Privacy Policy

PRIVACY POLICY

1. Controller

The controller responsible for the processing of personal data on this website is:

HATELOVE
Owner: Dennis Utte
Lange Laube 18
30159 Hannover
Germany

Email: hatelove@duck.com

2. General Information on Data Processing

We process personal data only to the extent necessary to provide our online shop, process orders, communicate with customers, fulfill legal obligations, and secure our services.

Personal data refers to information relating to an identified or identifiable person. This includes, in particular, name, address, email address, telephone number, order and payment data, IP address, and technical usage data.

3. Website Provision and Server Log Files

When you access our website, technically necessary data is processed. This may include, in particular, IP address, date and time of access, pages accessed, referrer URL, browser type, operating system, and technical device information.

Processing is carried out for the technical provision of the website, to ensure stability and security, and to prevent misuse. The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure and functional operation of our online shop.

4. Shopify

Our online shop is operated via Shopify. The provider for customers in the European Economic Area and Switzerland is Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Shopify processes data required for hosting, display, shopping cart, checkout, order processing, technical security, and functionality of the shop. Data may also be transferred to affiliated companies and service providers of Shopify.

Further information on Shopify's data protection can be found at:
https://www.shopify.com/de/legal/datenschutz

5. Order and Contract Processing

If you order from our shop, we process the data you provide. This includes, in particular, name, billing and shipping address, email address, telephone number, ordered products, product variants, order number, price, shipping method, payment status, and order communications.

Processing is carried out for the initiation, execution, and processing of the purchase contract, for communication about your order, for processing returns or complaints, and for fulfilling legal obligations.

The legal basis is Art. 6 para. 1 lit. b GDPR and, where necessary, Art. 6 para. 1 lit. c GDPR.

6. Payment Processing

To process your payment, we transmit the data required for the respective payment method to the payment service provider you have selected. The available payment methods will be displayed during checkout.

[ONLY RETAIN THE PAYMENT METHODS YOU ACTUALLY OFFER.]

Shopify Payments

When using Shopify Payments, payment processing is carried out via Shopify and the payment service providers integrated therein. Their respective data protection regulations also apply.

PayPal

If you pay with PayPal, the data required for payment processing is transmitted to PayPal. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

Privacy Policy:
https://www.paypal.com/de/legalhub/privacy-full

Klarna

If you pay with Klarna, the data required for payment processing is transmitted to Klarna. The provider is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

Privacy Policy:
https://www.klarna.com/de/datenschutz/

The legal basis is Art. 6 para. 1 lit. b GDPR.

7. Production and Shipping via Printify

We use Printify for the production and shipping of ordered products. The provider is Printify, Inc., 108 West 13th Street, Wilmington, Delaware 19801, USA.

For production and delivery, we transmit the data necessary for order processing to Printify. This includes, in particular, name, shipping address, ordered products, variants, quantities, and any other information required for the order.

Processing is carried out for the fulfillment of the purchase contract in accordance with Art. 6 para. 1 lit. b GDPR. Printify may use printing and shipping partners for production and delivery. In this process, personal data may be transferred to third countries, particularly the USA.

Further information:
https://printify.com/privacy-policy/

8. Shipping Service Providers

To the extent necessary for delivery, we transmit shipping data such as name and shipping address to the respective shipping service provider or fulfillment partner used.

The legal basis is Art. 6 para. 1 lit. b GDPR.

9. Contacting Us

If you contact us by email, we process your information to process and respond to your inquiry.

The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as your inquiry is related to an order or a contract. Otherwise, processing is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the efficient processing of inquiries.

10. Cookies and Similar Technologies

Our website uses technically necessary cookies and similar technologies. These are essential for basic shop functions to work, such as shopping cart, checkout, security features, language settings, and saving your cookie preferences.

Insofar as we use optional technologies for statistics, marketing, personalized advertising, or reach measurement, we obtain your consent before activating them. You can revoke or change any given consent at any time with effect for the future via the cookie settings.

11. Recipients of Personal Data

We use service providers who process data on our behalf or for the fulfillment of the contract. This may include, in particular, Shopify, Printify, payment service providers, shipping service providers, hosting and IT service providers.

We only pass on personal data insofar as this is necessary for the purposes mentioned, you have given your consent, there is a legal obligation, or the transfer is necessary for the assertion, exercise or defense of legal claims.

12. Data Transfer to Third Countries

When using individual service providers, personal data may be transferred to countries outside the European Union or the European Economic Area.

Unless there is an adequacy decision by the European Commission, a transfer will generally only take place if appropriate safeguards are in place, in particular on the basis of standard contractual clauses of the European Commission, or if a legal exception applies.

13. Storage Duration

We store personal data only for as long as is necessary for the respective processing purposes or as required by statutory retention periods.

Commercial and tax-relevant documents are stored for the respective statutory period.

14. Your Rights

Within the framework of legal provisions, you have the right to:

Information about your stored personal data,
Correction of inaccurate data,
Deletion of your data,
Restriction of processing,
Data portability,
Objection to processing based on legitimate interests,
Withdrawal of given consent with effect for the future,
Complaint to a data protection supervisory authority.

To exercise your rights, simply send a message to:

hatelove@duck.com

15. Right to Object

Insofar as we process personal data on the basis of Art. 6 para. 1 lit. f GDPR, you can object to this processing at any time for reasons arising from your particular situation.

We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

16. Up-to-dateness

Status of this privacy policy: 16.07.2026