Privacy policy

Last updated: 30. September 2026

1. Controller and contact details

The controller for the processing described here by Feinwälder is DASMO GmbH, Heinrich-Fahr-Straße 1, 78333 Stockach, Germany, represented by its managing directors Michel Neuhaus and Dominik Mess.

Email: support@dasmo-gmbh.de
Telephone: +49 7771 9144500

This notice explains which personal data are processed when you visit our shop, make enquiries or reservations, and place orders. Personal data are information relating to an identified or identifiable individual. The privacy notices linked below also apply to the payment providers’ and Shopify’s own services.

2. Provision and security of the shop

Our shop is provided through Shopify International Limited, Ireland. To operate the shop, Shopify processes in particular IP addresses, browser and device information, pages visited, access times and technical information, as well as the data needed for the shopping cart, checkout, customer account and order fulfilment. Technical logs are used to deliver the website, troubleshoot errors, and detect and prevent misuse. The legal basis is Art. 6 para. 1 point (f) GDPR; our legitimate interest is a secure and functioning shop. Where processing is necessary for a service or order you have requested, Art. 6 para. 1 point (b) GDPR applies.

When providing our shop, Shopify generally acts as a processor. For its own services, particularly Shop and Shop Pay, and the enhanced services described in section 8 , Shopify also acts as an independent controller. Further information: Shopify Privacy Policy and Shopify Data Processing Addendum.

Technical logs are required for as long as necessary to ensure operation and investigate specific errors or security incidents. Data relating to an identified incident may also be retained for investigation and to establish or defend claims. Other data are subject to the relevant purposes and retention criteria in this notice.

3. Contact and product reservations

When you contact us by email, telephone or contact form, we process the contact details you provide and the content of your enquiry. The contact form requires your email address so that we can reply; your name and telephone number are optional. For contract-related enquiries and pre-contractual steps taken at your request, Art. 6 para. 1 point (b) GDPR is the legal basis. For other enquiries, Art. 6 para. 1 point (f) GDPR applies; our interest is handling and answering your message. Recipients are the people responsible for processing it and our technical service providers for the shop, communications and email.

When you make a non-binding product reservation , we process your email address, the products and quantities selected, the time and reference of the enquiry, and any name or message voluntarily provided. This serves to handle your specific product enquiry and send the email you requested about availability and the opportunity to purchase later. The legal basis is Art. 6 para. 1 point (b) GDPR for the pre-contractual steps you requested. A reservation does not create a purchase contract or any obligation to pay; it also does not automatically subscribe you to general newsletters.

You can cancel a reservation at any time by emailing support@dasmo-gmbh.de . Reservation data are needed to handle the enquiry until availability has been communicated and any related follow-up enquiry has been resolved. If you end your enquiry or availability is permanently ruled out, this purpose no longer applies. The data are then deleted unless statutory retention obligations, specifically required evidence or legal claims prevent this. The same applies to completed contact enquiries; if a purchase follows, the retention criteria for contract documents also apply.

4. Customer account, orders, invoicing and delivery

For orders, we process in particular your name, contact and delivery details, billing address, items ordered, amounts, payment status and order-related communications. Data marked as required at checkout are necessary to perform the contract; without them we cannot fulfil the relevant order or delivery. The legal basis is Art. 6 para. 1 point (b) GDPR. We fulfil statutory documentation, tax and retention obligations on the basis of Art. 6 para. 1 point (c) GDPR.

If you use the customer account function, Shopify processes your login and contact details and the orders linked to your account so that you can manage your account and orders. The legal basis is Art. 6 para. 1 point (b) GDPR for the account function you requested. You can request deletion of your account from us; order and invoice documents that must be retained by law remain unaffected.

The necessary data are received by our service providers for shop operation, merchandise management, invoicing, warehousing and shipping, and by the appointed transport providers. Invoicing is integrated through easybill GmbH, Germany; the necessary customer, order and invoice data may be processed on our behalf. Information: easybill Privacy.

For shipping management and tracking, Sendcloud is integrated, through Sendcloud GmbH for German contractual customers. The platform processes the recipient, order and shipping data required for parcel shipping and tracking on our behalf, and passes delivery data to the appointed transport providers. Contact details are passed on only where required for the agreed service or where appropriate consent has been given. Information: Sendcloud Data Processing Addendum.

Electronic withdrawal function

For the electronic withdrawal function, we use the “CC EU Widerruf Button” app from CC Consulting GmbH, Emil-Figge-Straße 91, 44227 Dortmund, Germany. The provider processes the data on our behalf pursuant to Art. 28 GDPR. The data processed include your name, email address, details identifying the order or contract, any relevant items and optional comments, and the date and time when your declaration was received.

The processing serves to receive, handle and document your withdrawal and send confirmation of receipt. The legal bases are Art. 6 para. 1 point (c) GDPR in conjunction with § 356a BGB and, for performance of the contract, Art. 6 para. 1 point (b) GDPR. According to the provider, the application is hosted within the European Union. Technical operation also involves processing log data such as the browser, operating system, referring page, access time and truncated IP address; this serves secure operation under Art. 6 para. 1 point (f) GDPR.

Withdrawal data are stored for as long as needed for handling the withdrawal, statutory evidence and retention obligations, or necessary legal claims; they are then deleted. The retention criteria in section 12also apply. Further information: Privacy notice for the withdrawal app.

5. Payment processing

Depending on the payment method selected at checkout and available to you, the necessary identification, billing, payment and transaction data are transmitted to the relevant payment service provider. This serves to carry out your chosen payment under Art. 6 para. 1 point (b) GDPR. Payment providers also process data on their own responsibility, for example to prevent fraud, meet statutory obligations or provide financing agreed with you. The specific data entry and any additional consent required take place within the respective payment process.

• Shopify Payments: Cards and other methods offered at checkout are processed through Shopify Payments by Shopify International Limited with the involvement of the relevant payment processors, including in particular Stripe Payments Europe, Limited. Information about Shopify, its payment partners and the data processed is available in the Shopify Consumer Privacy Policy and the Shopify Payments Terms; for Stripe, see the Stripe Privacy Policy.
• PayPal: The provider for customers in the European Economic Area is PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. Information: PayPal Privacy Policy.
• Klarna: If you select a Klarna payment method, Klarna Bank AB (publ), Sweden, processes the data required for it. Depending on the method, Klarna may perform identity and credit checks, including automated decisions. Information about these checks and your rights: Klarna Privacy.
• Express and wallet payment methods: When you use Shop Pay, Apple Pay or Google Pay, data are also processed within your relationship with the respective service. Information: Shop/Shop Pay, Apple Pay and Google Payments. If a USDC payment option is offered, the notices of the payment and wallet services identified during the payment process also apply; blockchain transactions may be publicly traceable.

6. Cookies and other storage technologies

Our shop uses cookies and comparable technologies, including your browser’s session storage. Strictly necessary storage and access, for example for the shopping cart, secure sessions, form processes and saving your privacy choices, are based on § 25 para. 2 no. 2 TDDDG. The associated processing of personal data is based, depending on its purpose, on Art. 6 para. 1 point (b) GDPR or, for secure operation, Art. 6 para. 1 point (f) GDPR.

For other storage and access requiring consent, § 25 para. 1 TDDDG applies. Personal data for analytics, marketing and personalisation requiring consent are processed on the basis of Art. 6 para. 1 point (a) GDPR. You can manage your choices via the cookie banner and at any time via “Cookie settings” in the footer of the website. Consent is voluntary and may be withdrawn with effect for the future. The lawfulness of processing before withdrawal remains unaffected. You can also use the shop if you reject optional purposes.

The reservation function keeps selected items and quantities in the browser during the session. The status of the notice about the current delivery situation is also stored for the session. As part of Shopify’s form protection, entered form data may be temporarily placed in session storage so that they can be restored after the security check. This storage is generally tied to the browser session. Cookie duration depends on the purpose: session cookies end with the session, while others remain until they expire or you delete them in your browser. An overview of purposes and provider-specific durations is available in Shopify’s Cookie Policy.

7. Google Ads and performance measurement

Through the Google & YouTube app, Google Ads and Google Merchant Center are integrated. Google Ads is used to advertise our products and measure which ads lead to visits and purchases. In particular, this involves processing page and product views, searches, cart, checkout and purchase events, advertising attribution, and technical device and connection data. The provider in the European Economic Area is Google Ireland Limited, Ireland; processing by Google LLC and other entities in the USA is possible.

The “Enhanced conversions” feature is enabled. When a conversion occurs, contact details you have provided, such as your email address, telephone number or name and address, may be transformed using a cryptographic hashing method before transmission and matched against data held by Google. This transformation protects transmission; it does not make the data anonymous. Its purpose is more accurate attribution and measurement of advertising performance. The legal basis for advertising measurement requiring consent and this use of your contact details is Art. 6 para. 1 point (a) GDPR; storage access is also subject to section 6.

Consent status is passed from Shopify’s privacy settings to the Google integration. Google’s consent mode distinguishes between the use of cookies and technical signals for consent and measurement; rejecting advertising cookies therefore does not guarantee that no technical communication with Google takes place. Details on processing, retention periods, international transfers and your choices are explained in Google’s Privacy Policy, Google’s information on partner websites and the information about enhanced conversions. You can change your consent in our cookie settings.

8. Shopify analytics, personalisation and Shop

We use Shopify Network Intelligence. Shopify processes information about interactions and purchases in our shop together with information from other Shopify shops and Shopify services to provide and improve enhanced features such as analytics, personalisation and advertising. For this processing, Shopify acts as an independent controller. Authorisation for purposes requiring consent is based on Art. 6 para. 1 point (a) GDPR and depends on your choices in the cookie settings. Technically necessary security processing is distinct from this and serves secure operation as described in section 2.

If you use the standalone Shop app or Shop Pay, Shopify also processes data to provide these services. In Shop, for example, you may see product recommendations and reminders about viewed products, shopping carts, availability or price changes. Shopify explains the applicable settings and rights in its Consumer Privacy Policy. You can also exercise your privacy rights in relation to Shopify through the Shopify Privacy Portal .

9. Protection against automated input

Shopify integrates hCaptcha from Intuition Machines, Inc., USA, to protect forms against spam and automated abuse. A check may involve processing, in particular, IP addresses, browser and device information, timing data and interactions to distinguish human input from automated access. The purpose and legitimate interest under Art. 6 para. 1 point (f) GDPR are the protection of our forms, IT systems and communications. Where storage access is strictly necessary for this requested and protected form process, § 25 para. 2 no. 2 TDDDG applies; other access requiring consent is subject to § 25 para. 1 TDDDG.

Information about processing, retention criteria and transfer safeguards is available in the hCaptcha Privacy Policy and the hCaptcha Privacy Notice for Europe. You can also contact us by email.

10. Email marketing

If you expressly sign up for news and offers by email, we use your email address for the stated advertising purpose on the basis of your consent under Art. 6 para. 1 point (a) GDPR. Shopify is configured to require additional confirmation for new email subscriptions (double opt-in). We process subscription and confirmation details to document your decision. You can unsubscribe via the link in each message or by emailing us. Data needed solely for this advertising purpose will no longer be used for it; evidence of consent and unsubscription is retained only to the extent and for as long as necessary to prove consent, respect your unsubscription or defend specific claims. The relevant evidentiary and limitation periods apply. An order, general contact enquiry or product reservation alone does not constitute a subscription to general advertising emails.

11. Processing outside the European Economic Area

The shop is configured to store data in the European Union. Nevertheless, Shopify, Google, payment providers and security service providers in particular may also have data processed by group companies and service providers outside the European Economic Area, including in Canada and the USA. The requirements of Art. 44 et seq. GDPR apply. Depending on the recipient, an applicable adequacy decision, approved binding corporate rules or EU standard contractual clauses with necessary supplementary measures are used. An EU hosting location does not rule out such further processing.

For transfers within its group, Shopify uses its Binding Corporate Rules; for other recipients, the Data Processing Addendum provides additional safeguards where necessary. The list of Shopify subprocessors contains further information about recipients and locations. For other providers’ safeguards, see the privacy notices linked above. You may also request information and accessible copies of relevant safeguards using our contact details.

12. Retention and deletion

As a rule, we retain personal data only for as long as required for the relevant purpose. Order, invoice and business documents are also subject to statutory retention obligations, particularly under § 147 AO and § 257 HGB. Invoices as accounting records are generally retained for eight years, commercial and business correspondence for six years, and certain accounting documents for ten years. These periods normally begin at the end of the relevant calendar year; statutory extensions remain reserved. Where data are needed for warranty matters, an ongoing dispute, or the establishment or defence of claims, retention may continue until the matter is resolved or the relevant periods expire. The data are then deleted unless another lawful ground for retention exists. Cookie durations and retention of contract documents must be distinguished.

13. Your data protection rights

Subject to the statutory requirements, you have a right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may withdraw consent at any time with effect for the future; this does not affect the lawfulness of prior processing. To exercise your rights, use the contact details given above.

Right to object: For processing based on Art. 6 para. 1 point (f) GDPR, you may object on grounds relating to your particular situation. We will then cease processing the relevant data unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves legal claims. You may object to processing for direct marketing at any time without giving a particular reason; this also applies to related profiling. Your data will then no longer be processed for that advertising.

Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority, particularly in the place of your habitual residence, workplace or the suspected infringement. For our registered office, the competent authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg .