PRIVACY POLICY

1. Controller

The controller responsible for data processing on this website is:

Caelan GmbH (brand: 2 Stories)
Kyffhäuserstraße 13
40545 Düsseldorf
Germany
Email: contact@caelan.de
Phone: +49 174 738 21 99

2. Hosting and Shop System (Shopify)

Our online shop is operated using the shop system of Shopify (Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, and Shopify Inc., 151 O’Connor Street, Ottawa, Ontario K2P 2L8, Canada).

Shopify processes data on our behalf, including order data, customer data and technical access data (e.g. IP address, browser type, date and time of access). Data may also be transferred to third countries such as Canada and the USA. The transfer is based on an adequacy decision of the EU Commission (Art. 45 GDPR), the EU-U.S. Data Privacy Framework or standard contractual clauses (Art. 46 GDPR).

Legal basis: Art. 6(1)(b) and (f) GDPR (performance of a contract and our legitimate interest in the secure and efficient operation of the online shop).

3. Cookies and Consent Management

Our website uses cookies. Strictly necessary cookies are required to operate the online shop (e.g. shopping cart, checkout, security). Legal basis: Section 25(2) TDDDG and Art. 6(1)(f) GDPR.

We only use other cookies, e.g. for statistical analysis of website usage, if you consent via our cookie banner. Legal basis: Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

Your consent is voluntary and can be withdrawn or changed at any time with effect for the future by reopening your cookie settings via the link on our website.

4. Contacting Us

If you contact us by email, we process your details (e.g. name, email address, content of your message) to handle your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual enquiries and contract performance) or (f) GDPR. We delete the data as soon as it is no longer required for the purpose and no statutory retention obligations apply.

5. Orders and Customer Account

To process your order, we process the following data:

  • First and last name
  • Delivery and billing address
  • Email address and, if applicable, phone number
  • Order and payment data

Legal basis: Art. 6(1)(b) GDPR.

Storage period: We store order and invoice data in accordance with commercial and tax retention periods (up to 10 years, Section 147 AO, Section 257 HGB). Legal basis: Art. 6(1)(c) GDPR.

If you create a customer account, we store your data until the account is deleted.

6. Payment Service Providers

Depending on the payment method you choose, we pass on your payment data to the following providers to process the payment. We do not store credit card data on our servers.

  • Shopify Payments (Stripe Payments Europe Ltd., Dublin, Ireland) for credit cards, Apple Pay, Google Pay and other local payment methods (e.g. Bancontact)
  • PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg)
  • Klarna (Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden)

Legal basis: Art. 6(1)(b) GDPR. The privacy policies of the respective providers also apply.

7. Shipping

To deliver your order, we pass on your name, delivery address and, if applicable, your email address or phone number (for delivery notification) to the shipping provider commissioned (DHL or Deutsche Post). Legal basis: Art. 6(1)(b) GDPR.

8. Newsletter

If you subscribe to our newsletter, we use your email address to send you information and offers. Subscription is done using the double opt-in procedure: after subscribing, you will receive an email asking you to confirm your subscription. You will only receive the newsletter after you have confirmed. We store the time and proof of consent.

We use Zoho (Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands) to send newsletters. Legal basis: Art. 6(1)(a) GDPR.

You can withdraw your consent at any time, e.g. via the unsubscribe link in every newsletter or by email to contact@caelan.de. The lawfulness of processing carried out until then remains unaffected.

9. Withdrawal Function

If you declare a withdrawal using the "Vertrag widerrufen" (Withdraw from contract) button in the footer of our website, we process the data you enter (e.g. name, email address, order number, content of the declaration) to handle your withdrawal and confirm receipt. The function is provided via the Shopify app "Widerruf Manager" of fuxdev GmbH, Bahnhofstr. 62, 63755 Alzenau, Germany, which processes data on our behalf. Legal basis: Art. 6(1)(b) and (c) GDPR.

10. Disclosure of Data

Your data is only passed on where necessary to perform the contract (e.g. to payment and shipping providers), where we are legally obliged to do so, or where you have consented. Data is not passed on to third parties for advertising purposes.

11. Your Rights

Under the GDPR you have the following rights:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)
  • Withdrawal of consent (Art. 7(3) GDPR)

Right to object: Where we process data based on legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation.

To exercise your rights, write to us at contact@caelan.de.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

12. Data Security

We use SSL/TLS encryption and technical and organisational security measures in accordance with Art. 32 GDPR.

13. Currency and Changes to this Privacy Policy

This privacy policy is current as of October 2026. We will update it if our data processing or the legal situation changes.