f) GDPR.
10. Newsletter
[Only include if a newsletter is offered:]
If you subscribe to our newsletter, we process your email address for sending newsletters based on your consent (Art. 6(1)(a) GDPR).
Registration takes place using a double opt-in procedure.
You can unsubscribe from the newsletter at any time.
[Add the newsletter tool used.]
11. Web Analytics and Marketing
[Only include if used:]
If we use analytics or marketing services (e.g. Google Analytics, Meta Pixel), this is carried out exclusively based on your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG).
[Specify the respective service, purpose, provider, and storage period.]
12. Your Rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)
To exercise your rights, it is sufficient to send a message to the contact details provided above.
13. Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other legal remedies, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, your workplace, or the place where the alleged infringement occurred.
Last updated: 25 May 2026
