Privacy policy
PRIVACY POLICY
Celestial Vision Clothing – Last updated: February 24, 2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Celestial Vision Clothing
Leon Arndt
Konrad-Adenauer-Straße 18, 31177 Harsum, Germany
Email: support@celestialvision.de
2. General Information
Celestial Vision Clothing operates this shop and website, including all associated information, content, features, tools, products, and services, in order to provide you as a customer with a personalized shopping experience (the "Services"). The website is built on the Shopify platform.
In this Privacy Policy, we explain what personal data we collect, the legal basis on which we do so, the purposes for which we process this data, and what rights you have as a data subject.
Please read this policy carefully. By using our Services, you confirm that you have read this Privacy Policy and agree to the data processing described herein.
3. What Personal Data Do We Collect?
Depending on how you use our Services, we collect the following categories of personal data:
Contact data: Name, postal address, billing and shipping address, phone number, email address
Financial data: Payment card information, financial account data, transaction details and payment confirmations
Account information: Username, password, security questions, as well as configurations and settings
Transaction data: Items viewed, added to cart, wishlisted, purchased, returned, or cancelled, as well as past transactions
Communication data: Content of your inquiries to our customer support
Device data: Device type, browser, IP address, network connection, and other unique identifiers
Usage data: Information about how, when, and how long you use or browse our Services
4. Sources of Personal Data
We collect personal data from the following sources:
Directly from you, e.g. when creating an account, placing orders, or contacting us
Automatically through our Services, e.g. via cookies, pixel technologies, and similar tracking methods (see Section 9)
From our service providers who carry out certain technical services on our behalf
From our business and marketing partners and other third parties
5. Purposes of Processing and Legal Bases
5.1 Contract Performance and Provision of Services
We process your personal data to fulfill our purchase contract with you: payment processing, order fulfillment, shipping management, handling of returns and exchanges, account management, and provision of a personalized shopping experience.
Legal basis: Art. 6(1)(b) GDPR (contract performance)
5.2 Marketing and Advertising
With your consent, we send you promotional emails, SMS, or postal advertising, and show you personalized online advertising — including based on items you have previously viewed or added to your cart.
Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (legitimate interest in direct marketing to existing customers, Section 7(3) UWG)
5.3 Security and Fraud Prevention
We process your data to authenticate your account, ensure a secure payment and shopping experience, and detect and prevent fraudulent, illegal, or harmful activities.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security of our Services and the protection of our customers)
5.4 Communication with You
We process your data to respond to your inquiries, provide customer support, and maintain our business relationship with you.
Legal basis: Art. 6(1)(b) GDPR (contract performance) or Art. 6(1)(f) GDPR (legitimate interest)
5.5 Legal Obligations
We process your data where required to fulfill legal obligations, e.g. in response to requests from authorities or law enforcement agencies, and to enforce our terms of use.
Legal basis: Art. 6(1)(c) GDPR (legal obligation) or Art. 6(1)(f) GDPR (legitimate interest)
6. Sharing of Personal Data
We share your personal data with third parties only in the following cases:
With Shopify as hosting provider and technical service provider (IT management, payment processing, data analysis, cloud storage, fulfillment, and shipping)
With business and marketing partners who carry out advertising measures on our behalf (e.g. Meta, Google, TikTok) — only to the extent you have given your consent
With third parties where you have expressly requested or consented to this
With affiliated companies within our corporate group
In the context of a corporate transaction (e.g. merger, acquisition, or insolvency)
To fulfill legal obligations or upon official instruction
7. Relationship with Shopify
Our Services are hosted by Shopify. Shopify processes personal data that you transmit when accessing our Services in order to provide and improve the Services. Data may also be transferred to countries outside your country of residence.
Shopify may use personal data from your interactions with our shop, other merchants, and Shopify to provide enhanced features. In this case, Shopify acts as an independent data controller.
For more information, please see Shopify's Consumer Privacy Policy: https://www.shopify.com/legal/privacy
8. Cookies and Similar Technologies
We use cookies and similar tracking technologies to provide, improve, and personalize our Services. Cookies are small text files stored on your device.
8.1 Technically Necessary Cookies
These cookies are strictly required for the operation of the website (e.g. shopping cart functionality, login, security). They cannot be disabled.
Legal basis: Art. 6(1)(b) GDPR (contract performance) or Section 25(2) TDDDG
8.2 Analytics and Marketing Cookies
For analytics and marketing purposes, we use additional cookies that are only activated with your explicit consent. Details on the individual tools used can be found in Section 9.
Legal basis: Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG (consent)
You can adjust or withdraw your cookie settings at any time via the cookie banner on our website. Please note that the cookie mechanism provided by Shopify serves as the technical basis for your consent.
9. Tracking and Marketing Tools Used
9.1 Meta Pixel (Facebook Pixel)
We use the Meta Pixel provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta") on our website.
The Meta Pixel is a JavaScript code snippet that allows us to track the behavior of visitors on our website after they have clicked on a Facebook ad. This enables us to measure the effectiveness of our Facebook advertising and to serve targeted ads ("Custom Audiences" and "Lookalike Audiences").
Data such as IP address, browser information, page views, and conversion events (e.g. purchases) are transmitted to Meta and processed in the USA. Meta may link this data to your Facebook account.
Legal basis: Art. 6(1)(a) GDPR (your consent via the cookie banner)
Data transfer to third countries: USA – based on EU Standard Contractual Clauses pursuant to Art. 46 GDPR
Opt-out: You can withdraw your consent at any time via our cookie banner. You can also disable personalized ads in your Facebook settings: https://www.facebook.com/settings?tab=ads
Meta Privacy Policy: https://www.facebook.com/privacy/policy/
9.2 Google Analytics
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Google Analytics uses cookies to help us analyze how users use our website. The information generated about your use of this website (including your IP address) is transmitted to and stored on a Google server. We use the IP anonymization feature ("IP masking"), so your IP address is truncated within the EU/EEA beforehand.
Legal basis: Art. 6(1)(a) GDPR (your consent via the cookie banner)
Data transfer to third countries: USA – based on EU Standard Contractual Clauses pursuant to Art. 46 GDPR
Opt-out: You can withdraw your consent at any time via our cookie banner. Alternatively, you can download the browser add-on to disable Google Analytics at: https://tools.google.com/dlpage/gaoptout
Google Privacy Policy: https://policies.google.com/privacy
9.3 Google Ads & Google Conversion Tracking
We use Google Ads (formerly Google AdWords) and the associated conversion tracking provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When you click on one of our Google ads, a cookie for conversion tracking is placed on your device. These cookies expire after 30 days and are not used for personal identification. These cookies allow us and Google to recognize that you visited our website after clicking on an ad and performed a specific action (e.g. a purchase). We also use Google Ads Remarketing to reach visitors of our website with personalized ads.
Legal basis: Art. 6(1)(a) GDPR (your consent via the cookie banner)
Data transfer to third countries: USA – based on EU Standard Contractual Clauses pursuant to Art. 46 GDPR
Opt-out: You can withdraw your consent at any time via our cookie banner. You can also disable personalized ads via the Google ad settings: https://adssettings.google.com
Google Privacy Policy: https://policies.google.com/privacy
9.4 TikTok Pixel
We use the TikTok Pixel provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, Ireland ("TikTok") on our website.
The TikTok Pixel allows us to analyze the behavior of website visitors who arrived via TikTok ads and to measure the effectiveness of our TikTok advertising campaigns. Data such as IP address, browser information, page views, and conversion events are transmitted to TikTok. TikTok may link this data to your TikTok account.
Legal basis: Art. 6(1)(a) GDPR (your consent via the cookie banner)
Data transfer to third countries: USA and other third countries – based on EU Standard Contractual Clauses pursuant to Art. 46 GDPR
Opt-out: You can withdraw your consent at any time via our cookie banner. You can also disable personalized ads in your TikTok account settings.
TikTok Privacy Policy: https://www.tiktok.com/legal/page/eea/privacy-policy/de
10. Links to Third-Party Websites
Our Services may contain links to websites or online platforms operated by third parties. If you follow these links, you should review the respective privacy policies and terms of use of those websites. We accept no responsibility for their data protection practices or security.
11. Children's Data
Our Services are intended exclusively for persons who are at least 16 years of age. We do not knowingly collect personal data from children under the age of 16. If you are a parent or guardian and become aware that your child has provided us with personal data, please contact us using the contact details below. We will delete the relevant data without undue delay.
12. Security and Retention of Your Data
We implement technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. Please note, however, that no security measures are completely impenetrable and we therefore cannot guarantee absolute security.
The retention period for your personal data depends on the purpose of processing, statutory retention obligations (e.g. 10 years for tax-relevant documents under Section 147 of the German Fiscal Code), and whether the data is needed to assert or defend legal claims.
13. International Data Transfers
Some of our service providers and partners (in particular Shopify, Meta, Google, and TikTok) process your data in countries outside the European Economic Area (EEA), in particular in the USA. We ensure that appropriate safeguards are in place for these transfers, in particular by concluding EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR or by using other transfer mechanisms recognized by the European Commission.
14. Your Rights as a Data Subject
As a data subject, you have the following rights under the GDPR:
Right of access (Art. 15 GDPR): You have the right to request information about the personal data we store about you.
Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate or incomplete data.
Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data, provided no statutory retention obligations apply.
Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your personal data.
Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, machine-readable format or to request its transfer to another controller.
Right to object (Art. 21 GDPR): You have the right to object at any time to the processing of your personal data on the basis of legitimate interests (Art. 6(1)(f) GDPR), in particular against direct marketing.
Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on your consent, you may withdraw it at any time with effect for the future, without affecting the lawfulness of processing carried out prior to the withdrawal.
You may exercise these rights by contacting us using the contact details below. We will process your request within the statutory time limits. We are entitled to verify your identity before processing your request.
15. Unsubscribing from Marketing Emails
We may send you promotional emails where you have given your consent or where permitted under Section 7(3) UWG. You may object to receiving promotional emails at any time by clicking the unsubscribe link in our emails or by contacting us directly. We may continue to send you non-promotional emails, e.g. relating to your account or your orders.
16. Complaints
If you have complaints about our processing of your personal data, you may contact us directly in the first instance. You also have the right to lodge a complaint with the competent data protection supervisory authority.
The competent supervisory authority for our company in Germany is:
Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover
https://www.lfd.niedersachsen.de
A list of all European data protection supervisory authorities can be found at: https://edpb.europa.eu/about-edpb/about-edpb/members_de
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal developments, or regulatory requirements. The current version is published on our website with the date of the last update. We will notify you of any material changes in an appropriate manner.
18. Contact
If you have questions about this Privacy Policy or the processing of your personal data, or if you wish to exercise any of your rights, please contact us at:
Celestial Vision Clothing
Konrad-Adenauer-Straße 18, 31177 Harsum, Germany
Email: support@celestialvision.de
Phone: 017683244010
