Data protection

We appreciate your interest in Glacier & Aurealis. Protecting your personal data is important to us. Below, in accordance with Article 13 of the GDPR, we inform you about the processing of your data when you visit our website, place orders, and use our services.

1. Responsible body

Lena Katharina Axtmann

trading under the brand name Glacier & Aurealis

Landhausstr. 11

75399 Unterreichenbach

Germany

Email: support@glacieraurealis.com

2. Collection and processing of personal data

We process personal data when:

  • Visit our website
  • You place an order
  • You create a customer account
  • Subscribe to our newsletter
  • You communicate with us
  • You accept cookies

Processed data includes, among other things:

  • Name, billing and shipping address, email address, phone number (if provided)
  • Payment and order data (payment data is processed encrypted via third-party providers)
  • IP address, order history, browser data, device information
  • Marketing preferences
  • Shipping information
  • Usage behavior on our website

3. Legal basis for processing

We process personal data exclusively on the basis of the GDPR:

  • Article 6 paragraph 1 letter b GDPR – Contract performance (orders, shipping, payments)
  • Article 6(1)(c) GDPR – Legal obligations (retention periods)
  • Article 6 paragraph 1 letter a GDPR – Consent (cookies, newsletter, tracking)
  • Article 6 paragraph 1 letter f GDPR – Legitimate interest (IT security, fraud prevention)

4. Purpose of data processing

We use your data for the following purposes:

Order processing & shipping: Processing of your data for the execution of purchase contracts (Art. 6 para. 1 lit. b GDPR)

Customer service & communication: Processing your inquiries (Art. 6 para. 1 lit. f GDPR)

Marketing & Advertising: (if you have consented) e.g. sending newsletters (Art. 6 para. 1 lit. a GDPR)

Security & fraud prevention: Protection against misuse (Art. 6 para. 1 lit. f GDPR)

5. Orders & Payment Processing

For order processing, we share data with the following categories of recipients:

Shipping provider:

  • DHL Parcel
  • DHL Warenpost
  • possibly UPS / FedEx / DPD

Payment service provider:

  • Shopify Payments
  • PayPal
  • Apple Pay
  • Google Pay
  • Klarna

Purpose: Payment processing, fraud prevention, shipping.

Data may be transferred to third countries (e.g., the USA) if payment providers operate servers there.

This is done exclusively on the basis of Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR.

6. Payment service providers & payment processing

We offer various payment options, including:

Credit & Debit Cards: Visa, Mastercard, American Express, Maestro

Digital wallets: Apple Pay, Google Pay, Shop Pay

Online payment systems: PayPal

Payments are processed directly by the payment service providers via encrypted systems. We do not store complete payment data.

Data privacy statements of the payment providers:

Shopify Payments: https://www.shopify.com/legal/privacy

PayPal: https://www.paypal.com/de/legalhub/paypal/privacy-full

7. Disclosure of data to third parties

Data will only be shared if:

  • when legally required
  • necessary for contract processing
  • if you have consented
  • when service providers (data processors) are involved

All service providers are bound by contracts in accordance with Article 28 GDPR.

8th Newsletter

When you subscribe to our newsletter, we process:

  • E-mail address
  • Timestamp
  • IP address

Legal basis: Consent (Art. 6 para. 1 lit. a GDPR).

You can unsubscribe at any time.

9. Cookies & Tracking Technologies

Our website uses cookies to enable the following purposes:

  • Essential functions
  • Analytics (e.g. Shopify Analytics)
  • Marketing (only if you actively consent)

Cookie consent (opt-in)

Non-essential cookies are only set on our website after you have actively consented .

Tools used:

  • Shopify Analytics – Analysis of shop usage
  • Meta Pixel (only with consent) – Conversion Tracking
  • Google Analytics 4 (only with consent)

Legal basis: Art. 6 para. 1 lit. a GDPR

You can revoke your cookie settings at any time.

Which cookies do we use?

  • Essential cookies (e.g. for the shopping cart, login)
  • Analytics cookies (Google Analytics, Meta Pixel & Conversions API – if enabled)
  • Marketing cookies (only with your consent)
  • Meta Pixel and Conversions API

Meta Pixel and Conversions API

We use the Meta Pixel and the Conversions API of the social network Facebook (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland) on our website. This involves processing information about user behavior on our website (e.g., viewed products, purchases, interactions) to display personalized advertising to visitors on Facebook and Instagram and to analyze the effectiveness of our advertising campaigns. Data is transferred based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. We also use advanced matching, in which, for example, email addresses or telephone numbers – if available – are transmitted to Meta in pseudonymized form. You can withdraw your consent at any time via our cookie settings.

For more information, see Meta's data policy .

10. Server Logs & IT Security

When you visit our website, data is automatically processed:

  • IP address (truncated)
  • browser type
  • Date/Time
  • Referrer

Legal basis: legitimate interest (Art. 6 para. 1 lit. f GDPR)

Purpose: IT security, fraud prevention.

11. Retention periods

We only store your data for as long as is necessary for the respective processing:

  • Order details: 10 years
    (§147 AO)
  • Communication data: 12 months
  • Customer accounts: Until deleted by you
  • Newsletter data: Until revoked
  • Server logs: max. 14 days

12. Your rights under the General Data Protection Regulation (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR) - You can request confirmation as to whether and which personal data we store.

Rectification (Art. 16 GDPR) - You have the right to have inaccurate or incomplete data corrected.

Erasure (Art. 17 GDPR) - Under certain conditions, you can request the erasure of your data, provided that no legal retention obligations prevent this.

Data portability (Art. 20 GDPR) - You have the right to receive your data in a commonly used, machine-readable format or to have it transferred to another provider.

Right to object to processing (Art. 21 GDPR) - You can object to the processing of your data, in particular if it is used for direct marketing.


To withdraw consent (Art. 7 para. 3 GDPR)

Please direct inquiries regarding your rights to support@glacieraurealis.com via email.

13. International Data Transfer

Data processing by third-party providers (e.g., Meta / Google / Shopify) may involve transfer to the USA.

This is done exclusively on the basis of:

  • EU Standard Contractual Clauses (SCCs)
  • or Article 49(1)(a) GDPR with explicit consent

14. Automated decision-making

We do not use automated decision-making or profiling that has legal effect.

15. Online Dispute Resolution

The EU Commission provides a platform for online dispute resolution:

https://ec.europa.eu/consumers/odr

We are not obliged to participate in dispute resolution proceedings.

16. Amendment of the privacy policy

We reserve the right to amend this privacy policy if there are legal or operational changes.

Last updated: March 4, 2025