Privacy policy
Privacy Policy
Status: 18.02.2026
1. Controller
The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:
Global Ecom Trading GmbH
Gildestr. 16
48317 Drensteinfurt
Germany
Represented by the Managing Director:
Senem Abid Ali
E-mail: contact@estrell.de
2. Hosting (IONOS)
Our website is hosted by the following provider:
IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany
When you visit our website, data is automatically collected by the hosting provider and stored in server log files. This includes in particular:
- IP address
- Date and time of the request
- Browser type and browser version
- Operating system used
- Referrer URL
- Pages accessed
Processing takes place for the technical provision of the website and to ensure system security.
Legal basis: Art. 6 para. 1 lit. f GDPR.
3. Shop System (Shopify)
We use the shop software from Shopify to operate our online store.
Provider:
Shopify International Ltd.
Victoria Buildings
1–2 Haddington Road
Dublin 4
Ireland
Shopify provides the technical platform for the online shop, the shopping cart and the order process.
Personal data may be processed as part of the use of the platform.
Further information about data protection at Shopify can be found at: https://www.shopify.com/legal/privacy
4. Data Processing for Contract Fulfillment
When you place an order in our shop, we process the following data:
- Name
- Billing address
- Shipping address
- E-mail address
- Payment information
- Order information
Processing takes place for order processing, delivery, payment processing and customer communication.
Legal basis: Art. 6 para. 1 lit. b GDPR.
In addition, we store data in accordance with statutory retention obligations pursuant to Art. 6 para. 1 lit. c GDPR.
5. Payment Providers
Depending on the selected payment method, payment data may be transmitted to the corresponding payment service providers.
Legal basis: Art. 6 para. 1 lit. b GDPR.
Shopify Payments
Payment processing may take place via Shopify Payments.
PayPal
PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.
Klarna
Klarna Bank AB (publ), Sweden.
When using these payment methods, the privacy policies of the respective payment providers also apply.
6. Shipping Service Providers
In order to deliver your order, we transmit the necessary data to shipping service providers.
This includes in particular:
- Name
- Shipping address
- If necessary, e-mail address or phone number for delivery information
Depending on the shipping method, delivery may be carried out by the following providers:
- DHL
- DPD
- Hermes
- UPS
- GLS
Legal basis: Art. 6 para. 1 lit. b GDPR.
7. Contact
If you contact us (e.g. via e-mail, contact form or WhatsApp), we process the data you provide in order to handle your request.
This may include in particular the following data:
- Name
- E-mail address
- Phone number
- Message content
Legal basis: Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR.
8. Newsletter
If you subscribe to our newsletter, we use your e-mail address to regularly send you information about our products and offers.
Legal basis: Art. 6 para. 1 lit. a GDPR.
You can unsubscribe at any time via the unsubscribe link in the newsletter or by contacting us via e-mail.
Klaviyo
Newsletter distribution may be carried out via Klaviyo Inc., Boston, USA.
Shopify Email
Alternatively, distribution may take place via Shopify Email.
9. Cookies and Consent Management
Our website uses cookies and similar technologies.
Technically necessary cookies are required for:
- Shopping cart function
- Checkout
- Security features
Analytics and marketing cookies are only set with your consent.
We use a consent management tool (e.g. Usercentrics) to manage user consent.
10. Web Analytics (Google Analytics)
We use Google Analytics to analyze the use of our website.
Provider: Google Ireland Ltd., Dublin, Ireland.
This service is only used with your consent.
Legal basis: Art. 6 para. 1 lit. a GDPR.
11. Marketing Tracking
Meta Pixel
We use the Meta Pixel from Meta Platforms Ireland Ltd., Dublin.
TikTok Pixel
We use the TikTok Pixel from TikTok Technology Limited, Dublin.
These technologies are used to analyze user behavior and optimize our advertising.
They are only used with your consent.
Legal basis: Art. 6 para. 1 lit. a GDPR.
12. Social Media Presence
We operate profiles on the following social networks:
- YouTube
- TikTok
When you visit these platforms, the privacy policies of the respective providers apply.
13. Storage Period
We store personal data only for as long as necessary for the respective purposes or as long as statutory retention obligations apply.
14. Rights of Data Subjects
You have the following rights:
- Access to your stored data (Art. 15 GDPR)
- Correction of incorrect data (Art. 16 GDPR)
- Deletion of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of granted consent (Art. 7 para. 3 GDPR)
15. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.