Data protection

1. Who we are

This website and the online shop (collectively "Services") are operated by Solio GmbH ("Solio", "we", "us").

2. What data we process

Personal data is information that identifies you or can be linked to you.

Depending on how you use our services, we process:

2.1 Data you provide to us

• Contact details: Name, billing/shipping address, email address, phone number (if provided)
• Order and transaction data: Purchases, returns, exchanges, cancellations, history
• Account data (if an account is created): Login credentials, settings, preferences
• Communication: Content from inquiries/emails/forms
• Reviews/Content: If you submit reviews or content

2.2 Automatically collected data

• Device and connection data: IP address, browser type, device identifiers, network information
• Usage data: Page views, clicks, session information, referrer, rough location derived from IP
• Cookies & similar technologies: Essential cookies as well as (depending on your selection) analysis/marketing technologies

2.3 Data from third parties

• Service providers (payment, shipping, analytics, support, fraud prevention, hosting)
• Advertising/measurement partners (as far as legally permitted or subject to consent)

3. Purposes and legal bases (GDPR)

3.1 Performance of a contract (Art. 6(1)(b) GDPR)

• Order processing, payment processing, shipping, returns
• Management of a customer account (if used)
• Transactional emails (confirmation, shipping status)

3.2 Legal obligations (Art. 6(1)(c) GDPR)

• Commercial and tax-related record keeping
• Fulfillment of regulatory requirements
• Responding to lawful requests

3.3 Legitimate interests (Art. 6(1)(f) GDPR)

• IT security, fraud/abuse prevention
• Operation, stability, and improvement of the services
• Performance measurement, as far as permitted without consent

3.4 Consent (Art. 6(1)(a) GDPR)

• Newsletter/marketing, where required
• Non-essential cookies/tracking/personalization via consent banner

Consent can be withdrawn at any time with effect for the future.

4. Marketing / Newsletter

When you sign up for our newsletter, we send marketing emails based on your consent (where required by law). We currently do not use double-opt-in (single-opt-in). You can unsubscribe at any time using the unsubscribe link in every marketing email.

Service/transactional emails (e.g., regarding orders) may continue to be necessary.

5. Cookies, pixels, and similar technologies

We use cookies and similar technologies that are required for the operation of the shop (e.g., shopping cart, checkout, security). For analysis and marketing technologies, we obtain your consent—where required—via a consent banner/settings.

With your consent, we may use the following advertising/measurement technologies, among others:

• Meta Pixel
• TikTok Pixel
• Google Tags/Pixels (e.g., Google Ads / Analytics integrations)

In this context, information such as IP address, device identifiers, browser information, and event data (e.g., page views, add-to-cart, purchase) may be processed to measure campaigns and display relevant advertising (depending on your settings). You can change your selection at any time in the cookie/settings tool.

6. Data sharing

We only share data as necessary, including to:

6.1 Shopify (Platform)

Our shop runs on Shopify (platform operation, checkout functions, and associated services).

6.2 Payments

For payment processing, we use payment service providers, in particular PayPal as well as Shopify Checkout/Shopify Payments and—depending on the payment method—common credit card providers and payment networks (e.g., Visa, Mastercard, American Express). Payment data is processed by the payment service providers; we do not store full credit card information.

6.3 Shipping

For delivery, we share necessary data (e.g., name, shipping address, and potentially email/phone for delivery notifications) with shipping service providers, in particular DHL and DPD.

6.4 Analytics/Advertising/Marketing

As far as necessary and legally permitted (often based on consent), we use partners for performance measurement and ad delivery (including pixel technologies).

6.5 Legal/Compliance/Transactions

Data may also be shared to fulfill legal obligations, protect rights, or in the context of corporate transactions.

7. Shopify (Processing via the platform)

The services are hosted by Shopify. Data may also be processed outside your country. Depending on the activated Shopify features, Shopify may also process data for its own purposes as described in Shopify's documentation.

8. Retention period

We only store personal data for as long as it is necessary for the stated purposes, in particular contract fulfillment, statutory retention, dispute resolution, legal enforcement, and security.

9. Security

We implement appropriate technical and organizational measures. Absolute security cannot be guaranteed.

10. Your rights

Depending on the applicable law, you have rights, in particular, to access, rectification, erasure, restriction, objection, data portability, withdrawal of consent, and the right to lodge a complaint with a supervisory authority.

To exercise your rights: elena@solio.life (identity verification may be required).

11. International data transfers

Data may be processed outside of Germany/the EU. Where necessary, we use appropriate safeguards (e.g., standard contractual clauses) or adequacy decisions.

12. Third-party links

The privacy policies of the respective external sites apply to those sites.

13. Children

Our services are not intended for children; we do not knowingly process data from minors.

14. Changes

We may update this privacy policy. The current version is published here with the "last updated" date.

15. Contact

Solio GmbH, Torstraße 92, 10119 Berlin
E-Mail: elena@solio.life