Privacy policy

Last updated: July 13, 2026

BAD PORTIER operates this store and website, including all related information, content, features, tools, products, and services, to provide you with a personalised shopping experience (the "Services"). The Services are powered by Shopify, which enables us to provide them to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction through the Services, or otherwise communicate with us. In the event of any conflict between our Terms and Conditions and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing or using any of the Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your personal information as described herein.

What Personal Information Do We Collect and Process?

When we use the term "personal information," we mean information that identifies you or another individual or can reasonably be linked to you. Personal information does not include information that has been anonymised or aggregated so that it can no longer be used to identify you.

Depending on how you interact with the Services, where you reside, and as permitted or required by applicable law, we may collect or process the following categories of personal information, including inferences drawn from such information:

  • Contact information, including your name, postal address, billing address, shipping address, telephone number, and email address.
  • Financial information, including credit or debit card details, payment card information, financial account information, transaction details, payment method, payment confirmation, and other payment-related information.
  • Account information, including your username, password, security questions, preferences, and account settings.
  • Transaction information, including products you view, add to your cart, save to your wishlist, purchase, return, exchange, or cancel, as well as your previous transactions.
  • Communications with us, including information you provide when contacting us, such as through customer support enquiries.
  • Device information, including information about your device, browser, network connection, IP address, and other unique identifiers.
  • Usage information, including information about how and when you access, browse, and interact with the Services.

Sources of Personal Information

We may collect personal information from the following sources:

  • Directly from you, including when you create an account, access or use the Services, communicate with us, or otherwise provide us with your personal information.

  • Automatically through the Services, including information collected from your device when you use our products or Services, visit our website, or through the use of cookies and similar technologies.

  • From our service providers, including where we engage them to enable certain technologies or where they collect or process your personal information on our behalf.

  • From our partners and other third parties.

How We Use Your Personal Information

Depending on how you interact with us or which Services you use, we may use your personal information for the following purposes:

Providing, Personalising, and Improving the Services

We use your personal information to provide you with the Services. This includes, among other things, performing our contract with you, processing your payments, fulfilling your orders, storing your preferences and items of interest, sending account-related notifications, creating, maintaining, and managing your customer account, arranging shipping, facilitating returns, enabling you to submit reviews, and providing you with a personalised shopping experience, including recommending products based on your purchases. We may also use your personal information to improve and further develop the Services.

Legal basis: Article 6(1)(b) GDPR (performance of a contract) and, where applicable, Article 6(1)(f) GDPR (our legitimate interest in improving and developing our Services).

Marketing and Advertising

We use your personal information for marketing and advertising purposes, including sending marketing communications by email, SMS, or post, and displaying advertisements for products or services on our Services or on other websites. This may include advertising based on products you have previously purchased, placed in your shopping cart, or other interactions with the Services.

Legal basis: Article 6(1)(a) GDPR (consent), where required. Marketing to existing customers is carried out in accordance with Section 7(3) of the German Act Against Unfair Competition (UWG) in conjunction with Article 6(1)(f) GDPR.

Security and Fraud Prevention

We use your personal information to authenticate your account, provide a secure shopping and payment experience, detect, investigate, and prevent fraudulent, unlawful, unsafe, or malicious activity, protect public safety, and maintain the security of our Services. If you create an account, you are responsible for keeping your login credentials confidential. We strongly recommend that you do not share your username, password, or other access credentials with anyone.

Legal basis: Article 6(1)(f) GDPR (our legitimate interest in ensuring the security of our Services and preventing and investigating fraud).

Communicating with You

We use your personal information to provide customer support, respond to your enquiries, and maintain our business relationship with you.

Legal basis: Article 6(1)(b) GDPR (performance of a contract), where the communication is necessary for the performance of the contract, and Article 6(1)(f) GDPR (our legitimate interest in handling enquiries and providing customer support).

Legal Purposes

We use your personal information to comply with applicable laws and legal obligations, respond to lawful requests from courts, law enforcement, or regulatory authorities, investigate or participate in civil investigations, actual or potential legal proceedings, or other adversarial proceedings, investigate potential violations of our terms or policies, and enforce our terms and policies.

Legal basis: Article 6(1)(c) GDPR (compliance with legal obligations) and Article 6(1)(f) GDPR (establishment, exercise, or defence of legal claims).

How We Share Personal Information

Under certain circumstances, we may share your personal information with third parties for legitimate purposes in accordance with this Privacy Policy. These circumstances may include:

  • With Shopify, service providers, and other third parties that perform services on our behalf (such as IT management, payment processing, data analytics, customer support, cloud storage, fulfilment, and shipping).

  • With business and marketing partners who provide marketing services and display advertising to you. For example, we use Shopify to support personalised advertising with third-party services based on your online activity across different merchants and websites. Our business and marketing partners process your information in accordance with their own privacy policies. Depending on where you reside, you may have the right to direct us not to share information about you for targeted advertising based on your online activity across different merchants and websites. If you wish to exercise this right, you may do so here.

  • When you request or consent to us sharing certain information with third parties, for example to fulfil your order or when you use social media widgets or login integrations.

  • With our affiliates or otherwise within our corporate group.

  • In connection with a business transaction, such as a merger, acquisition, or insolvency, to comply with applicable legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce applicable terms or policies, or to protect or defend the Services, our rights, and the rights of our users or others.

Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services in order to provide and improve the Services. Information you submit through the Services will be shared with Shopify and with third parties who may be located in countries other than your country of residence for the purpose of providing and improving the Services.

To protect, grow, and improve our business, we also use certain enhanced Shopify features that incorporate data and information from your interactions with our store, other merchants, and Shopify. To provide these enhanced features, Shopify may use personal information collected through your interactions with our store, other merchants, and Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including responding to requests to exercise your rights regarding the use of your personal information for these purposes.

For more information about how Shopify uses your personal information and your rights, please refer to the Shopify Consumer Privacy Policy.

Depending on where you reside, you may also exercise certain rights relating to your personal information through the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may contain links to websites or other online platforms operated by third parties. If you follow links to websites that are not affiliated with or controlled by us, you should review their privacy and security policies as well as any other applicable terms and conditions. We do not guarantee and are not responsible for the privacy, security, accuracy, completeness, or reliability of such websites or the information they contain. Information you provide in public or semi-public areas, including information you share on third-party social networking platforms, may also be viewed by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by the relevant third party. The inclusion of such links does not imply any endorsement by us of the content of those platforms or their owners or operators, unless expressly stated in the Services.

Children's Data

The Services are not intended for use by children, and we do not knowingly collect personal information from children who have not reached the age of majority in their country of residence. If you are the parent or legal guardian of a child who has provided us with personal information, you may contact us using the details provided below to request that we delete such information. As of the effective date of this Privacy Policy, we are not aware that we have shared or sold personal information of children who have not reached the age of majority in their country of residence.

Security and Retention of Your Information

Please note that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, information you send to us may be at risk while in transit. We recommend that you do not use unsecured channels to transmit sensitive or confidential information to us.

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law.

Information relating to orders and contracts is retained for the duration of the contractual relationship and thereafter in accordance with applicable statutory retention periods, in particular under commercial and tax law (generally six or ten years).

Information relating to your customer account is retained for as long as your account remains active. Once your customer account is deleted, the associated information will be deleted unless we are required or permitted by law to retain it.

Information processed on the basis of your consent (e.g. for newsletters) is retained until you withdraw your consent.

Information processed in connection with cookies and similar technologies is retained in accordance with the respective retention periods applicable to the cookies and technologies used.

Your Rights and Choices

Depending on where you reside, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances, and in some cases we may refuse your request where permitted by law.

  • Right of Access. You may have the right to request access to the personal information we hold about you.

  • Right to Erasure. You may have the right to request that we erase the personal information we hold about you.

  • Right to Rectification. You may have the right to request that we correct inaccurate personal information we hold about you.

  • Right to Data Portability. You may have the right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, under certain circumstances and subject to certain exceptions.

  • Right to Object to Direct Marketing and Processing Based on Legitimate Interests. Where we process your personal information on the basis of Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing. Where your personal information is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal information for such purposes.

  • Managing Communication Preferences. We send marketing emails only where you have given your explicit consent or where permitted by applicable law, in particular Section 7(3) of the German Act Against Unfair Competition (UWG). You may object to receiving these emails at any time by using the unsubscribe option included in our emails. If you opt out, we may still send you non-promotional emails, such as those relating to your account or orders you have placed.

If you reside in the United Kingdom or the European Economic Area, and subject to the exceptions and limitations under applicable local law, you may also exercise the following rights in addition to those set out above:

  • Right to Object and Right to Restrict Processing. You may have the right to request that we stop or restrict the processing of your personal information for certain purposes.

  • Withdrawal of Consent. Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time. Withdrawal of your consent does not affect the lawfulness of any processing carried out on the basis of your consent before its withdrawal.

You may exercise these rights where indicated within the Services or by contacting us using the contact details provided below. For more information about how Shopify uses your personal information and your rights, including your rights in relation to personal information processed by Shopify, please visit https://privacy.shopify.com/en.

You will not be disadvantaged in any way for exercising these rights. Where permitted or required under applicable law, we may need to verify your identity before processing your request. In accordance with applicable law, you may appoint an authorised representative to submit requests on your behalf to exercise your rights. Before accepting such a request from a representative, we will require proof that you have authorised them to act on your behalf, and we may require you to verify your identity directly with us. We will respond to your request without undue delay, as required by applicable law.

Complaints

If you have any complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you reside, you may have the right to appeal our decision by contacting us using the contact details provided below or by lodging a complaint with the competent data protection supervisory authority. The competent data protection supervisory authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW). Regardless of the above, you may also lodge a complaint with the data protection supervisory authority at your habitual place of residence or place of work.

International Transfers

Please note that we may transfer, store, and process your personal information outside the country in which you reside.

Where we transfer personal information outside the European Economic Area (EEA) or the United Kingdom, we do so only in compliance with applicable legal requirements. In connection with our use of Shopify and other service providers engaged by us, personal information may be transferred to the United States. Where no adequacy decision has been adopted by the European Commission for the respective recipient country, we rely on the European Commission's Standard Contractual Clauses or other legally recognised safeguards pursuant to Article 46 GDPR.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last Updated" date accordingly, and provide any notice required under applicable law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of your rights, please contact us by telephone at +49 211 731492-44, by email at info@badportier.com, or by mail at: Internet Value GmbH, Marienstraße 14, 40212 Düsseldorf, Germany. For the purposes of the applicable data protection laws, we are the data controller of your personal information.