Privacy policy
Last updated: 29 September 2026
1. Controller
Jegit – Pour La Vie, Renas Sheho, Anna-Seghers-Straße 94, 28279 Bremen, Germany
Phone: +49 176 81010935, email: info@jegit.de
We are not required to appoint a data protection officer. For all data protection questions, please contact us at the above address.
2. Overview
We process personal data only insofar as this is necessary to provide our online shop, to process orders, to communicate with you or – where you have consented – for analysis and marketing purposes. The legal bases are in particular Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract and pre-contractual measures), Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(f) GDPR (legitimate interests). Access to information on your device (cookies and similar technologies) is based on § 25(1) TDDDG (consent) or, where strictly necessary, § 25(2) TDDDG.
3. Hosting and shop system (Shopify)
Our online shop runs on Shopify, provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, Ireland. When you visit our shop, Shopify processes technical data (e.g. IP address, browser type, date and time of access, pages visited) as well as the data you enter in the shop (e.g. customer account, shopping cart, orders). This processing is necessary to operate the shop securely and to perform contracts (Art. 6(1)(b) and (f) GDPR). Shopify may also transfer data to Shopify Inc. in Canada (adequacy decision) and to the USA; transfers are based on the EU-US Data Privacy Framework and/or standard contractual clauses. We have concluded a data processing agreement with Shopify. We also use Shopify's own functions such as Shopify Flow (automations), Shopify Messaging (emails), Shopify Search & Discovery, Shopify Bundles and Translate & Adapt within this framework. More information: shopify.com/legal/privacy.
4. Orders and customer account
When you place an order, we process your name, email address, billing and delivery address, phone number (optional), order and payment information to process the contract (Art. 6(1)(b) GDPR). If you create a customer account, we store your data until you delete the account. We are legally obliged to retain commercial and tax-relevant documents (§ 257 HGB, § 147 AO) for up to 10 years (Art. 6(1)(c) GDPR).
We use the following service providers to process orders; they act as processors on our behalf or – in the case of payment and shipping providers – partly as independent controllers:
- ChannelDock (ChannelDock B.V., Netherlands) – warehouse management and shipping processing.
- DHL (Deutsche Post AG / DHL Paket GmbH, Germany) – delivery. We pass on your name and delivery address and, if you have agreed, your email address/phone number for delivery notifications.
- Parcel Panel / CWILL – shipment tracking page and shipping notifications.
- easybill (easybill GmbH, Germany) – creating invoices.
- DATEV (DATEV eG, Germany) via the app “DATEV Buchhaltungsexport Pro” – transfer of accounting data to our tax advisor (Art. 6(1)(c) GDPR).
- One Click Upsell – displaying additional offers after checkout.
- Kaching Bundles – displaying quantity discounts and bundles in the shop.
- Marketplace Connect (Shopify) – if you order via Amazon or eBay, we receive the order data required for processing from the respective marketplace. The privacy policy of the marketplace also applies.
5. Payment providers
- Shopify Payments (credit card, Apple Pay, Google Pay) – provided by Shopify, with payment processing by Stripe Payments Europe Ltd., Ireland.
- PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg). More information: PayPal privacy statement.
- Klarna (Klarna Bank AB (publ), Sweden). For certain payment options Klarna may carry out an identity and credit check; Klarna is an independent controller. More information: Klarna privacy statement.
The data required for payment is passed on to the payment provider you select (Art. 6(1)(b) GDPR).
6. Contacting us
If you contact us by email, phone or via a contact form, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR). We delete the data once your request has been dealt with, unless statutory retention obligations apply.
7. Newsletter and email marketing (Klaviyo)
If you subscribe to our newsletter, we send you information about our products and offers. Registration takes place via the double opt-in procedure: you will receive an email asking you to confirm your registration. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email or by contacting us.
We use Klaviyo (Klaviyo, Inc., 125 Summer Street, Boston, MA 02110, USA) to send emails. Klaviyo processes your email address, name, order history and information on how you interact with our emails (opens, clicks). If you have consented, Klaviyo also records your behaviour in the shop (e.g. products viewed, abandoned carts) in order to send you personalised emails. Data transfers to the USA are based on the EU-US Data Privacy Framework and standard contractual clauses. We have concluded a data processing agreement with Klaviyo.
Where permitted by law (§ 7(3) UWG), we may send existing customers information about similar products by email without separate consent. You can object to this at any time free of charge; you will be informed of this in every email.
8. Customer reviews (Trusted Shops)
We use services of Trusted Shops SE, Subbelrather Str. 15c, 50823 Cologne, Germany, to display the Trustbadge and customer reviews. If you have consented, we pass on your email address and order information to Trusted Shops after your order so that you receive a review request (Art. 6(1)(a) GDPR). The Trustbadge is only loaded after your consent in the cookie banner. More information: Trusted Shops privacy policy.
9. Affiliate programme (UpPromote)
We run an affiliate programme via UpPromote (Secomapp, Vietnam/Singapore). If you reach our shop via an affiliate link, a cookie stores the referral so that the partner can be credited with a commission. This only takes place with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). If you take part in our affiliate programme as a partner, we process your details to manage the partnership and pay commissions (Art. 6(1)(b) GDPR). Data transfers to third countries are based on standard contractual clauses.
10. Cookies and consent management
We use cookies and similar technologies. Technically necessary cookies (e.g. shopping cart, checkout, security, storing your consent choice) are set on the basis of § 25(2) TDDDG and Art. 6(1)(f) GDPR. All other cookies and tools for analysis and marketing (sections 11–13) are only used with your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR), which you give via our cookie banner. You can withdraw or change your consent at any time with effect for the future via the cookie settings link in the footer of our shop.
11. Web analytics
Microsoft Clarity (Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland): With your consent, we use Clarity to understand how visitors use our shop (heatmaps, anonymised session recordings, mouse movements, clicks, scrolling). Input fields are masked. Data may be transferred to Microsoft Corporation in the USA; this is based on the EU-US Data Privacy Framework. More information: Microsoft privacy statement.
Shopify Analytics: Shopify provides us with statistical evaluations of shop usage. Analytics cookies are only used with your consent.
12. Online marketing and conversion tracking
With your consent, we use the following services to measure the success of our advertising and to show you relevant advertising on other websites and platforms. For this purpose, pixels/tags are integrated into our shop and – where applicable – server-to-server interfaces (e.g. Conversions API) are used. Information about your use of our shop (e.g. pages viewed, products added to the cart, purchases), device and browser data, IP address and – where applicable – hashed contact data (e.g. email address) are transmitted.
- Meta Pixel and Conversions API (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland) for Facebook and Instagram. For the collection and transmission of data, we are jointly responsible with Meta (Art. 26 GDPR); the joint controller agreement is available at facebook.com/legal/controller_addendum. Meta is solely responsible for further processing. Data may be transferred to Meta Platforms, Inc. in the USA (EU-US Data Privacy Framework).
- Google Ads (conversion tracking and remarketing; Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). We use Google Consent Mode, so that Google tags only set cookies and process data for advertising purposes after your consent. Data may be transferred to Google LLC in the USA (EU-US Data Privacy Framework).
- TikTok Pixel and Events API (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, Ireland, and TikTok Information Technologies UK Ltd.). Data may be transferred to third countries, including the USA, Singapore and China; these transfers are based on standard contractual clauses.
We also use Custom Audiences with these providers where you have consented. The legal basis is Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time via the cookie settings.
13. Instagram feed
We display our Instagram posts in the shop using the app “OT: Instagram Feed”. Images are loaded from Meta's servers, whereby your IP address is transmitted to Meta. The feed is only loaded with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).
14. Links to social media
Our shop contains simple links to our profiles on social networks (e.g. Instagram, Facebook, TikTok). No data is transmitted to the networks until you click on a link.
15. IT and AI service providers
To run our business efficiently, we use IT and software service providers, including AI assistants (e.g. Anthropic PBC / Anthropic Ireland Ltd. – “Claude”), which may access shop, order and customer data for the purpose of supporting us (e.g. analysing orders, preparing texts, maintaining the shop). These providers act as processors on our behalf on the basis of data processing agreements (Art. 28 GDPR) and may not use the data for their own purposes. Where data is transferred to the USA, this is based on standard contractual clauses and/or the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(b) and (f) GDPR (efficient business organisation).
16. Transfers to third countries
Some of the service providers mentioned are located in countries outside the European Economic Area or transfer data there. Transfers take place only if an adequacy decision of the European Commission exists (e.g. for Canada or for companies certified under the EU-US Data Privacy Framework) or if suitable safeguards such as the EU standard contractual clauses have been agreed (Art. 44 et seq. GDPR).
17. Storage period
We delete personal data as soon as the purpose of processing no longer applies, unless statutory retention obligations apply (in particular up to 10 years under § 257 HGB and § 147 AO). Data processed on the basis of consent is deleted once you withdraw your consent, unless another legal basis applies. Cookies are stored for the period stated in the cookie settings.
18. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).
Right to object (Art. 21 GDPR): Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time for reasons arising from your particular situation. You can object to the processing of your data for direct marketing purposes at any time without giving reasons.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen, Arndtstraße 1, 27570 Bremerhaven, Germany.
To exercise your rights, simply contact us at info@jegit.de.
19. Automated decision-making
We do not use automated decision-making within the meaning of Art. 22 GDPR. Credit checks carried out by Klarna are the sole responsibility of Klarna.
20. Changes to this privacy policy
We may update this privacy policy to reflect changes in our services or legal requirements. The current version is always available on this page.