Privacy policy

This translation is provided for your convenience. Only the German version is legally binding.

As of: September 2026

1. Controller

Maximilian Strauch
Deguchi
Am Sonnenhang 22
65232 Taunusstein
Germany
Email: deguchi.shop.exit@gmail.com

We have not appointed a data protection officer, as we are not required to do so.

2. Overview

We process personal data only to the extent necessary to run this shop, process your orders and communicate with you, or if you have given your consent. The legal bases are in particular Art. 6 (1) (a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligations) and (f) (legitimate interests).

3. Shop system and hosting: Shopify

Our shop runs on the Shopify platform. The provider is Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify stores and processes on our behalf the data generated when you visit the shop and place an order. Data may also be transferred to Shopify Inc. in Canada and to service providers in the USA. For Canada there is an adequacy decision of the European Commission. Transfers to the USA are based on the EU US Data Privacy Framework or the standard contractual clauses of the European Commission.

When pages are accessed, technical data is processed automatically, for example IP address, date and time, the page accessed, browser and operating system. This is necessary to provide the shop securely and reliably (Art. 6 (1) (f) GDPR).

More: shopify.com/legal/privacy

4. Cookies and consent

We use cookies and similar technologies. Technically necessary cookies, for example for the cart, the checkout and storing your cookie choice, are set on the basis of Section 25 (2) TDDDG and Art. 6 (1) (b) and (f) GDPR. All other cookies, for example for statistics or marketing, are only set with your consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR). You can change or withdraw your choice at any time via the cookie settings in the footer.

5. Orders and customer account

When you order, we process your contact details (name, email and, if provided, phone number), your shipping and billing address, the items ordered and your payment information. This is necessary to perform the contract (Art. 6 (1) (b) GDPR). If you create a customer account, we also store this data for future orders. You can have your account deleted at any time.

We store the data as long as necessary for processing. Due to statutory retention obligations under commercial and tax law (Art. 6 (1) (c) GDPR), we keep order and invoice data for up to ten years.

6. Production and shipping: Printful

Our products are made and shipped on demand by Printful. For this we pass your name, your shipping address, the items ordered and, where necessary for delivery, your email or phone number to Printful (Art. 6 (1) (b) GDPR). Our contractual partner is Printful Latvia AS, Raiņa bulvāris 25, LV-1050 Riga, Latvia, a company of Printful Inc. (USA). Depending on the production location, data may also be transferred to countries outside the EU. In that case the standard contractual clauses of the European Commission apply. Printful passes your address to the respective carrier so that the parcel can be delivered.

More: printful.com/policies/privacy

7. Payment

We process payments through the payment services shown to you at checkout. Which data goes to which provider depends on the payment method chosen (Art. 6 (1) (b) GDPR). Depending on the payment method, these are in particular:

  • Shopify Payments (card payment, Apple Pay, Google Pay and others), processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland
  • PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, if you pay with PayPal

Payment service providers partly process your data under their own responsibility, for example for fraud prevention. Their privacy notices then also apply.

8. Shop Pay and Shop app

If you use Shop Pay at checkout or follow our shop in the Shop app, Shopify processes your data for this under its own responsibility. The Shopify consumer privacy policy applies.

9. Contact

If you write to us via the contact form, by email or via chat (Shopify Inbox), we process your details to answer your request (Art. 6 (1) (b) or (f) GDPR). We delete the data once the request has been dealt with and no retention obligations apply.

10. Online withdrawal

If you declare a withdrawal using the "Withdraw from contract" function, we process your name, your order number and your email in order to process the withdrawal and confirm its receipt. We are legally obliged to do so (Art. 6 (1) (c) GDPR in conjunction with Section 356a German Civil Code).

11. Newsletter

If you subscribe to our newsletter, we send news about Deguchi to your email. We only do this with your consent (Art. 6 (1) (a) GDPR). After signing up, you receive an email asking you to confirm your subscription (double opt in). The newsletter is sent via Shopify. You can unsubscribe at any time via the link at the end of every email.

12. Statistics

With your consent, we use Shopify's analytics features to understand how the shop is used, for example which pages are visited. For this, cookies are set and usage data is evaluated (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). Without your consent this does not happen.

13. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw any consent given at any time with effect for the future (Art. 7 (3) GDPR). Simply send us an email.

Right to object: Where we process data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). You can object to the use of your data for advertising at any time without giving reasons.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

14. Obligation to provide data

For an order we need your name, your address and your email. Without this information we cannot conclude the contract. There is no automated decision making, including profiling, within the meaning of Art. 22 GDPR.

15. Changes

We update this privacy policy when the shop or the legal situation changes. The version published here always applies.