Privacy policy

Last updated: 7 August 2026

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Fabian Schröder
c/o IP-Management #5550
Ludwig-Erhard-Str. 18
20459 Hamburg
Germany

Phone: +49 15 754892714
Email: info@partalarm.de

2. General information on data processing

Personal data means any information relating to an identified or identifiable natural person.

We process personal data only where necessary to provide our online shop, process orders and contracts, communicate with you, comply with legal obligations or on the basis of consent given by you.

Depending on the processing activity, processing is based in particular on:

  • Art. 6(1)(a) GDPR – consent,

  • Art. 6(1)(b) GDPR – performance of a contract and pre-contractual measures,

  • Art. 6(1)(c) GDPR – compliance with legal obligations,

  • Art. 6(1)(f) GDPR – legitimate interests.

3. Online shop and Shopify

Our online shop is operated using Shopify. The provider for merchants in the European Economic Area is:

Shopify International Limited
2nd Floor, Victoria Buildings
1–2 Haddington Road
Dublin 4, D04 XN32
Ireland

Shopify provides the technical infrastructure required to operate our online shop, display our products, process orders and provide other shop functions.

When you use our shop, Shopify may process data including your IP address, device and browser information, usage data, contact details, order information, payment information and other information required to provide the shop.

Where processing is necessary to provide our shop and process orders, it is based in particular on Art. 6(1)(b) GDPR and, where applicable, on our legitimate interests pursuant to Art. 6(1)(f) GDPR.

Shopify may also process data outside the European Economic Area. Where personal data is transferred to countries outside the EEA, such transfers are made in accordance with Art. 44 et seq. GDPR, in particular on the basis of adequacy decisions or appropriate safeguards such as Standard Contractual Clauses.

4. Server log files

When you access our online shop, technically necessary information may be processed automatically. This may include:

  • IP address,

  • date and time of access,

  • pages or files accessed,

  • referrer URL,

  • browser type and version,

  • operating system,

  • device information and

  • amount of data transferred.

Processing serves to ensure the secure and stable operation of our online shop, diagnose errors and protect against misuse.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically reliable operation of our online shop.

5. Orders and contract processing

When you place an order, we process the personal data required to perform the contract.

This includes, in particular:

  • first and last name,

  • billing and delivery address,

  • email address,

  • telephone number where applicable,

  • products and variants ordered,

  • order and transaction information,

  • payment information,

  • shipping information and

  • communications relating to your order.

Processing is based on Art. 6(1)(b) GDPR.

Where data must be retained to comply with commercial or tax law requirements, further processing is based on Art. 6(1)(c) GDPR.

6. Customer accounts

Where we provide the option to create a customer account, we process the information provided for the purpose of providing and managing the account and facilitating future orders.

This may include your name, email address, addresses, order history and account settings.

Where processing serves the performance or preparation of contracts, it is based on Art. 6(1)(b) GDPR.

You may request deletion of your customer account at any time, provided that no statutory retention obligations prevent deletion.

7. Contacting us

If you contact us by email or through a contact form, we process the information you provide, in particular your name, email address and the content of your message.

Where your enquiry relates to an existing contract or pre-contractual measures, processing is based on Art. 6(1)(b) GDPR.

For other enquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is to process and respond to your enquiry.

8. Email communication via STRATO

We use services provided by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, for our business email communications.

When communicating by email, your email address, name, communication content and technical connection data may be processed.

Contract-related communications are processed on the basis of Art. 6(1)(b) GDPR and other business communications on the basis of Art. 6(1)(f) GDPR.

9. Shipping with DHL

We primarily use DHL to ship our goods.

For shipping purposes, data required for delivery, in particular your name and delivery address and, where necessary for the selected shipping service, additional contact or shipping information, may be transferred to the shipping provider.

The transfer is made for the performance of the purchase contract pursuant to Art. 6(1)(b) GDPR.

10. Accounting and invoicing with Lexware Office

We use Lexware Office for accounting, invoicing and compliance with commercial and tax law obligations.

Customer master data, invoice data, order and payment information and tax-relevant business transactions may be processed.

Processing is based on Art. 6(1)(b) GDPR where it serves contract processing and on Art. 6(1)(c) GDPR for compliance with statutory accounting and retention obligations.

11. Shopify Payments and Stripe

We offer payment methods through Shopify Payments. Shopify Payments for merchants in Germany is provided by Shopify International Limited, 2nd Floor, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland.

For payment processing, payment information may be transferred to the payment service providers involved in your selected payment method. Shopify Payments works in particular with Stripe.

Data processed may include:

  • name,

  • billing address,

  • email address,

  • order and transaction information,

  • payment method,

  • payment status,

  • payment or card information and

  • technical information used for fraud prevention.

Processing is carried out in particular to process your selected payment method and is therefore based on Art. 6(1)(b) GDPR.

Where information is processed for fraud prevention and payment security, processing may additionally be based on Art. 6(1)(f) GDPR.

12. PayPal

If you select PayPal as your payment method, the information required to process your payment is transferred to PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.

This may include your name, address, email address, order information, payment amount and other information required to process the payment.

Processing is carried out to provide the payment method selected by you and is based on Art. 6(1)(b) GDPR.

PayPal may process certain information under its own responsibility, for example for fraud prevention, risk assessment or compliance with legal obligations.

13. Electronic withdrawal function – EU Withdrawal Button & Form

To provide the legally required electronic withdrawal function, we use the Shopify app “EU Widerrufs-Button & Formular” (“EU Withdrawal Button & Form”) provided by:

401layers UG (haftungsbeschränkt)
Dorothea-Erxleben-Straße 1a
40721 Hilden
Germany

The application enables you to electronically withdraw from a contract concluded through our online shop and receive confirmation that your withdrawal declaration has been received.

When you use the withdrawal function, the following personal data in particular may be processed:

  • first and last name,

  • email address,

  • customer and order information,

  • order number,

  • billing and delivery address,

  • products ordered or affected by the withdrawal,

  • information relating to the withdrawal,

  • date and time of the withdrawal declaration,

  • IP address and

  • technical information required to provide and secure the form.

Processing is carried out for the purpose of receiving, documenting, confirming and processing your withdrawal declaration.

The legal basis is in particular Art. 6(1)(c) GDPR for compliance with our legal obligations relating to the provision and processing of the electronic withdrawal function. Where processing also serves to reverse the contract concluded with you, it is additionally based on Art. 6(1)(b) GDPR.

401layers processes personal data in connection with the technical provision of the withdrawal function as a service provider or processor.

The data is retained only for as long as necessary to process and document the withdrawal and to comply with statutory documentation and retention obligations.

14. Judge.me – customer reviews

We use Judge.me to display and manage customer reviews.

Judge.me enables customers to submit reviews of purchased products. Depending on how the service is used, the following information may in particular be processed:

  • name,

  • email address,

  • order number,

  • information about purchased products,

  • review text and star rating,

  • uploaded images or videos, where applicable, and

  • technical information such as IP address, browser and device information.

Processing serves to provide, manage and, where applicable, verify customer reviews.

The legal basis depends on the respective processing activity. Where non-essential cookies or similar technologies are used, they are used only with your consent pursuant to Section 25(1) TDDDG, and the resulting processing of personal data is based on Art. 6(1)(a) GDPR.

Where review invitation emails are sent, this is done only where an appropriate legal basis exists.

15. Newsletter and Shopify Email

If you subscribe to our newsletter, we process your email address and any additional information voluntarily provided by you to send you information about our products, offers and business.

We may use Shopify Email for the technical delivery of email marketing.

Newsletter processing is based on your consent pursuant to Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future, in particular by using the unsubscribe link contained in our marketing emails.

After unsubscribing, we may retain your email address on a suppression list where necessary to ensure that no further newsletters are sent to you. Such processing is based on Art. 6(1)(f) GDPR.

16. Cookies and similar technologies

Our online shop uses cookies and similar technologies.

Technically necessary technologies may be used where strictly necessary to provide a digital service expressly requested by you. In such cases, information is stored on or accessed from your device in accordance with Section 25(2) TDDDG.

Non-essential cookies and similar technologies, in particular for analytics, marketing or personalisation purposes, are generally used only after you have given your consent.

Storage of or access to information on your device is then based on Section 25(1) TDDDG. Where personal data is processed, processing is based on your consent pursuant to Art. 6(1)(a) GDPR.

You may withdraw or change your consent at any time with effect for the future using the privacy settings provided on our website.

17. Shopify Privacy & Compliance

We use Shopify's privacy and consent functions, including Shopify Privacy & Compliance, to manage your cookie and privacy choices.

Information relating to your consent decisions and technical information such as your IP address and device or browser information may be processed.

Processing serves to implement your privacy choices and obtain and document required consent.

Where processing is necessary to comply with legal obligations, it is based on Art. 6(1)(c) GDPR.

18. Shopify statistics and analytics

We use statistics and analytics functions provided by Shopify to analyse the use of our online shop and improve our services.

Information processed may include:

  • IP address,

  • browser and device information,

  • time zone,

  • pages and products viewed,

  • referrer URL,

  • interactions with our online shop and

  • cookies and similar identifiers.

Where non-essential cookies or similar technologies are used or personal usage profiles are created for these purposes, this generally takes place only with your consent.

Storage of or access to information on your device is then carried out pursuant to Section 25(1) TDDDG, while the processing of personal data is based on Art. 6(1)(a) GDPR.

You may change or withdraw your consent at any time with effect for the future through our privacy settings.

19. Retention periods

We generally retain personal data only for as long as necessary for the respective processing purpose.

Following completion of a contract, data may continue to be retained where required by commercial, tax or other statutory retention obligations.

After the applicable retention periods expire, data will be deleted unless another legal basis permits further retention.

20. International data transfers

When using Shopify and, where applicable, other service providers, personal data may be processed outside the European Union or European Economic Area.

Any such transfer takes place only in accordance with Art. 44 et seq. GDPR. Relevant safeguards may include an adequacy decision by the European Commission, the EU-US Data Privacy Framework for appropriately certified recipients or appropriate safeguards such as the European Commission's Standard Contractual Clauses.

21. Your rights

Subject to the statutory requirements, you have in particular the following rights:

  • right of access under Art. 15 GDPR,

  • right to rectification under Art. 16 GDPR,

  • right to erasure under Art. 17 GDPR,

  • right to restriction of processing under Art. 18 GDPR,

  • right to data portability under Art. 20 GDPR,

  • right to object under Art. 21 GDPR and

  • right to withdraw consent with effect for the future under Art. 7(3) GDPR.

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

22. Right to object

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right pursuant to Art. 21 GDPR to object to such processing at any time on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time.

23. Right to lodge a complaint

Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

You may in particular contact the supervisory authority of your habitual residence, place of work or the place of the alleged infringement.

24. Changes to this Privacy Policy

We may amend this Privacy Policy if our processing activities, service providers or applicable legal requirements change.

The current version published on this website applies.