Data Deletion
How shop owners and end customers can request deletion of data stored with ShopiPixel — including timelines and statutory exceptions.
1. Data Controller
Iwan Gerber (sole proprietorship under German law), Beckhstrasse 27, 73035 Goeppingen, Germany. Full contact details and address are available in our imprint at shopipixel.de/imprint. For data protection requests, contact us directly by email.
Contact: datenschutz@shopipixel.de
2. What data do we store?
A complete overview of all processed data categories, purposes, and retention periods is available in our privacy policy. This page focuses on the concrete steps to initiate deletion.
3. Deletion for shop owners (merchants)
If you use ShopiPixel as a Shopify app and want your data deleted:
- Open your Shopify admin and navigate to "Apps" → ShopiPixel.
- Click "Uninstall app" — Shopify automatically sends a deletion webhook to us.
- Within 30 days we initiate full deletion of all shop-related data (tracking events, platform credentials, audiences, custom reports, and more).
- On request, you will receive confirmation of completed deletion by email at the address stored in Shopify.
Default 30 days after uninstall. This period covers a recovery window for accidental uninstalls. For explicit immediate deletion via email request, deletion occurs without undue delay, at the latest within one month per Art. 12(3) GDPR.
4. Deletion for end customers (shop buyers)
If you are an end customer who purchased from a shop that uses ShopiPixel and want to request deletion of your data:
- Contact the shop owner first — per Art. 4(7) GDPR they are the data controller and responsible for processing your deletion request.
- The shop owner forwards the request to us as a GDPR-compliant controller, for example via the Shopify webhook "customers/redact".
- Alternatively you can contact us directly by email at datenschutz@shopipixel.de — we will forward your request to the responsible shop owner and delete your data within the statutory deadline.
5. Direct email request
For access (Art. 15 GDPR), rectification (Art. 16), deletion (Art. 17), restriction (Art. 18), and objection (Art. 21) requests, reach us at:
Subject: "Data Deletion" or "GDPR request [right]"
Email to: datenschutz@shopipixel.de
6. Processing timeline
We respond to every request without undue delay, at the latest within one month of receipt per Art. 12(3) GDPR. For particularly complex requests or a high volume of requests, the deadline may be extended by a further two months — in this case we will inform you of the extension and its reasons within the first month.
7. Statutory exceptions to deletion
Two data categories are retained longer for proof purposes — even after a deletion request. These records contain no direct identification of shop end customers, but document administrative actions and consent transactions only:
- Audit logs (3 years): Accountability obligation under Art. 5(2) GDPR and potential damages claims under Art. 82 GDPR — retention within the statutory limitation period (German Civil Code §§ 195, 199). Audit logs contain only administrative actions, no plaintext PII.
- Consent logs (3 years): Proof of consents granted and withdrawn per Art. 7(1) GDPR within the statutory limitation period (German Civil Code §§ 195, 199). Consent logs contain only timestamp, document version, and pseudonyms per consent — no plaintext PII.
Note on billing data: ShopiPixel does NOT issue invoices itself. All subscription billing is processed by Shopify as billing agent and is subject exclusively to Shopify's commercial and tax retention obligations — not ShopiPixel's.
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority per Art. 77 GDPR. The competent authority for ShopiPixel is:
Supervisory authority: State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
https://www.baden-wuerttemberg.datenschutz.de