Privacy Policy


Introduction
We are pleased about your visit to our website and your interest in our offerings. The protection of your personal data is of great importance to us. Below, we inform you in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR) about the processing of your data and your rights.


1. Responsible for Data Processing

The responsible entity under the GDPR is:

Kappstein GmbH & Co. KG
Südstraße 15, Building 14
99867 Gotha
Germany
Phone: +49 3621 739544-0
Email: info@kappstein.de


2. Collection and Processing of Personal Data

We process personal data that you provide to us when using our webshop, such as:
  • Name, address, email address, phone number (for orders)
  • Payment details (for purchase processing)
  • IP address, device information, browser data (when using the website)
Purposes of Processing:
  • Processing of orders and deliveries
  • Communication with you (e.g., order confirmations, customer service)
  • Improvement of our offerings and website
  • Fulfillment of legal obligations (e.g., tax retention requirements)
Legal Basis:
  • Art. 6(1)(b) GDPR (performance of a contract, e.g., order processing)
  • Art. 6(1)(c) GDPR (legal obligations)
  • Art. 6(1)(f) GDPR (legitimate interests, e.g., website optimization)
  • Art. 6(1)(a) GDPR (consent, e.g., for cookies or newsletters)
3. Use of Shopify



Our webshop is operated via Shopify Inc., 150 Elgin Street, 8th Floor, Ottawa, Ontario K2P 1L4, Canada. Shopify processes data on our behalf to provide and manage the shop (e.g., hosting, payment processing). This data transfer is based on a data processing agreement pursuant to Art. 28 GDPR and is safeguarded by appropriate measures (e.g., standard contractual clauses) for transfers to Canada. For more information on Shopify’s data protection, see: Shopify Privacy Policy.


4. Use of Third-Party Services


4.1 Use of Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies to enable analysis of your use of our website. The information generated by the cookie (e.g., IP address, time of visit, pages viewed) is transmitted to a Google server in the USA and stored there.

Data Protection Measures for Google Analytics:
  • We have activated IP anonymization (“anonymizeIp”), meaning your IP address is shortened within the EU or EEA before transmission.
  • Processing is based on your consent pursuant to Art. 6(1)(a) GDPR, which you can provide via our cookie banner.
  • We have concluded a data processing agreement with Google pursuant to Art. 28 GDPR.
Purpose:
  • Analysis of user behavior to optimize our website and offerings.
Objection Options:
You can prevent cookie storage by adjusting your browser settings or revoke your consent in the cookie banner. Additionally, you can prevent data collection by Google Analytics by installing the browser add-on to deactivate Google Analytics: Google Analytics Opt-Out. For more information, see Google’s Privacy Policy.

4.2 Use of CleverReach for Newsletters

We use CleverReach, a service provided by CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany, to send our newsletters. When you subscribe to our newsletter, the data you provide (e.g., email address, optionally your name) is transmitted to CleverReach and stored there.

Purpose of Processing:
  • Sending newsletters with information about our products, offers, and news.
Legal Basis:
  • Art. 6(1)(a) GDPR (your consent, provided upon newsletter subscription).
Data Protection Measures:
  • Processing is carried out under a data processing agreement (DPA) pursuant to Art. 28 GDPR with CleverReach.
  • CleverReach uses your data solely for the technical delivery of the newsletter and does not share it with third parties.
Storage Duration:
  • Your data will be deleted once you unsubscribe from the newsletter, unless legal retention obligations apply.
Unsubscription:
You can unsubscribe from the newsletter at any time via the unsubscribe link in each newsletter or by contacting us at info@kappstein.de. After unsubscribing, your email address will be deleted or blocked from further mailings by CleverReach. For more information, see CleverReach’s Privacy Policy.


5. Cookies

We use cookies to ensure the functionality of our website and enhance your user experience. Some cookies are technically necessary (e.g., for the shopping cart), while others serve analytical or marketing purposes (e.g., Google Analytics). You can adjust your cookie preferences at any time via our cookie banner.

Legal Basis:
  • Art. 6(1)(f) GDPR (legitimate interest) for technically necessary cookies
  • Art. 6(1)(a) GDPR (consent) for analytical and marketing cookies
6. Data Sharing

Your data will only be shared as necessary, e.g., with:
  • Shipping providers (e.g., DHL, UPS) for order delivery
  • Payment service providers (e.g., PayPal, Stripe) for payment processing
  • IT service providers (e.g., Shopify) for technical shop operations
Data transfers to third countries (outside the EU) occur only if safeguarded by appropriate measures (e.g., standard contractual clauses), as outlined for Shopify and Google Analytics.


7. Storage Duration

We store your data only as long as necessary for the respective purposes or as required by legal retention periods (e.g., 10 years under the German Commercial Code (HGB) or Tax Code (AO)). Afterward, the data is deleted or anonymized.


8. Your Rights

Under the GDPR, you have the following rights:
  • Access (Art. 15 GDPR): Information about the processing of your data
  • Rectification (Art. 16 GDPR): Correction of inaccurate data
  • Erasure (Art. 17 GDPR): “Right to be forgotten”
  • Restriction of Processing (Art. 18 GDPR)
  • Data Portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR): e.g., to processing based on legitimate interests
Contact us at info@kappstein.de to exercise these rights. You also have the right to lodge a complaint with a supervisory authority, such as the Thuringian State Commissioner for Data Protection and Freedom of Information, Häßlerstraße 8, 99096 Erfurt, Germany.


9. Obligation to Provide Data

Providing your data is necessary for concluding a contract (e.g., placing an order). Without this data, we cannot process your order.


10. Changes to this Privacy Policy

We reserve the right to update this privacy policy as needed. The current version is always available on our website.

Date: January 2026

Kappstein | E-Mobility & Premium Bike Components