DEAL ECKE

Privacy Policy & Your Personal Data

The protection of your personal data is important to us. In this Privacy Policy, we inform you about which personal data is processed when you visit our online shop dealecke.com, place an order, or contact us, for what purposes this is done, and what rights you are entitled to.

Date: September 24, 2026

01 · CONTROLLER

Who is responsible for data processing?

The party responsible for processing personal data on this website is:

Deal Ecke
Owner: Lê Thị Hiếu
Business Address (VN): Tự Lạn, Việt Yên, Bắc Giang, Vietnam

Email: support@dealecke.com

02 · DATA COLLECTION

What data do we process?

Depending on how you use our shop, the following categories of personal data in particular may be processed:

  • Master and Contact Data: Name, billing and delivery address, email address, and phone number where applicable.
  • Order and Contract Data: Ordered products, variants, quantities, order number, order status, and transaction information.
  • Account Data: User account, account settings, and related information when you create a customer account.
  • Payment Information: Information about the payment method used and the data required for payment processing.
  • Communication Data: Information you provide to us regarding inquiries, complaints, or via the contact form.
  • Technical Data: For example, IP address, browser, operating system, time of access, and technical log data.
  • Usage and Cookie Data: Information about the use of our website, provided this data is technically necessary or you have consented to the respective processing.
03 · PURPOSE & LEGAL BASIS

Why do we process your data?

We process personal data only if there is a corresponding legal basis. This applies in particular to the following purposes:

  • Order and Contract Performance: Processing your order, payment processing, production, shipping, and customer communication.
    Legal basis: Art. 6 para. 1 lit. b GDPR.
  • Customer Service: Handling inquiries, complaints, returns, or other concerns related to your order.
    Legal basis: Art. 6 para. 1 lit. b or lit. f GDPR.
  • Legal Obligations: For example, commercial and tax law documentation and retention obligations.
    Legal basis: Art. 6 para. 1 lit. c GDPR.
  • Technical Security: Protecting our website against misuse, unauthorized access, and technical attacks.
    Legal basis: Art. 6 para. 1 lit. f GDPR.
  • Analysis and Marketing: We only use non-essential analysis, tracking, or marketing technologies with your consent.
    Legal basis: Art. 6 para. 1 lit. a GDPR.
04 · WOOCOMMERCE

Our Online Shop with WordPress & WooCommerce

Our online shop is powered by WordPress and WooCommerce. WooCommerce provides the technical shop functions for the shopping cart, customer account, orders, and checkout.

In the course of placing an order, your name, email address, billing and delivery address, phone number, ordered products, order details, and selected payment method in particular may be stored in our website’s database.

05 · PAYMENT

Payment Processing

We use external payment service providers to process payments. The payment methods currently available are displayed to you at checkout.

When you select a payment method, the data required to execute the payment is transmitted to the respective payment service provider. Processing is carried out in particular to execute the contract in accordance with Art. 6 para. 1 lit. b GDPR.

06 · PRODUCTION & SHIPPING

Transfer to Production and Shipping Partners

Since many of our products are manufactured using the print-on-demand process, personal data may be transmitted to production and fulfillment partners as necessary to process your order.

This may include your name, delivery address, ordered products, and other order data required for production or delivery. Necessary data is passed on to shipping companies to deliver your order (Art. 6 para. 1 lit. b GDPR).

07 · HOSTING

Hosting and Server Logs

When you visit our website, technically necessary information is transmitted to the server or our hosting provider (e.g., IP address, date/time, page accessed, browser type).

This data is processed for the secure and stable provision of the website as well as for the detection and defense against technical attacks (Art. 6 para. 1 lit. f GDPR).

08 · COOKIES

Cookies & Similar Technologies

Our website uses cookies and similar technologies. Some of these are technically necessary to provide core functions such as the shopping cart, checkout, and security.

Other technologies for analysis or marketing are only activated after you give your consent. For more information, please see our Cookie Policy.

09 · RECIPIENTS

Who can receive your data?

Categories of potential recipients include in particular:

  • Hosting and IT service providers,
  • Production and fulfillment partners,
  • Shipping and logistics companies,
  • Payment service providers,
  • Tax, accounting, or other legally required service providers,
  • Analytics and marketing providers (only with your consent).
10 · INTERNATIONAL DATA TRANSFER

Data Transfer Outside the EEA

Certain service providers or production partners may be located outside the European Economic Area. If personal data is transferred to a third country, this is done solely in compliance with legal data protection requirements (e.g., EU Standard Contractual Clauses).

11 · STORAGE DURATION

How long do we store your data?

We store personal data only for as long as necessary for the respective processing purpose or as required by statutory retention obligations (e.g., commercial and tax law requirements).

12 · YOUR RIGHTS

What data protection rights do you have?

Subject to statutory requirements, you have the following rights:

  • Access to the personal data we process about you.
  • Rectification of inaccurate or incomplete data.
  • Erasure of your data, provided no statutory retention obligations prevent it.
  • Restriction of processing under statutory requirements.
  • Data portability in cases provided for by law.
  • Objection to certain data processing activities.
  • Revocation of consent at any time with effect for the future.
13 · RIGHT TO COMPLAIN

Complaint to a Data Protection Authority

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority.

14 · DATA SECURITY

How do we protect your data?

We implement appropriate technical and organizational security measures to protect your personal data against loss, unauthorized access, alteration, or unlawful disclosure.

15 · UPDATES & CHANGES

Changes to This Privacy Policy

Due to the further development of our website dealecke.com or due to changed legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The current Privacy Policy can be accessed on this website at any time.