Privacy Policy

Last updated: October 2026

1. Controller

The controller responsible for the processing of personal data on this website is:

Auriteq - Eloy Caudet-Roca Garcia
Albert-Steiner-Str. 21
52134 Herzogenrath, Germany
Phone: +49 177 4012419
Email: info@auriteq.com

We are not required to appoint a data protection officer; please direct all privacy requests to the address above.

2. Overview

We process personal data only to the extent necessary to operate this website, to process your orders and to communicate with you, and, with your consent, for marketing and analytics. The legal bases are Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (performance of a contract or pre-contractual steps), Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(f) GDPR (legitimate interests). Where we rely on consent for storing or reading information on your device (cookies and similar technologies), § 25 TDDDG applies in addition.

3. Hosting and shop system (Shopify)

This website and shop are operated on the e-commerce platform of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, Ireland ("Shopify"). Shopify hosts the website, stores the shop data (products, orders, customer accounts) and provides the checkout.

When you visit the website, Shopify's servers automatically record the IP address, date and time of access, the page requested, the referring URL, browser type and version and operating system (server log files). This is necessary to deliver the website and to ensure its stability and security; the legal basis is Art. 6(1)(f) GDPR. Log data is deleted after a short period unless it is needed to investigate a security incident.

Shopify processes data on our behalf under a data processing agreement (Art. 28 GDPR). Shopify may transfer data to its group companies in Canada (country with an adequacy decision) and in the USA; transfers to the USA are based on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses. For certain functions, such as Shop Pay, the Shop app and fraud analysis across merchants, Shopify acts as an independent controller. Details are in Shopify's privacy policy.

4. Cookies and consent

We use cookies and similar technologies. Technically necessary cookies (for example for the shopping cart, the checkout session, language selection and security) are set without consent on the basis of § 25(2) TDDDG and Art. 6(1)(f) GDPR. All other cookies and tracking technologies, in particular for analytics and advertising (sections 9 to 11), are only used after you have given consent in our cookie banner.

You can withdraw or change your consent at any time via the "Cookie settings" link in the footer of the website. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

5. Ordering, customer account and payment

When you order, we process the data you enter in the checkout: name, billing and delivery address, email address, telephone number (optional), the products ordered, the payment method chosen and the order history. We use this data to perform the contract (Art. 6(1)(b) GDPR) and to meet our obligations under tax and commercial law (Art. 6(1)(c) GDPR). Order data is kept for the duration of the statutory retention periods, which are up to ten years under German tax law.

If you create a customer account, your data is stored until you delete the account or ask us to delete it, unless we are required to keep it longer.

For payment processing we pass the data required for the payment to the payment provider you selected:

• Shopify Payments (credit and debit cards, Apple Pay, Google Pay, Shop Pay): processed by Shopify International Limited together with its payment processor Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. Card data is entered directly with the payment processor and is never stored by us.
• PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal's privacy policy applies to the payment.
• Klarna: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. If you select a Klarna payment option, Klarna receives your contact and order data and, for invoice or instalment payments, may carry out an identity and credit assessment, including obtaining information from credit agencies. Klarna is the controller for this processing; the legal basis for our transmission is Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR (our legitimate interest in preventing payment default). Details: Klarna privacy policy.

The legal basis for passing data to payment providers is Art. 6(1)(b) GDPR. We also process payment data to prevent fraud (Art. 6(1)(f) GDPR).

6. Shipping

We ship with UPS (United Parcel Service Deutschland S.à r.l. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany) and, depending on the destination, with its international partner companies. For delivery we pass your name, delivery address and, for shipments outside the EU, the data required for customs clearance to the carrier (Art. 6(1)(b) GDPR). We pass your email address or telephone number to the carrier only if you have consented to receiving delivery notifications (Art. 6(1)(a) GDPR) or, for international shipments, where the carrier needs to contact you for customs clearance (Art. 6(1)(b) GDPR).

7. Withdrawal function, contact and support

If you withdraw from a contract using the withdrawal function on our website or by email, we process the data you provide (name, order number, contact details, date) to handle the withdrawal and the refund and to document it (Art. 6(1)(b) and (c) GDPR). When you contact us by email or through the contact form, we process your details to answer your enquiry (Art. 6(1)(b) GDPR for contractual matters, otherwise Art. 6(1)(f) GDPR). Enquiries are deleted once they have been dealt with, unless they are part of an order record.

The Auriteq desktop app does not send personal data to us automatically. If you send us log files or screenshots for support, we use them only to resolve your issue and delete them afterwards.

8. Email marketing (Klaviyo)

With your consent (Art. 6(1)(a) GDPR) we send you a newsletter with product news, updates and offers. We use the double opt-in procedure: after signing up you receive an email asking you to confirm your address. We record the time of registration and confirmation and your IP address to be able to prove consent. You can unsubscribe at any time via the link in every email or by writing to info@auriteq.com.

If you have bought from us, we may also send you emails about similar products of our own on the basis of § 7(3) UWG and Art. 6(1)(f) GDPR, unless you have objected. You can object at any time, free of charge, via the unsubscribe link or by email.

For sending and analysing newsletters we use Klaviyo, Inc., 125 Summer Street, Boston, MA 02110, USA, under a data processing agreement. Klaviyo stores the email address, name, order history and interaction data (opens and clicks) in order to send relevant content and to measure campaign performance. The transfer to the USA is based on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses. Details: Klaviyo privacy notice.

9. Web analytics (Google Analytics)

With your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG) we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyse how visitors use the website (pages viewed, time on site, approximate location, device and browser, source of the visit, purchases). IP addresses are not stored by Google Analytics 4. Data may be transferred to Google LLC in the USA on the basis of the EU-US Data Privacy Framework and the EU Standard Contractual Clauses. Analytics data is retained for 14 months. You can withdraw your consent at any time in the cookie settings. Details: Google privacy policy.

10. Google Ads

With your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG) we use Google Ads conversion tracking and remarketing from Google Ireland Limited. A cookie is set when you reach our website through a Google ad; it allows Google and us to recognise that you clicked on the ad and whether an order followed, and to show you our ads on Google services and partner websites later. We do not receive any data that identifies you personally. The conditions for the transfer to the USA are the same as in section 9. You can manage personalised advertising at adssettings.google.com.

11. Meta Pixel and Meta Conversions API

With your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG) we use the Meta Pixel and the Conversions API of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta"). These tools record which pages you visit and which actions you take (for example viewing a product, adding to the cart, purchasing) and link this to your Facebook or Instagram account if you have one, so that we can measure the success of our ads, create audiences and show you relevant ads on Facebook and Instagram. Hashed contact data from the checkout may be sent to Meta for this purpose.

We and Meta are joint controllers for the collection and transmission of this data; the agreement is available at facebook.com/legal/controller_addendum. Meta is solely responsible for the subsequent processing. Data may be transferred to Meta Platforms, Inc. in the USA on the basis of the EU-US Data Privacy Framework and the EU Standard Contractual Clauses. You can withdraw your consent at any time in the cookie settings and manage ad preferences at facebook.com/ads/preferences. Details: Meta privacy policy.

12. Social media

Our website links to our profiles on Instagram, YouTube and other platforms. No data is transmitted to these providers by the link alone. When you visit our profiles, the privacy policy of the respective platform applies. For statistics the platforms provide about our profiles (Page Insights), we and the platform operator may be joint controllers; the relevant agreements are available on the platforms' websites.

13. Recipients and international transfers

We pass personal data to third parties only where this is necessary for the purposes described above, where you have consented, or where we are legally obliged to do so (for example to tax authorities). Our service providers are bound by data processing agreements. Where data is transferred to countries outside the EU/EEA, this is done on the basis of an adequacy decision of the European Commission, the EU-US Data Privacy Framework for certified US companies, or the EU Standard Contractual Clauses. You can request a copy of the relevant safeguards from us.

14. Retention

We keep personal data only as long as needed for the purpose for which it was collected. Contract and invoice data is kept for the statutory retention periods under German tax and commercial law (currently up to ten years). Consent records are kept until the consent is withdrawn and for three years after that for evidence purposes. Marketing and analytics data is deleted or anonymised according to the periods stated in the relevant sections.

15. Your rights

You have the right to obtain information about the personal data we hold about you (Art. 15 GDPR), to have inaccurate data corrected (Art. 16), to have data erased (Art. 17), to restrict processing (Art. 18), to receive your data in a portable format (Art. 20) and to withdraw consent at any time with effect for the future (Art. 7(3)).

Right to object (Art. 21 GDPR): Where we process your data on the basis of legitimate interests, you have the right to object at any time on grounds relating to your particular situation. Where your data is processed for direct marketing, you may object at any time without giving reasons, and we will stop the processing for that purpose.

To exercise your rights, write to info@auriteq.com or to the postal address in section 1. You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, www.ldi.nrw.de. You may also contact the supervisory authority of your own country of residence.

16. Security

The website is delivered over an encrypted connection (TLS). Payment data is entered directly with the payment providers and never passes through our systems.

17. Changes to this policy

We update this policy when our processing changes or the law requires it. The current version is always available at auriteq.com.