Privacy policy

🛡️ Privacy Policy

Last updated: 5 August 2026

1. Data controller

The controller responsible for processing personal data on this website is:

Anteplim Handel
Proprietor: Gülhan Altindağ
Röhrer Weg 10
71032 Böblingen
Germany

Telephone and WhatsApp: +49 174 9343438
Email: info@anteplim.de

2. General information and legal bases

We process personal data only where necessary to operate our online shop, fulfil orders, communicate with customers, comply with legal obligations or, after obtaining the required consent, carry out analytics and marketing activities.

Processing is carried out in particular on the following legal bases:

  • Article 6(1)(a) GDPR – consent;
  • Article 6(1)(b) GDPR – performance of a contract and pre-contractual steps;
  • Article 6(1)(c) GDPR – compliance with legal obligations;
  • Article 6(1)(f) GDPR – legitimate interests, particularly the secure, economical and customer-friendly operation of our online shop.

3. Provision of the website and Shopify

Our online shop is operated using the Shopify e-commerce platform. The provider for merchants in the European Economic Area is:

Shopify International Limited
The Sidings, 4th Floor
Grand Canal Quay
Dublin D02 E7K8
Ireland

When you access our website, data such as your IP address, date and time of access, pages accessed, referring URL, browser, device and operating-system information, and technical log and security data may be processed.

This processing is carried out to provide and maintain the stability of the shop, ensure technical security, analyse errors and protect the website against misuse and attacks. The legal basis is Article 6(1)(f) GDPR.

Shopify also processes customer, order and contract data on our behalf. Data may be processed outside the European Economic Area by companies within the Shopify group and their subprocessors. Shopify states that it uses recognised transfer mechanisms, including approved Binding Corporate Rules, adequacy decisions and Standard Contractual Clauses.

Further information is available in the Shopify Privacy Policy.

4. Cookies and consent management

Our website uses cookies and similar technologies. Strictly necessary cookies may be used to provide essential functions such as the shopping basket, checkout, language preferences, security and payment processing.

The storage of or access to strictly necessary information is carried out in accordance with Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Subsequent processing of personal data is based, depending on the purpose, on Article 6(1)(b) or (f) GDPR.

Non-essential analytics, personalisation and marketing technologies are activated only after you have given your consent. The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR.

We use Pandectes GDPR Compliance to manage your choices. Your consent decision, the time of your selection, device and browser information and a technical identifier may be stored. This processing is carried out to manage and demonstrate consent under Article 6(1)(c) and (f) GDPR.

You can change your preferences or withdraw your consent for the future at any time through the cookie settings available on our website. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Current information about the cookies used, their providers, purposes and storage periods is available in our website’s cookie settings.

5. Orders, customer accounts and contact enquiries

When you place an order, use a customer account or contact us, the following data may be processed:

  • first and last name;
  • delivery and billing address;
  • email address and telephone number;
  • order, product, return and complaint information;
  • payment method, payment status and transaction references;
  • messages and other information you provide voluntarily.

This data is processed to respond to your enquiry, fulfil your order, deliver the goods, handle returns and complaints, and comply with statutory record-keeping obligations.

The legal bases are Article 6(1)(b) and (c) GDPR. Where data is processed to improve customer service or defend against unfounded claims, the legal basis is Article 6(1)(f) GDPR.

6. Payment processing

The information required to process your payment is transferred to the payment service provider you select. This may include your name, billing address, email address, order value, currency, payment method, transaction information and technical data.

Depending on availability and your selection during checkout, the following services and payment methods may be used:

  • Shopify Payments and Shop Pay, including Visa, Mastercard, American Express, Maestro and offered local payment methods;
  • PayPal – PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg;
  • Klarna – Klarna Bank AB (publ), Sweden;
  • Apple Pay – Apple Distribution International Limited, Ireland;
  • Google Pay – Google Ireland Limited, Ireland;
  • Viva.com Smart Checkout, where this method is offered and selected during checkout;
  • Bancontact, BLIK, EPS, iDEAL/Wero, MobilePay or other local methods displayed during checkout;
  • manual payment methods, where offered.

Processing is carried out to perform the contract under Article 6(1)(b) GDPR. Where a payment provider carries out legally required identity, creditworthiness, anti-money-laundering or fraud checks, the provider is independently responsible for the relevant processing.

If Klarna is selected, personal data may be transferred to Klarna for identity, creditworthiness and risk assessments. Further information is provided during the payment process and in Klarna’s privacy policy.

As a rule, we do not receive or store complete credit-card details. These are processed directly by the payment service providers involved.

Further information is available in the privacy notices of Shopify, PayPal, Klarna, Apple and Google.

7. Shipping and creation of shipping labels

To deliver your order, we transfer the required data to the shipping service providers we use. This may include your name, delivery address, order and parcel information and, where required for delivery notifications, your email address or telephone number.

We use the following providers in particular:

  • DHL Paket GmbH, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany;
  • Makpirtuk – proprietor Giyasettin Ucun (KenPost), Gryphiusweg 12, 68307 Mannheim, Germany, as a shipping and label service provider.

Makpirtuk/KenPost may process the order and recipient data required from our Shopify store to create DHL shipping labels and arrange delivery.

The legal basis is Article 6(1)(b) GDPR. Where contact details are transferred for an optional delivery notification and consent is required, the legal basis is Article 6(1)(a) GDPR.

8. Fraud prevention and shop security

Technical security and fraud-prevention systems may be used to protect our online shop, customers and payment processes. These include Shopify’s security and risk-analysis features and the Blockify: Fraud Filter application.

Data processed may include your IP address, device and browser information, order information, delivery and billing addresses, payment status and indications of unusual or potentially abusive activity.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are preventing fraud, payment abuse, unauthorised access and other security-related incidents.

Suspicious orders may be reviewed further, temporarily placed on hold or rejected. Where a decision has a significant effect on you, you may contact us and request a review by a person.

9. Product reviews using Judge.me

We use Judge.me for product reviews. If you submit a review or respond to a review request, your name, email address, order and product information, review text, rating, uploaded images and technical data may be processed.

This processing is carried out to display authentic customer reviews, verify purchases and improve our products and services. Depending on the circumstances, the legal basis is Article 6(1)(a) or (f) GDPR.

Review requests are sent by email only where an appropriate legal basis exists. Consent may be withdrawn at any time with effect for the future.

Further information is available in the Judge.me Privacy Policy.

10. Additional shop functions and applications

We use applications including Shopify Translate & Adapt, Shopify Search & Discovery, Shopify Flow, messaging functions and Essential Free Shipping to provide the shop’s technical and customer-friendly functions.

Depending on the function used, language and country preferences, search terms, shopping-basket contents, order information, customer communications and technical usage data may be processed.

The legal bases are Article 6(1)(b) GDPR for contractual and pre-contractual measures and Article 6(1)(f) GDPR for our legitimate interest in operating a functional, user-friendly and economical online shop.

11. Accounting and Lexware Office

We use Lexware Office, provided by Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany, for accounting, invoicing and compliance with tax and commercial-law obligations.

Customer master data, addresses, orders, invoices, payments and accounting records may be processed for these purposes.

The legal bases are Article 6(1)(b) and (c) GDPR. Further information is available in the Lexware Privacy Notice.

12. Newsletter and marketing communications

If you subscribe to our newsletter, we process your email address and, where applicable, your name, language preference, registration time and evidence of consent.

The newsletter is sent on the basis of your consent under Article 6(1)(a) GDPR. Where used, a double opt-in procedure requires you to confirm your subscription through a confirmation email.

You may withdraw your consent at any time through the unsubscribe link in each newsletter email or by contacting info@anteplim.de. Your email address may subsequently be retained on a suppression list where necessary to ensure that your withdrawal is permanently respected.

13. Google services and Google Ads

After you have given your consent, services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, may be used on our website. These include Google Tag Manager, Google Ads conversion tracking, remarketing functions and the technical integration provided through the Google & YouTube sales channel.

Google Tag Manager is used to manage other website tags. The integrated Google services may process your IP address, device and browser information, pages viewed, interactions, referrer data, order and conversion information, and cookie or advertising identifiers.

This processing is carried out to measure the performance of our advertising, produce statistics and, where permitted, display interest-based advertising.

Non-essential Google services are used only with your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR. You may withdraw your consent at any time through the cookie settings.

Google may also process data in third countries. Further information is available in the Google Privacy Policy and Google My Ad Centre.

14. Meta Pixel, Facebook and Instagram

After you have given your consent, we use the Meta Pixel or corresponding customer-event functions provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Data such as your IP address, device and browser information, pages visited, product views, basket actions, purchases, conversion information and cookie or advertising identifiers may be transferred to Meta.

This processing is carried out to measure advertising campaigns, create audiences and, where permitted, display personalised advertisements on Facebook and Instagram.

These services are used only with your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR. You may withdraw your consent at any time through the cookie settings.

Where we and Meta jointly determine the purposes and means of processing certain event data, joint controllership under Article 26 GDPR may apply. Meta is responsible in particular for fulfilling certain data-subject obligations in relation to data processed further by Meta.

Further information is available in the Meta Privacy Policy.

15. Social-media profiles and external links

Our website may contain links to Facebook, Instagram, YouTube or other external platforms. When ordinary links are used, merely visiting our website does not generally transfer data to those platforms. If you open a link, you leave our website and the privacy terms of the relevant provider apply.

16. Recipients of personal data

Where necessary and legally permitted, personal data may be shared with the following categories of recipients:

  • shop-platform and hosting providers;
  • payment service providers, banks and payment networks;
  • shipping, logistics and label service providers;
  • IT, support, security and fraud-prevention providers;
  • review, communication, analytics and marketing providers;
  • accounting, tax and legal advisers;
  • public authorities where disclosure is required by law.

17. International data transfers

Some service providers or their subprocessors may be located outside the European Union or European Economic Area.

Transfers are carried out only in accordance with Articles 44 et seq. GDPR, particularly on the basis of an adequacy decision, approved Binding Corporate Rules, EU Standard Contractual Clauses or a statutory exception. Despite these safeguards, some third countries may provide a level of data protection that differs from that in the European Union.

18. Retention periods

We retain personal data only for as long as required for the relevant purpose or to comply with statutory retention obligations.

  • Contract, order, invoice and accounting data is generally retained for six, eight or ten years, depending on the applicable tax and commercial-law requirements.
  • Communication data is deleted once the enquiry has been fully resolved and there is no legal or legitimate reason for continued retention.
  • Newsletter data is retained until consent is withdrawn. Evidence of consent and withdrawal may be retained for longer within applicable limitation periods.
  • Cookie and consent data is retained for the periods shown in the cookie settings.
  • Data required for legal claims or fraud prevention may be retained until the applicable limitation period expires.

19. Data security

We take appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access and other risks. Data transmitted between your browser and our website is generally encrypted using TLS/SSL.

However, complete security cannot be guaranteed when data is transmitted over the internet.

20. Your rights

Subject to the applicable statutory requirements, you have the following rights:

  • right of access under Article 15 GDPR;
  • right to rectification under Article 16 GDPR;
  • right to erasure under Article 17 GDPR;
  • right to restriction of processing under Article 18 GDPR;
  • right to data portability under Article 20 GDPR;
  • right to object under Article 21 GDPR;
  • right to withdraw consent under Article 7(3) GDPR;
  • right to lodge a complaint with a supervisory authority under Article 77 GDPR.

Right to object: Where we process your data on the basis of Article 6(1)(f) GDPR, you may object at any time for reasons arising from your particular situation. You may object to processing for direct-marketing purposes at any time without giving reasons.

To exercise your rights, please contact info@anteplim.de. To prevent unauthorised disclosure, we may request reasonable proof of identity.

21. Right to lodge a complaint

You have the right to lodge a complaint with a data-protection supervisory authority. The authority responsible for our place of business is:

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Germany
Website: www.baden-wuerttemberg.datenschutz.de

22. Requirement to provide data

Certain information is required to enter into and fulfil an order. If the necessary contact, delivery and payment information is not provided, we may be unable to accept or fulfil the order.

23. Changes to this Privacy Policy

We may update this Privacy Policy if our website, the services we use or the legal requirements change. The latest version published on this website applies. Where consent is required for a new processing activity, it will be requested separately.