Privacy Policy for shopipixel.de

1. Data Controller

The party responsible for data processing on this website is:

A Data Protection Officer is not required pursuant to Art. 37 GDPR in conjunction with § 38 BDSG. For data protection inquiries, please contact: datenschutz@shopipixel.de

2. Scope

This privacy policy covers the processing of personal data when visiting our marketing website shopipixel.de. For data processing within the Shopify app "ShopiPixel" (app.shopipixel.de), please see our separate privacy policy.

3. Server Log Files

The following data is automatically collected with each access:

• IP address (anonymized)
• Date and time of access
• Accessed page
• Browser type and version
• Operating system

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure provision of the website)

To ensure IT security, full IP addresses are stored briefly and then automatically deleted (see retention periods in Section 11). This data is not combined with other data.

4. Contact, Demo, and Partner Forms

When using our forms (contact, demo request, partner program), we process depending on the form:

• Name, company name
• Email address
• Phone number (optional)
• Shop URL, website (optional)
• Subject, message, collaboration preference

The data is exclusively sent via email to support@shopipixel.de. No data is stored in a database. The data remains in the email inbox.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures)

5. Newsletter

When subscribing to our newsletter, we process:

• Email address
• Language (German/English)
• Source of subscription (website or app)
• Timestamp of subscription and confirmation

We use a double opt-in process: After signing up, you will receive a confirmation email. Your subscription is only activated after clicking the confirmation link.

Purpose: Sending product updates, tips on server-side tracking and best practices.

You can unsubscribe from the newsletter at any time via the unsubscribe link in every email. After unsubscribing, your email address will no longer be used for newsletter delivery.

Legal basis: Art. 6(1)(a) GDPR (consent via double opt-in)

6. Website Analytics (with consent only)

With your consent, we collect anonymous usage statistics of our marketing website.

Legal basis: Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG (consent via cookie banner)

Collected data:

• Visited pages and time spent
• Device type (desktop/mobile/tablet), browser and operating system
• Country (via local GeoIP database, no external API call)
• Scroll depth and page load time
• UTM parameters (campaign tracking)
• Referrer domain (query parameters such as utm_content, fbclid etc. are stripped server-side — only domain and path are stored to protect personal data in URL parameters)

Revocation: You can revoke your consent at any time by selecting "Only necessary" in the cookie banner. This will delete the analytics cookie (_sp_aid) and no further data will be collected. Already collected raw data will be deleted within 90 days at the latest.

7. Meta Pixel (with consent only)

With your consent, we use the Meta Pixel (formerly Facebook Pixel) on our marketing website to measure the effectiveness of our Facebook and Instagram advertising campaigns.

Legal basis: Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG (consent via cookie banner)

Provider:

Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland

Collected data:

• Pages visited on our website
• Device type, operating system, and browser
• IP address (stored in truncated form by Meta)
• Facebook cookie information (if available)

The Meta Pixel is used exclusively to measure our own advertising campaigns on Facebook and Instagram. No conversion events (purchases, carts) are captured, as our marketing website does not have any shop functionality. Only page views (PageView) are captured.

We are jointly responsible with Meta Platforms Ireland Limited for certain data processing within the meaning of Art. 26 GDPR, insofar as Meta processes the data collected via the Pixel for its own purposes (ad performance measurement, targeting optimization). The details of joint controllership are governed by Meta's Controller Addendum.

Data transfer to third countries:

Meta may transfer data to the USA. The basis for the third-country transfer is the adequacy decision of the European Commission on the EU-US Data Privacy Framework (Art. 45 GDPR). Meta Platforms, Inc. is DPF-certified.

Revocation: You can revoke your consent at any time by deactivating the "Marketing" category in the cookie banner. After revocation, no more data will be transmitted to Meta.

For more information about data processing by Meta, please refer to the Meta Privacy Policy.

8. Google Ads (with consent only)

With your consent, we use Google Ads conversion tracking on our marketing website to measure the effectiveness of our Google Ads advertising campaigns.

Legal basis: Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG (consent via cookie banner)

Provider:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In the event of a transfer to the USA: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Collected data:

• Pages visited on our website
• Device type, operating system, and browser
• IP address (stored in truncated form by Google)
• Clicks on a link to our Shopify App Store listing

Conversion tracking is used exclusively to measure our own advertising campaigns on Google Ads. A click from our marketing website to our Shopify App Store listing is counted as a conversion. No purchase or cart events are captured, as our marketing website does not have any shop functionality.

Cookies: For this purpose, Google Ads sets cookies with the prefixes "_gcl_" and "_gac_" (e.g. _gcl_aw), which enable recognition when switching to the Shopify App Store. The storage period is up to 90 days.

Data transfer to third countries:

Google may transfer data to the USA. The basis for the third-country transfer is the adequacy decision of the European Commission on the EU-US Data Privacy Framework (Art. 45 GDPR). Google LLC is certified under the EU-US Data Privacy Framework.

Revocation: You can revoke your consent at any time by deactivating the "Marketing" category in the cookie banner. After revocation, no more data will be transmitted to Google, and the Google Ads cookies already set (prefixes "_gcl_" and "_gac_") will be deleted.

For more information about data processing by Google, please refer to the Google Privacy Policy.

9. Social Media Presence

We operate a Facebook page, an Instagram profile, a TikTok profile, a Snapchat profile and a Pinterest profile at:

• https://www.facebook.com/shopipixel
• https://www.instagram.com/shopipixel
• https://www.tiktok.com/@shopipixel
• https://www.snapchat.com/add/shopipixel
• https://www.pinterest.de/shopipixel/

When you visit our social media pages, Meta Platforms Ireland Limited (“Meta”) collects data in accordance with the Meta Privacy Policy. Both Facebook and Instagram are services provided by Meta. Meta Privacy Policy

Joint Controllership

We are jointly responsible with Meta for the processing of so-called Insights data (Art. 26 GDPR). Insights data are anonymized statistics about the use of our pages (e.g. page views, interactions, demographic characteristics of visitors). The details of joint controllership are governed by Meta’s “Page Insights Controller Addendum”: Page Insights Controller Addendum

Data Processed

When you visit our social media pages, Meta may process the following data:

• IP address and device information
• Information from cookies and similar technologies
• Interactions with our pages (likes, comments, shared content)

We only receive anonymized, aggregated statistics (Page Insights) from Meta. We do not have access to personal data of individual visitors.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in public relations and communication with prospects and customers)

Data Transfer to Third Countries

Meta may transfer data to the USA. The basis for the third-country transfer is the adequacy decision of the European Commission on the EU-US Data Privacy Framework (Art. 45 GDPR). Meta Platforms, Inc. is DPF-certified.

Data Subject Rights

Meta is the primary contact for the processing of Insights data. You may exercise your rights (access, deletion, etc.) against both us and Meta.

We do not use any of our own tracking tools or analytics services on our social media pages.

TikTok

Our TikTok profile is operated by TikTok Technology Limited (Ireland) or TikTok Information Technologies UK Limited. When you visit our TikTok profile, TikTok may collect data in accordance with its privacy policy. We only receive anonymized, aggregated statistics.

For more information, please refer to the TikTok Privacy Policy

Snapchat

Our Snapchat profile is operated by Snap Inc. (USA) or Snap Group Limited (UK). When you visit our Snapchat profile, Snap may collect data in accordance with its privacy policy. We only receive anonymized, aggregated statistics.

For more information, please refer to the Snapchat Privacy Policy

Pinterest

Our Pinterest profile is operated by Pinterest Europe Ltd. (Ireland). When you visit our Pinterest profile, Pinterest may collect data in accordance with its privacy policy. We only receive anonymized, aggregated statistics.

For more information, please refer to the Pinterest Privacy Policy

10. Cookies

This website uses the following cookie categories:

The analytics cookie and the marketing cookies (Meta Pixel and Google Ads) are only set with explicit consent. You can change your settings at any time via the cookie banner.

Do Not Track

Some browsers transmit a "Do Not Track" signal (DNT) or a "Global Privacy Control" signal (GPC). As there is currently no uniform legal standard in the EU for the automated interpretation of these signals, our website does not currently automatically evaluate DNT and GPC signals. Cookie settings can be adjusted at any time via the cookie banner. Regardless, you can exercise your right to object at any time by email to datenschutz@shopipixel.de.

11. Data Retention

12. Data Subject Rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR) - Right to information about your stored data
• Rectification (Art. 16 GDPR) - Right to correction of inaccurate data
• Erasure (Art. 17 GDPR) - Right to deletion of your data
• Restriction (Art. 18 GDPR) - Right to restriction of processing
• Data Portability (Art. 20 GDPR) - Right to receive your data in a machine-readable format
• Objection (Art. 21 GDPR) - Right to object to processing

Withdrawal of Consent

Where processing is based on consent (Art. 6(1)(a) GDPR), you have the right to withdraw this consent at any time with effect for the future. The lawfulness of processing carried out prior to withdrawal remains unaffected. For the analytics cookie, the Meta Pixel and Google Ads, you can withdraw your consent via the cookie banner. For the newsletter, you can withdraw your consent via the unsubscribe link in every email.

Automated Decision-Making

No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.

We will process your request without undue delay, but at the latest within one month of receipt.

To exercise your rights, contact: datenschutz@shopipixel.de

13. Requirement of Data Provision

The provision of personal data via our contact form or newsletter is neither legally nor contractually required. You are not obliged to provide personal data. The only consequence of not providing data is that we will be unable to process your inquiry or send you our newsletter.

14. Right to Complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is in particular the supervisory authority of the federal state in which you reside, or the authority at the seat of the controller.

You have the right to lodge a complaint with any EU data protection supervisory authority — in particular at your place of habitual residence, your place of work or the place of the alleged infringement (Art. 77(1) GDPR). A list of all European supervisory authorities is available at the European Data Protection Board: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en

For our seat in Baden-Württemberg:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart, Germany
Phone: 0711/615541-0
www.baden-wuerttemberg.datenschutz.de

15. Changes

This privacy policy may be updated from time to time. The current version is available at shopipixel.de/website-privacy.