SHOPin Logo

Privacy Policy

Last updated: 15/04/2026

1. Controller and Scope

This website for the SHOPin storefront accelerator (the "Website") is operated by creativestyle GmbH, a company incorporated under the laws of Germany with its registered office at Erika-Mann-Straße 25, 80636 München, Germany (collectively "we", "us" or "our"). Unless stated otherwise, we are the controller within the meaning of the EU General Data Protection Regulation (Regulation (EU) 2016/679 – "GDPR") for the processing of your personal data in connection with the use of this Website.

This Privacy Policy explains how we process personal data when you visit and use our Website, including any contact options provided here. It does not apply to processing activities in connection with separate contractual relationships (e.g. customer projects), which are governed by separate agreements and, where applicable, additional privacy notices.

2. Contact Details

If you have any questions about this Privacy Policy or about the processing of your personal data, you can contact us at:

creativestyle GmbH
Erika-Mann-Straße 25
80636 München
Germany
Email: privacy@creativestyle.de
Phone: +49 89 5480 7604

Where required by law, you may also contact our data protection officer at:
Email: dpo@smile.fr

3. Categories of Data, Purposes and Legal Bases

3.1 Access to the Website (server log files)

When you access our Website, your browser automatically transmits certain data to our web server. This data is temporarily stored in log files. The following data may be collected:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the requested file
  • Website from which access is made (referrer URL)
  • Browser type and version and other technical information
  • The operating system of your device and the name of your access provider

We process this data to ensure the stability and security of the Website, to enable a smooth connection setup and to evaluate system security and stability. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR in providing a secure, stable and technically functioning Website.

3.2 Contacting us

If you contact us using the contact options provided on the Website (e.g. by email or telephone), we process the personal data you provide (such as your name, contact details and the content of your enquiry) in order to handle your request.

The legal basis for this processing is Art. 6(1)(b) GDPR, where your enquiry is related to a (pre-)contractual relationship with us, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in responding to enquiries and maintaining business relationships.

3.3 Newsletter and marketing communication

If we offer a newsletter or similar email updates and you subscribe to it, we process your email address and, if applicable, your name and preferences in order to send you the requested information.

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future, for example by using the unsubscribe link provided in our emails.

3.4 Web analytics and performance monitoring

We may use privacy-friendly analytics tools to understand how the Website is used, to improve our content and to ensure performance. Depending on the configuration, this may involve the use of cookies or similar technologies.

Where required by law, we only use non-essential cookies or similar technologies with your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG, if applicable). In other cases, the processing is based on our legitimate interests pursuant to Art. 6(1)(f) GDPR in analysing the use of our Website, provided that your interests and fundamental rights do not override these interests.

4. Cookies and Similar Technologies

Our Website may use cookies and similar technologies. Cookies are small text files that are stored on your device when you visit a website. They can be used to make a website more user-friendly, effective and secure.

We distinguish between:

  • Strictly necessary cookies, which are required for the basic technical functioning of the Website and are used, for example, to save your privacy settings or to ensure secure log-in.
  • Optional cookies (e.g. for analytics or marketing), which are only used with your prior consent, where required.

You can configure your browser settings to refuse cookies or to inform you when a cookie is being stored. Please note that disabling cookies may limit the functionality of our Website.

5. Recipients and Data Transfers

We only share your personal data with third parties where this is permitted or required by law. Recipients in particular include:

  • IT service providers (e.g. hosting, maintenance, security, email services)
  • Analytics and error monitoring providers, where used
  • Professional advisers (e.g. lawyers, tax advisers), where necessary
  • Public authorities and courts, where we are legally obliged to do so

Where we engage service providers as processors, they process data strictly in accordance with our instructions on the basis of data processing agreements in accordance with Art. 28 GDPR.

6. Transfers to Third Countries

Some of the recipients mentioned above may be located in countries outside the European Union (EU) or the European Economic Area (EEA), where a different level of data protection may apply. In such cases, we ensure that an adequate level of data protection is guaranteed before such a transfer takes place, for example by means of adequacy decisions of the European Commission or by using the EU Standard Contractual Clauses and additional safeguards where necessary.

7. Storage Period

We process and store your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy or as long as we are obliged to do so by statutory retention periods.

In particular:

  • Server log files are generally stored for a period of 7 days and then deleted or anonymised.
  • Data from enquiries is stored for as long as is necessary to process the enquiry and may then be kept for longer if required by statutory retention obligations or to establish, exercise or defend legal claims.
  • Data processed on the basis of your consent is stored until you withdraw your consent, unless a longer storage period is required or permitted by law.

8. Your Rights under the GDPR

As a data subject, you have the following rights in relation to your personal data in accordance with the GDPR, subject to the applicable legal requirements:

You can exercise these rights at any time by contacting us at privacy@creativestyle.de.

  • Right of access (Art. 15 GDPR) – to obtain information about the personal data we process about you.
  • Right to rectification (Art. 16 GDPR) – to request the correction of inaccurate or incomplete data.
  • Right to erasure (Art. 17 GDPR) – to request the deletion of your personal data, for example where it is no longer necessary for the purposes for which it was collected.
  • Right to restriction of processing (Art. 18 GDPR).
  • Right to data portability (Art. 20 GDPR).
  • Right to object (Art. 21 GDPR) – to object, on grounds relating to your particular situation, to processing of personal data which we base on our legitimate interests pursuant to Art. 6(1)(f) GDPR. Where we process your data for direct marketing purposes, you can object at any time.
  • Right to withdraw consent (Art. 7(3) GDPR) – where processing is based on your consent, you may withdraw your consent at any time with effect for the future.

9. Right to Lodge a Complaint

You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The competent supervisory authority for our registered office is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach
Germany

10. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time to reflect changes in our processing or in legal requirements. The current version is always available on this Website. We will inform you separately of any material changes where this is required by law.