Privacy policy
Effective Date: 23.03.2017
Woolfie Yarn (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and store your personal data when you visit our website or make purchases from us.
1. Data Controller
The data controller responsible for your personal data is: Anton Diundik, Metzinger Str., 23, 72622 Nürtingen, Germany, woolfie.yarn@gmail.com, +49 151 189 71 911
You can contact us regarding any questions about your personal data or to exercise your data protection rights.
2. Data We Collect
We collect personal data necessary to process orders, deliver products, and communicate with customers. This may include:
-
Name, shipping address, billing address
-
Email address and phone number
-
Payment information is processed securely by our payment providers, including Shopify Payments, PayPal, Klarna, Google Payments, and any other provider you select at checkout. We do not store your full payment details on our servers; all sensitive payment information is handled directly by the payment provider.
-
Order details (products purchased, date, amount)
-
IP address and browsing information (for cookies and analytics)
3. Purpose and Legal Basis for Processing
We process your personal data for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Processing and fulfilling orders, including shipping and invoicing | Article 6(1)(b) – Contract fulfillment |
| Communication about orders, customer service | Article 6(1)(b) – Contract fulfillment |
| Compliance with legal obligations (tax and accounting) | Article 6(1)(c) – Legal obligation |
| Marketing, including newsletter subscription (optional) | Article 6(1)(a) – Consent |
| Analytics and website improvement (cookies, tracking) | Article 6(1)(f) – Legitimate interest |
4. Data Sharing and Recipients
Your data may be shared with the following service providers only as necessary:
-
Shopify – website hosting, payment processing
-
PayPal / Shopify Payments – payment processing
-
DHL, DPD, Deutsche Post – delivery of products
- Mailchimp / newsletter provider – only if you subscribed to the newsletter
- Dropbox – for storing invoices and order data. Dropbox implements GDPR obligations and privacy protections as described in its privacy policy: https://www.dropbox.com/privacy
We do not sell your personal data to third parties.
5. International Transfers
Some of our service providers (Google, Dropbox) store data outside the European Union. We ensure that your personal data is protected through standard contractual clauses or other GDPR-compliant safeguards.
6. Cookies and Tracking
Our website uses only necessary cookies required for shopping cart and website functionality. No tracking or marketing cookies are used unless you explicitly consent to them.
7. Data Retention
-
Order and invoice data: stored for 10 years to comply with tax and accounting obligations
-
Newsletter data: stored until you unsubscribe
-
Cookies and analytics data: stored for a limited period (varies by service provider)
After the retention period, data is securely deleted.
8. Your Rights Under GDPR
You have the following rights regarding your personal data:
-
Right of access: request a copy of your data
-
Right to rectification: correct inaccurate or incomplete data
-
Right to erasure: request deletion of your data (where legally possible)
-
Right to restrict processing: limit how we process your data
-
Right to data portability: receive your data in a structured, machine-readable format
-
Right to object: withdraw consent or object to marketing/analytics
-
Right to lodge a complaint: with a supervisory authority in your country
To exercise your rights, please contact us at woolfie.yarn@gmail.com.
9. Security Measures
We take appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Measures include:
-
Strong passwords and access controls
- Encryption of data stored in Dropbox or local backups
10. Changes to This Privacy Policy
We may update this privacy policy from time to time. The updated version will always be posted on our website with the effective date.