Privacy policy
Privacy Policy
Last updated: 14 May 2026
Thank you for your interest in our online shop. Protecting your personal data is important to us. Below, we explain which personal data we process when you use our online shop, for what purposes, on what legal basis and what rights you have.
1. Data Controller
Melina Gardeja
trading as MeGa HWG
Deepenstegen 21
22952 Lütjensee
Germany
Phone: +49 162 7439 461
Email: info@waidewelt.com
Waidewelt is an online shop operated by MeGa HWG.
2. General Information on the Processing of Personal Data
Personal data means any information relating to an identified or identifiable natural person. We process personal data exclusively in accordance with applicable data protection laws, particularly the General Data Protection Regulation (GDPR).
3. What Data We Process
We process the following categories of personal data in particular, where applicable:
-
Personal and address details (e.g. name, billing and shipping address)
-
Contact details (e.g. email address, telephone number)
-
Order and transaction data (e.g. products ordered, payment method, order history, returns)
-
Payment data (e.g. payment status, payment information processed through payment service providers)
-
Communication data (e.g. contents of emails or contact enquiries)
-
Usage and technical data (e.g. IP address, browser type, device data, access time, interactions with the website)
4. Sources of Data
We obtain personal data:
-
Directly from you when you provide it to us, for example when placing an order, contacting us or returning goods
-
Automatically when you use our website, for example through technically necessary cookies and server log files
-
Through service providers we use, such as Shopify, payment service providers, shipping providers or IT service providers
5. Purposes and Legal Bases of Processing
a) Website Provision and Technical Security
We process technical usage data to display our website correctly, ensure its stability and security, and prevent misuse.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in providing a secure and functional online service).
b) Processing Orders and Fulfilling Contracts
We process your data to receive and fulfil orders, process payments, organise shipping, handle returns and complaints, and contact you regarding your order.
Legal basis: Article 6(1)(b) GDPR (performance of a contract and implementation of pre-contractual measures).
c) Customer Enquiries and Communication
When you contact us, we process the information you provide to handle your enquiry and communicate with you.
Legal basis: Article 6(1)(b) GDPR where your enquiry relates to a contract or order; otherwise Article 6(1)(f) GDPR (legitimate interest in responding to enquiries).
d) Compliance with Legal Obligations
We process personal data where necessary to comply with commercial, tax-related or other statutory retention and documentation obligations.
Legal basis: Article 6(1)(c) GDPR.
e) Fraud Prevention, IT Security and Enforcement of Legal Rights
We process data where necessary to detect, prevent or investigate misuse, fraud, security incidents or other unlawful activities and to enforce our legal rights.
Legal basis: Article 6(1)(f) GDPR.
f) Advertising and Marketing
Where you have given your consent or where permitted by law, we process your data to inform you about products, offers or promotions, improve our services and display content tailored to your interests.
Legal basis: Article 6(1)(a) GDPR (consent), where required, and Article 6(1)(f) GDPR (legitimate interest in marketing communications and the commercial optimisation of our services), where legally permitted.
g) Email Marketing / Newsletter
If you subscribe to our newsletter or email notifications about offers, products or news, we process your email address and, where provided, your name to send you the requested information by email.
Registration for our email marketing uses a double opt-in procedure. This means that after subscribing, you will receive an email asking you to confirm your subscription. This ensures that no one can subscribe using someone else's email address.
In connection with your subscription, we also store the date and time of registration, the date and time of confirmation and, where applicable, technical verification data to document your subscription and consent.
Legal basis: Article 6(1)(a) GDPR (consent).
You may withdraw your consent at any time with effect for the future by using the unsubscribe link in our emails or by contacting us at info@waidewelt.com. The lawfulness of processing carried out before withdrawal remains unaffected.
We may use Shopify and its integrated features to send and manage email marketing. Personal data may be processed where necessary for subscriptions, sending emails, managing recipient lists and measuring email campaign performance.
h) Cookies and Similar Technologies
We use technically necessary cookies and similar technologies where required for the operation of our website. We only use additional cookies or tracking technologies for analytics, personalisation or marketing where legally permitted and, where required, on the basis of your consent.
Legal basis: Article 6(1)(f) GDPR for technically necessary technologies; Article 6(1)(a) GDPR for technologies requiring consent.
6. Shopify as Our Hosting and E-Commerce Platform
Our online shop operates on Shopify. Shopify provides the technical infrastructure required to operate the shop and processes personal data on our behalf or, where certain enhanced features are used, under its own responsibility as a data controller.
When using Shopify, personal details, contact information, order information, payment data, device data and usage data may be processed where necessary for operating the shop, processing orders, ensuring security, handling payments, analysing performance and optimising services.
Where Shopify Network Intelligence or Enhanced Services are enabled in our Shopify admin, Shopify may also use certain personal data to provide enhanced features, such as greater personalisation, more relevant advertising and a better understanding of how customers interact with our shop and advertisements. In such cases, Shopify may act as an independent data controller for these processing activities.
Further information is available in the Shopify Consumer Privacy Policy and Shopify Privacy Portal:
Shopify Consumer Privacy Policy
7. Recipients of Personal Data
We only share personal data where legally permitted. Recipients may include:
-
Shopify as our e-commerce platform and hosting provider
-
Payment service providers for processing payments
-
Shipping and logistics providers for delivering orders
-
IT, hosting, communication and support service providers
-
Tax advisers, accounting services, legal advisers or public authorities where legally required
-
Marketing and analytics service providers, where actually used and where a legal basis exists
8. International Data Transfers
When using Shopify and certain associated service providers, personal data may be transferred to third countries outside the European Union or the European Economic Area (EEA).
Where Shopify transfers data outside the EEA, the United Kingdom or Switzerland, Shopify refers to appropriate safeguards, particularly adequacy decisions and Standard Contractual Clauses.
Further information can be found in Shopify's privacy information and contractual documentation.
9. Data Retention
We retain personal data only for as long as necessary for the respective purposes. Beyond this period, we retain data where and for as long as statutory retention obligations apply or where storage is necessary to establish, exercise or defend legal claims.
Once the relevant purpose no longer applies and no statutory retention periods or other legitimate grounds for continued storage exist, the data concerned will be deleted or anonymised.
10. Requirement to Provide Data
Certain personal data must be provided in order to conclude a contract and process an order. Without this data, we cannot process your order or fulfil the contract. Mandatory fields are generally marked accordingly.
11. Your Rights
Subject to applicable legal provisions, you have the following rights in particular:
-
Right of access to the personal data we process (Article 15 GDPR)
-
Right to rectification of inaccurate or completion of incomplete data (Article 16 GDPR)
-
Right to erasure of your data (Article 17 GDPR)
-
Right to restriction of processing (Article 18 GDPR)
-
Right to data portability (Article 20 GDPR)
-
Right to object to processing based on Article 6(1)(e) or (f) GDPR (Article 21 GDPR)
-
Right to withdraw consent at any time with effect for the future (Article 7(3) GDPR)
If you wish to exercise any of your rights, you may contact us at any time using the contact details provided above.
Where Shopify acts as an independent data controller in certain circumstances, particularly when Enhanced Services are enabled, you may also exercise the relevant rights through the Shopify Privacy Portal:
12. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
13. Automated Decision-Making / Profiling
We do not carry out solely automated decision-making within the meaning of Article 22 GDPR that produces legal effects concerning you or similarly significantly affects you.
14. External Links
Our website may contain links to external websites or third-party services. The respective operators are solely responsible for the content and data protection practices of these external providers. Please refer to their applicable privacy notices.
15. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy where necessary due to legal, technical or business-related changes. The latest version is available on this website.
16. Contact
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:
Melina Gardeja
trading as MeGa HWG
Deepenstegen 21
22952 Lütjensee
Germany
Phone: +49 162 7439 461
Email: info@waidewelt.com
