Privacy policy

Privacy Policy

We are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you visit our website, place an order, or contact us.

“Personal data” means any information relating to an identified or identifiable individual.
Unless stated otherwise, providing your personal data is not legally or contractually required.

1. Controller

Justin Martens
Spirit Racing Factory
Holzhauser Straße 25
32257 Bünde
Germany

Phone: +49 151 20797332
Email: spiritracingfactory@gmail.com

2. Server Log Files

When you visit our website, certain data is automatically collected and stored in server log files. This includes:

  • IP address

  • Date and time of access

  • Pages viewed

  • Referring website

  • Browser type and version

  • Operating system

This processing is based on Art. 6(1)(f) GDPR due to our legitimate interest in ensuring website functionality, stability, and security.

3. Contacting Us

Contact by Email

If you contact us by email, we process the data you provide (e.g. name, email address, message content) in order to respond to your inquiry.

Legal bases:

  • Art. 6(1)(b) GDPR (pre-contractual or contractual reasons), or

  • Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

Contact Form

When using our contact form, we collect personal data only to the extent you provide it.
Data is used exclusively to process your request.

4. Customer Accounts & Orders

Customer Account

If you create an account, we process the personal data you provide in order to improve your shopping experience and simplify future orders.

Legal basis: Art. 6(1)(a) GDPR (your consent).
You may withdraw your consent at any time.

Orders

When you place an order, we collect and process only the personal data necessary to fulfil your order, including:

  • Name

  • Address

  • Email address

  • Payment information

  • Ordered products

Legal basis: Art. 6(1)(b) GDPR
(Data processing necessary to perform a contract.)

We may share your information with:

  • Shipping providers

  • Dropshipping or fulfillment partners

  • Payment services

  • IT and hosting providers

  • Customer support tools

Data is shared only when necessary.

5. Payment Service Providers

When you choose a payment method, the relevant payment provider processes your data. These providers act under their own privacy policies.

PayPal

If you pay with PayPal, your data is processed by:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
Privacy policy: https://www.paypal.com/webapps/mpp/ua/privacy-full

PayPal Checkout

Depending on the chosen PayPal payment method, your data may be processed by PayPal or by third-party payment providers integrated into PayPal Checkout (e.g. credit card processors, SEPA providers, Sofort, Giropay).

6. Klarna Payment Options

If you select a Klarna payment method, your personal data will be transmitted to:

Klarna Bank AB (publ)
Sveavägen 46
11134 Stockholm, Sweden

Klarna may perform identity and credit checks.
Klarna’s Privacy Policy:
https://www.klarna.com/international/privacy-policy/

7. Cookies & Consent Management

Our website uses cookies and similar technologies to enable basic functions, improve performance, and analyze usage.

You can manage cookies in your browser settings and delete stored cookies at any time.

We use the Shopify Consent Tool, which helps us store and manage your cookie preferences in compliance with GDPR and the German TDDDG.

8. Shopify

Our store is hosted by Shopify Inc. Shopify provides the e-commerce platform that allows us to sell products to you.

Your data may be stored on Shopify’s servers in Canada or the United States.

Data Transfers

  • Canada: Covered by an EU adequacy decision

  • USA: Shopify is not certified under the TADPF; transfers rely on contractual protections similar to Standard Contractual Clauses

Shopify Privacy Policy:
https://www.shopify.com/legal/privacy

9. Analytics

We use Shopify’s built-in analytics tools to understand website traffic and improve our store.

Information processed may include:

  • Device type

  • Region

  • Pages visited

  • Session duration

  • Referring URLs

This processing is based on Art. 6(1)(f) GDPR (legitimate interest in analyzing and improving our shop).

10. Embedded Content & External Services

YouTube

We use YouTube videos on our website.
YouTube Privacy Policy: https://policies.google.com/privacy

Google Fonts / Adobe Fonts

Fonts may be loaded from external servers to display our site properly.

Google Translate

If you use the Google Translate tool on our page, this is done at your own discretion.
Google may process personal data.
Google Privacy Policy: https://policies.google.com/privacy

11. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right of access to your stored data

  • Right to rectification (correct inaccurate data)

  • Right to erasure (delete your data)

  • Right to restriction of processing

  • Right to data portability

  • Right to object to processing based on Art. 6(1)(f) GDPR

  • Right to withdraw consent at any time

You also have the right to lodge a complaint with a supervisory authority.

12. Storage Duration

We store personal data only for as long as necessary:

  • to fulfil contractual obligations

  • to comply with legal retention periods

  • or until you request deletion (where allowed by law)

After the purpose expires, data is deleted according to legal requirements.

Last Updated: 29 November 2023