PRIVACY POLICY (DATENSCHUTZERKLÄRUNG) – RUSHOUR.SHOP

1. Name and Contact Details of the Data Controller (Verantwortlicher)

This privacy policy informs you about the processing of personal data on the website rushour.shop. The controller responsible for data processing in accordance with Art. 4(7) of the General Data Protection Regulation (GDPR) is:

Rushour Owner: Muhammad Usman.
Lindenweg 30, 64354, Reinheim, Germany.
Email: sam92e@gmail.com

2. Collection and Storage of Personal Data; Nature and Purpose of Use

2.1 When visiting the website (Server Log Files) When you visit our website, the browser used on your device automatically sends information to the server of our website (hosted via Wix.com). This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until automated deletion:

IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which access is made (Referrer URL)
Browser used and, if applicable, the operating system of your computer

Legal Basis: The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest follows from the data collection purposes listed above (ensuring a smooth connection and system security).

2.2 When placing an order in our online shop If you order products through our store, we collect the following mandatory information to process your order:

Title, first name, last name
A valid email address
Delivery and billing address
Payment data (depending on the selected payment method)

Legal Basis: The collection of this data takes place to fulfill our contractual obligations to you under Art. 6(1)(b) GDPR.

Your personal data will only be passed on to third parties if this is necessary for the execution of the contract.

Hosting & Shop Infrastructure: Our store is hosted on [Wix.com / Shopify]. Your data is stored through their data storage, databases, and general application behind a secure firewall.
Production & Fulfillment: Because we utilize custom manufacturing, relevant order data (shipping address, items ordered) is securely transmitted to our manufacturing and print-on-demand partners exclusively for fulfillment purposes.
Logistics: We share your name, delivery address, and, if applicable, your email address (for tracking) with our shipping partners (e.g., DHL, Hermes, UPS) pursuant to Art. 6(1)(b) GDPR.

Payment Processors: Payment data is transmitted directly to our secure payment providers (e.g., PayPal, Stripe, Apple Pay, Meta Pay). We do not store your credit card details on our servers.

3. Sharing of Data with Third Parties (Weitergabe von Daten)

4. Cookies and Social Commerce Tracking (Meta Pixel / Instagram Shopping)

4.1 Essential Cookies: We use cookies to make our website work. These essential cookies are necessary for the shopping cart and checkout process (Legal basis: Art. 6(1)(f) GDPR). 4.2 Marketing and Tracking (Meta): Because we utilize Instagram Shopping and Meta commerce integrations, we use the "Meta Pixel" provided by Meta Platforms Ireland Limited. This allows us to track the behavior of site visitors after they click on an Instagram or Facebook ad.

Consent Requirement: Non-essential cookies and tracking pixels are only activated if you give your express consent via our Cookie Consent Banner upon entering the site (Legal basis: Art. 6(1)(a) GDPR).

5. Your Rights as a Data Subject (Betroffenenrechte)

Under the GDPR, you have the following rights regarding your personal data:

Right of Access (Art. 15 GDPR): You can request information about your personal data processed by us.
Right to Rectification (Art. 16 GDPR): You can immediately demand the correction of incorrect or incomplete personal data.
Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): You can request the deletion of your personal data, provided the processing is not necessary for exercising the right of freedom of expression, fulfilling a legal obligation (such as tax retention periods), or defending legal claims.
Right to Restriction of Processing (Art. 18 GDPR)
Right to Data Portability (Art. 20 GDPR)
Right to Withdraw Consent (Art. 7(3) GDPR): You can revoke your once-given consent at any time.

Right to Lodge a Complaint (Art. 77 GDPR): You have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or our headquarters in Hesse (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit).

6. Data Security (Datensicherheit)

During the website visit, we use the widespread SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.

To learn more about this, check out our article “Creating a Privacy Policy”.