PRIVACY POLICY

Important Notice for International Customers
This English version is provided for convenience only. The German version is legally binding. Nothing in this Privacy Policy shall deprive consumers of the protection afforded to them by mandatory provisions of the law of their country of habitual residence, where applicable.

1. Data Controller

The entity responsible for processing personal data on this website is:

HATELOVE
Owner: Dennis Utte
Lange Laube 18
30159 Hannover
Germany
Email: hatelove@duck.com

2. General Information on Data Processing

We process personal data only to the extent necessary to operate our online store, process orders, communicate with customers, fulfill legal obligations, and ensure the security of our services.

Personal data is information that relates to an identified or identifiable individual. This includes, in particular, name, address, email address, phone number, order and payment data, IP address, and technical usage data.

3. Provision of the Website and Server Log Files

When you visit our website, technically necessary data is processed. This may include, in particular, IP address, date and time of access, pages visited, referrer URL, browser type, operating system, and technical device information.

This processing is carried out for the technical provision of the website, to ensure stability and security, and to prevent misuse. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and functional operation of our online store.

4. Shopify

Our online store is powered by Shopify. The provider for customers in the European Economic Area and Switzerland is Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Shopify processes data necessary for hosting, display, the shopping cart, checkout, order fulfillment, technical security, and the functionality of the store. In doing so, data may also be transferred to Shopify’s affiliates and service providers.

For more information on Shopify’s Privacy Policy, please visit:

https://www.shopify.com/de/legal/datenschutz

5. Ordering and Contract Processing

When you place an order in our store, we process the data you provide. This includes, in particular, your name, billing and shipping addresses, email address, phone number, products ordered, product variants, order number, price, shipping method, payment status, and communications regarding the order.

This data is processed to initiate, execute, and fulfill the purchase contract; to communicate with you regarding your order; to handle returns or complaints; and to comply with legal obligations.

The legal basis is Article 6(1)(b) of the GDPR and, where necessary, Article 6(1)(c) of the GDPR.

6. Payment Processing

To process your payment, we will share the data required for the respective payment method with the payment service provider you have selected. The available payment methods will be displayed during checkout.

Shopify Payments

When using Shopify Payments, payment processing is handled by Shopify and the integrated payment service providers. Their privacy policies also apply.

PayPal

If you pay with PayPal, the data required for payment processing is transmitted to PayPal. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

Privacy Policy:
https://www.paypal.com/de/legalhub/privacy-full

Klarna

When you pay with Klarna, the data required for payment processing is transmitted to Klarna. The provider is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

Privacy Policy:
https://www.klarna.com/de/datenschutz/

The legal basis is Article 6(1)(b) of the GDPR.

7. Production and Shipping via Printify

We use Printify to manufacture and ship ordered products. The provider is Printify, Inc., 108 West 13th Street, Wilmington, Delaware 19801, USA.

For production and delivery, we transmit to Printify the data necessary for order processing. This includes, in particular, the name, shipping address, ordered products, variants, quantities, and, if applicable, other information required for the order.

Data processing is carried out to fulfill the purchase contract in accordance with Article 6(1)(b) of the GDPR. Printify may use printing and shipping partners for production and delivery. This may involve the transfer of personal data to third countries, in particular the United States.

Further information:
https://printify.com/privacy-policy/

8. Shipping Service Providers

To the extent necessary for delivery, we transfer shipping data, such as your name and shipping address, to the respective shipping service provider or fulfillment partner.

The legal basis is Article 6(1)(b) of the GDPR.

9. Contacting Us

If you contact us via email, we process your information to handle and respond to your inquiry.

The legal basis is Article 6(1)(b) of the GDPR, provided your inquiry relates to an order or a contract. In all other cases, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the efficient handling of inquiries.

10. Cookies and Similar Technologies

Our website uses technically necessary cookies and similar technologies. These are required for basic functions of the online store to work, such as the shopping cart, checkout, security features, language settings, and the storage of your cookie preferences.

To the extent that we use optional technologies for statistics, marketing, personalized advertising, or audience measurement, we will obtain your consent before activating them. You can revoke or modify your consent at any time, with effect for the future, via the cookie settings.

11. Recipients of Personal Data

We use service providers who process data on our behalf or to fulfill the contract. These may include, in particular, Shopify, Printify, payment service providers, shipping service providers, hosting providers, and IT service providers.

We disclose personal data only to the extent necessary for the purposes stated, if you have given your consent, if there is a legal obligation to do so, or if the disclosure is necessary to assert, exercise, or defend legal claims.

12. Data Transfers to Third Countries

When using certain service providers, personal data may be transferred to countries outside the European Union or the European Economic Area.

Unless there is an adequacy decision by the European Commission, such transfers generally take place only if appropriate safeguards are in place, in particular based on the European Commission’s Standard Contractual Clauses, or if a legal exception applies.

13. Retention Period

We store personal data only for as long as is necessary for the respective processing purposes or as required by statutory retention obligations.

Documents relevant under commercial and tax law are retained for the period prescribed by law.

14. Your Rights

Within the framework of legal requirements, you have the right to:

• access your stored personal data;

• correct inaccurate data;

• delete your data;

• restrict processing;

• data portability;

• object to processing based on legitimate interests;

• withdraw consent you have given with effect for the future; and

• file a complaint with a data protection supervisory authority.

To exercise your rights, simply send a message to:

hatelove@duck.com

15. Right to Object

To the extent that we process personal data based on Article 6(1)(f) of the GDPR, you may object to this processing at any time for reasons arising from your particular situation.

We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

16. Date of Last Update

Effective date of this Privacy Policy: July 16, 2026