Privacy Policy
The following overview documents how Novabelvarispx GmbH ("Novabelvarispx") processes personal data when using novabelvarispx.shop and during the ordering process, the purposes for which this takes place, how long data is stored, and what rights you have. Processing is carried out in compliance with the General Data Protection Regulation (GDPR).
1. About this privacy policy
The scope covers the website novabelvarispx.shop, all orders placed there, and incoming messages. It expressly excludes third-party services linked from the site; the respective operator's policies apply there.
2. Data controller and contact details
Data processing is the responsibility of Novabelvarispx GmbH, Werner-von-Siemens-Straße 6, 86159 Augsburg, Deutschland. Please direct privacy inquiries to [email protected] or by phone to +49 821 23845152.
- Merchant
- Novabelvarispx GmbH
- Registered address
- Werner-von-Siemens-Straße 6, 86159 Augsburg, Deutschland
- [email protected]
- Phone
- +49 821 23845152
3. Categories of processed data
Only data necessary for the defined technical or organizational purpose is collected.
3.1 Information you provide directly
Name, recipient address, email address, and phone number during checkout, as well as text in queries or feedback. Data remains archived for the duration of order processing and statutory periods; written inquiries are kept for up to 3 years after the last exchange.
3.2 Payment and transaction data
Order reference number, item list, totals, selected payment method, and shipping status. Payment card or online banking details are not requested in the web shop. Records are retained in accordance with mandatory legal retention periods.
3.3 Automatically collected information
IP address, system and browser information, accessed URLs, referring address, and access times, logged by servers and designated cookies. The storage period is 30 days in server logs and up to 14 months in aggregated usage statistics.
3.4 Marketing and advertising data
Information about the campaign, advertisement, or external link prior to the page view, used specifically for attribution of the purchase. These entries remain in the system for a maximum of 90 days.
3.5 Data transmission by contractual partners
Shipping updates from the delivery carrier and payment receipts from payment processors, each related to the specific order.
3.6 Children
Our product line and website are not intended for individuals under 18 years of age. We do not knowingly process data from children. Legal guardians may request the deletion of such records at [email protected].
4. Mandatory information
First and last name, delivery destination, email address, and phone number are required to deliver goods and resolve queries. Entering into a contract is not possible without these mandatory fields. Other details are provided on a voluntary basis.
5. Purposes of data processing
- For the logistical and commercial handling of the purchase, delivery of equipment, and processing of returns and credits.
- For handling technical or administrative inquiries, as well as shipping and status updates via email or text message.
- To secure the technical infrastructure, detect anomalies, and analyze usage patterns.
- For promotional communications only upon prior confirmation; every newsletter includes an unsubscribe link.
- To comply with legal obligations, such as commercial and tax retention requirements.
6. Transfer to data processors
There is no trade in personal data records. Data is transferred exclusively to contracted partners who are strictly bound by contract to our instructions.
6.1 Payment processing
The service provider for the chosen payment method receives only the records necessary for posting and allocating the transaction.
6.2 Shipping and fulfilment partners
The logistics company receives your name, delivery address, and phone number in order to deliver the shipment and send delivery notifications.
6.3 Service providers
Server providers, mail server operators, and request management systems process records on our instructions and on our behalf.
6.4 Advertising and analytics partners
Analytics or marketing elements are loaded only after consent and forward access data to the respective providers in accordance with the policy.
6.5 Legal and regulatory disclosures
Disclosure occurs if required by official authorities or to assert legal claims in the event of disputed order transactions.
6.6 Business transfers
In the event of a company acquisition or merger, customer records are transferred to the legal successor under identical security standards.
7. International data transfers
If partners process data outside of Germany, we legally safeguard the level of data protection through adequacy decisions or standard contractual clauses.
8. Your rights and choices
Based on the General Data Protection Regulation (GDPR), you have the following rights: data subject rights under Articles 15-22 GDPR.
8.1 Right of access, rectification, erasure, and portability
You are free to request information about the stored data, have errors corrected or records deleted, request a structured copy, limit or object to processing, and withdraw consent. Previous processing operations remain legally unaffected.
8.2 Marketing choices
Every newsletter or informative email contains an unsubscribe option. Analytics and advertising trackers can be disabled at any time via the cookie settings window.
8.3 Exercising your rights
Please direct your request to [email protected]. Following identity verification, we will process your request within 30 days. You also have the right to lodge a complaint with the supervisory authority in Germany.
9. Data security
Data transfer is encrypted via HTTPS. Transaction data is stored on secure servers and is accessible only to authorized personnel for the designated tasks. Card data is neither collected nor stored on our websites.
10. Data retention
Order and accounting records are kept in accordance with statutory retention periods and destroyed thereafter. Customer service correspondence is archived for up to 3 years after the last communication. Server logs remain stored for 30 days and aggregated analytics data for up to 14 months. Marketing consents remain valid until a withdrawal is received.
11. Third-party websites and services
Redirects to third-party services, networks, or payment partners are subject to the privacy policies of the respective operators. We assume no liability for their data protection practices.
12. Changes to this policy
Adjustments to this document are made in the event of changed operating processes or new legal requirements. The document version viewable here with the indicated date is the valid version.
Novabelvarispx