Privacy policy

1. Who is responsible for your data

The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:

LOMERA
Emir Kilic
Germany
Postal address available on request via email.
Email: info@wearlomera.com

2. Hosting and shop system (Shopify)

Our online shop runs on Shopify. The provider for customers in Europe is Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. When you visit our shop, Shopify processes technical access data (e.g. IP address, browser type, date and time of access) in order to deliver the website and keep it secure. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in a secure and functioning shop). Shopify may also transfer data to Shopify Inc. in Canada (adequacy decision of the EU Commission) and to service providers in the USA; such transfers are based on the EU-U.S. Data Privacy Framework and/or EU standard contractual clauses. We have concluded a data processing agreement with Shopify.

3. Orders

When you place an order, we process the data you provide (name, email address, billing and delivery address, phone number if provided, ordered items, payment information) to process and deliver your order. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Due to commercial and tax retention obligations, we store order and invoice data for the statutory periods (up to 10 years, Art. 6(1)(c) GDPR in conjunction with § 147 AO and § 257 HGB).

4. Fulfilment and delivery

To deliver your order, we pass on your name, delivery address and, where necessary for delivery notifications, your email address or phone number to our fulfilment partners: the order management service DSers and the supplier who ships the goods to you, as well as the respective shipping company. Some of these partners are located outside the EU (e.g. in China or Singapore), where the level of data protection may be lower than in the EU and no adequacy decision exists. This transfer is necessary to fulfil the contract you concluded with us (Art. 6(1)(b) and Art. 49(1)(b) GDPR). Only the data required for shipping is transferred.

5. Payment

Depending on the payment method you choose, your payment data is processed by the following providers, who act as independent controllers:

Shopify Payments (credit card, Apple Pay, Google Pay and other methods) – Shopify International Limited, Dublin, Ireland, using the payment processor Stripe.
Klarna – Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna may carry out an identity and credit check for some payment options. More information: klarna.com/international/privacy-policy.
PayPal – PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

The legal basis is Art. 6(1)(b) GDPR. Please also note the privacy policies of the respective payment provider.

6. Contact

If you contact us by email or via our contact form, we process your details in order to answer your request (Art. 6(1)(b) GDPR for questions about an order or a contract, otherwise Art. 6(1)(f) GDPR). We delete this data once your request has been dealt with, unless statutory retention obligations apply.

7. Cookies and similar technologies

Our shop uses cookies and similar technologies. Cookies that are strictly necessary for the shop to work (e.g. shopping cart, checkout, language and security) are set on the basis of § 25(2) TDDDG and Art. 6(1)(f) GDPR. All other cookies (e.g. for statistics or marketing) are only used if you have given your consent via our cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time via “Cookie preferences” at the bottom of every page.

8. Social media links

Our website contains simple links to our profiles on Instagram and TikTok. No data is transferred to these platforms when you visit our shop. Only when you click a link and visit the platform will the respective provider process your data in accordance with its own privacy policy.

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). If you have given consent, you can withdraw it at any time with effect for the future (Art. 7(3) GDPR). To exercise your rights, simply contact us by email.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.