Privacy Policy

This English translation is provided for your convenience. In case of any discrepancy, the German version shall prevail.

Thank you for visiting seelenecho.online. Below, we inform you about which personal data we process when you visit our online shop, place orders and contact us, for what purposes this is done, and what rights you have.

1. Controller

Seelenecho.online
Owner: Markus Kölbl (sole proprietor)
Karl-Gayer-Straße 2
80997 München (Munich)
Germany
Phone: +49 89 6142101-0
Email: info@seelenecho.online

Further information can be found in our Legal Notice.

No data protection officer has been appointed, as the legal requirements for this are not met.

2. Hosting and shop system (Shopify)

Our online shop is operated with Shopify. The provider is Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify provides the technical infrastructure (servers, shop system, checkout, customer account, cookie banner) and processes your data on our behalf, including IP address, browser and device information, pages visited, shopping cart contents as well as order and contact data.

When any page is accessed, server log data is collected automatically (IP address, date and time, page accessed, referrer, browser type, operating system). This is necessary for the secure and stable operation of the shop (Art. 6(1)(f) GDPR).

Shopify may also transfer data to Shopify Inc. (Canada) and to sub-processors in the USA. For Canada, there is an adequacy decision of the EU Commission; for the USA, the transfer is based on the EU-US Data Privacy Framework or EU standard contractual clauses. Processing is carried out on the basis of a data processing agreement (Art. 28 GDPR). Further information: shopify.com/legal/privacy.

3. Cookies and consent

We use technically necessary cookies and similar technologies, e.g. for the shopping cart, language settings, checkout and security. These are strictly necessary for the operation of the shop (Section 25(2) No. 2 TDDDG – German Telecommunications Digital Services Data Protection Act, Art. 6(1)(b) and (f) GDPR).

We only use all other cookies and services – for preferences, statistics and marketing – with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You make your choice in the cookie banner on your first visit. You can withdraw or change your consent at any time with effect for the future by opening the cookie settings again (link in the footer of every page) or by deleting the cookies in your browser.

4. Orders and customer account

To process your order, we process your name, billing and delivery address, email address, telephone number if applicable, order data and payment information (Art. 6(1)(b) GDPR). If you create a customer account, we store your details and order history until you delete the account. Mandatory fields are marked at checkout; without them, we cannot conclude the contract.

To perform the contract, we only pass on data to the service providers involved in each case (payment, shipping, accounting – see below). Details on the conclusion of the contract can be found in our General Terms and Conditions.

5. Payment services

Shopify Payments (credit card, Apple Pay, Google Pay): Card payments and wallet payments are processed via Shopify Payments; payment data is transmitted directly to Shopify and its payment service providers. For Apple Pay and Google Pay, the privacy policies of Apple and Google respectively also apply.

PayPal: If you pay with PayPal, we transmit the data required for the payment to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. PayPal may carry out an identity and credit check. Privacy: paypal.com.

Klarna: If you choose a Klarna payment method, we transmit your contact and order data to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. To check the payment method, Klarna may carry out an identity and credit check and involve credit agencies for this purpose. Privacy: klarna.com/de/datenschutz.

Payment in advance: If you pay by bank transfer, we process the details of your transfer in order to allocate the payment.

The legal basis in each case is Art. 6(1)(b) GDPR. An overview of the payment methods offered can be found under Shipping & Payment Information.

6. Shipping

For delivery, we transmit your name and delivery address and – where necessary for delivery or shipment notification – your email address or telephone number to our shipping provider Deutsche Post AG / DHL, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany (Art. 6(1)(b) GDPR; for passing on your email address or telephone number for shipment notification, Art. 6(1)(f) GDPR). We create shipping labels with the Shopify app “Post & DHL Versand” from Deutsche Post and with the shipping software Billbee (Billbee GmbH, Germany), which acts on our behalf (Art. 28 GDPR). If you collect your order in Munich, we do not pass on any data to shipping providers. Information on delivery and collection can be found under Shipping & Payment Information.

7. Contacting us

If you contact us by email, phone or via our contact form, we process your details to handle your enquiry (Art. 6(1)(b) GDPR for contract-related enquiries, otherwise Art. 6(1)(f) GDPR). Our email mailbox is operated via Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland), which processes your messages on the basis of a data processing agreement (Art. 28 GDPR).

Forms on our website are provided with “Shopify Forms”. To protect against spam and abuse, the hCaptcha service of Intuition Machines, Inc. (USA) is integrated, which evaluates browser and usage data in order to detect automated entries (Art. 6(1)(f) GDPR; our legitimate interest is protecting our shop against abuse). Privacy: hcaptcha.com/privacy.

Enquiry “Singing bowl by desired weight”: If you use the enquiry form on our product pages to ask about the availability of a singing bowl in your desired weight, we process your details (first and last name, email address, postal address, delivery method, and optionally company, telephone number, alternative delivery address and message) as well as the enquiry data (item, desired weight, estimated price and enquiry number). The details are stored in our shop system Shopify (see section 2): a customer record is created for you, or an existing customer record associated with your email address is updated, and your address is stored there. We also receive your enquiry by email. We use the data to check availability with our wholesaler and to prepare an offer and, where applicable, an invoice for you (Art. 6(1)(b) GDPR). When ordering from the wholesaler, we use the enquiry number as the order reference. Submitting an enquiry does not subscribe you to our newsletter. For the storage period, see section 13.

8. Newsletter

If you subscribe to our newsletter, we use your email address and, if provided, your first name to send you information about new products, offers and blog posts (Art. 6(1)(a) GDPR). You subscribe via a form (Shopify Forms). For sending, we use Seguno Email Marketing, a service that works within our Shopify system and can evaluate opening and click behaviour. Privacy: seguno.com/privacy.

You can unsubscribe from the newsletter at any time via the unsubscribe link in every email or by sending us a message. After you unsubscribe, we may store your email address in a block list to prevent future mailings (Art. 6(1)(f) GDPR).

9. Pop-ups and notices

Poptin: The Poptin service of Poptin Ltd. (Israel) may be used for notice and promotional pop-ups. Poptin is only loaded if you have consented to marketing in the cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). For Israel, there is an adequacy decision of the EU Commission. Privacy: poptin.com/privacy-policy.

Market and holiday notices / dates: We manage our market dates with the app “The Shop Calendar”. The calendar on our “Dates” page and the notice pop-up about market and holiday times are only loaded if you have consented to “Preferences” in the cookie banner or click “Show dates” on the dates page. Only then are your IP address and technical data transmitted to the provider; the calendar also loads further libraries from third-party servers (including Google, jsDelivr, StackPath, Amazon CloudFront, unpkg, cdnjs). The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via the cookie settings. Provider: theshopcalendar.com.

10. Statistics and marketing (only with consent)

The following services are integrated via Shopify's customer events and are only active if you have consented to statistics or marketing in the cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Data on your usage behaviour (e.g. products viewed, cart and purchase events) as well as device information may be transmitted to the providers, including to the USA (basis: EU-US Data Privacy Framework or standard contractual clauses).

• Google Analytics and Google channels (Google & YouTube): Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – reach measurement and product ads. Privacy
• Meta Pixel (Facebook & Instagram): Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland – performance measurement and ads. We are joint controllers with Meta for the collection (Art. 26 GDPR). Privacy
• Pinterest Tag: Pinterest Europe Limited, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland – performance measurement and ads. Privacy
• TikTok: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland – performance measurement and ads, insofar as the TikTok sales channel is active. Privacy

We also offer our products via the Shopify sales channels Shop, Google, Facebook & Instagram, Pinterest and TikTok. When you view a post or product there, the privacy policy of the respective platform applies.

11. Shop Pay

At checkout, you can use Shop Pay to save your details with Shopify for future orders. The provider is Shopify; use is voluntary (Art. 6(1)(a) or (b) GDPR).

12. Accounting and taxes

We transmit invoice and payment data to our accounting software Lexware Office (Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany) and, where applicable, to our tax advisor in order to fulfil our legal obligations (Art. 6(1)(c) GDPR). Lexware acts as a processor (Art. 28 GDPR).

13. Storage period

We only store personal data for as long as is necessary for the respective purpose. We retain order and invoice data due to commercial and tax law obligations (Section 147 of the German Fiscal Code, AO; Section 257 of the German Commercial Code, HGB): invoices and other accounting records for 8 years, business letters for 6 years, books and financial statements for 10 years; each period begins at the end of the calendar year. We delete enquiries once they have been fully processed and no retention obligation applies. We store newsletter data until you unsubscribe.

14. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR).

Right to object: Insofar as we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). You may object to processing for direct marketing purposes at any time without giving reasons.

To exercise your rights, an informal message to info@seelenecho.online is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

15. Automated decision-making and data security

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR. Our shop uses SSL/TLS encryption; you can recognise it by the padlock symbol in your browser's address bar.

16. Changes

We will adapt this privacy policy if our services or the legal situation change. The version published here applies.

Last updated: 16 September 2026