Legal

Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

COMFORSH
Inh. Behzad Monajim
Estetalstraße 27a
21279 Hollenstedt
Germany
Phone: +49 40 68961772
Email: comforsh@gmail.com

2. General

We take the protection of your personal data seriously.
We process personal data only within the framework of the applicable data protection provisions, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Personal data is processed only where there is a legal basis for doing so or where you have given your consent.

3. Visiting our website

Technical information may be processed when you visit our website. This may include in particular:

  • IP address
  • date and time of access
  • browser type and version
  • operating system
  • device used
  • pages accessed
  • referrer URL
  • technical information on the use of the online shop
  • security and error information

This processing serves in particular the technical provision, security and stability of our online shop.

4. Shopify

Our online shop is operated using Shopify.
Shopify provides the technical infrastructure for our online shop and may process personal data in the course of providing its services.
This concerns, among other things, the technical provision of the shop, cart and checkout functions, customer accounts, order processing and other shop functions.
Further information on data processing by Shopify can be found in Shopify's privacy policy.

5. Customer account

You can create a customer account in our online shop. The following data may be processed in particular:

  • name
  • email address
  • billing address
  • delivery address
  • order information
  • account information
  • further details you provide voluntarily

This processing serves to set up and manage your customer account and to carry out and administer your orders.

6. Orders

When you place an order we process the personal data required to perform the contract of sale. This may include in particular:

  • first and last name
  • billing address
  • delivery address
  • email address
  • telephone number
  • order information
  • payment information or payment status
  • communication data

This processing serves the performance of the contract and compliance with legal obligations.

7. Shipping and fulfilment

We may use external shipping, fulfilment and logistics partners to fulfil your order.
As some of our delivery partners may be based outside the European Union or the European Economic Area, personal data required for order processing may be transferred to such service providers. This may include in particular:

  • name
  • delivery address
  • telephone number
  • email address
  • order information

Such transfers take place only where necessary for the performance of the contract or otherwise permitted by law.
Where personal data is transferred to a third country, the legal requirements for such a transfer are observed. These may include, in particular, adequacy decisions or appropriate safeguards such as standard contractual clauses.

8. Payment service providers

We use the payment service providers offered in the online shop to process payments. Depending on the payment method selected, the following services may be involved:

  • Shopify Payments
  • Shop Pay
  • Klarna
  • PayPal, where available
  • credit card providers
  • Apple Pay
  • Google Pay
  • other payment services offered at checkout

The data required for payment processing may be transferred to the selected payment service provider.
The privacy provisions of the respective payment service provider apply in addition to this policy.

9. Shopify Email / newsletter

We use Shopify Email to send our newsletter.
Shopify Email serves the technical delivery of the newsletter and processes the personal data required for this on our behalf or within the scope of the services provided by Shopify.

Registration for our newsletter generally uses the double opt-in procedure.
After entering your email address you will receive a confirmation message. The address is only activated for the newsletter once it has been confirmed.
Consent is documented so that we are able to demonstrate that it was given.

Every newsletter email contains an option to unsubscribe.
You may withdraw your consent at any time with effect for the future.
The lawfulness of processing carried out up to the point of withdrawal remains unaffected.

10. Newsletter tracking

In connection with sending the newsletter, technical information may be processed about whether a message was opened or particular content was clicked, where such functions are enabled.
Any such processing takes place only within the applicable data protection requirements.

11. Google Analytics

We use Google Analytics to analyse the use of our online shop and to improve what we offer.
Google Analytics may record and evaluate information about the use of our website.
Google Analytics is generally only activated once the required consent has been given.
You can change or withdraw your consent at any time with effect for the future via the cookie settings on our website.

12. Meta Pixel

We use the Meta Pixel to analyse and optimise our advertising activities and to measure advertising campaigns.
This processing may serve in particular to measure conversions and to make our advertising more relevant.
The Meta Pixel is only used where the required consent has been given.

13. TikTok Pixel

We use the TikTok Pixel to analyse and optimise our marketing activities and to measure advertising campaigns.
It is only used where the required consent has been given.

14. Cookies and comparable technologies

Our website uses cookies and comparable technologies.
Technically necessary technologies may be used where they are required for the use of the online shop that you have expressly requested.
Non-essential analytics, marketing and tracking technologies are generally only used after the corresponding consent has been given.
You can change or withdraw your settings at any time via the consent management provided on our website.

15. Contacting us

If you contact us by email or telephone, we process the personal data you provide in order to deal with your enquiry.
The legal basis depends on the content of the enquiry and may lie in particular in the performance of pre-contractual measures, the performance of a contract, a legal obligation, or our legitimate interest in proper communication.

16. Legal bases

Personal data is processed in particular on the basis of:

  • Art. 6 (1) (a) GDPR – consent
  • Art. 6 (1) (b) GDPR – performance of a contract or pre-contractual measures
  • Art. 6 (1) (c) GDPR – legal obligation
  • Art. 6 (1) (f) GDPR – legitimate interests

17. Retention period

Personal data is generally stored only for as long as is necessary for the respective purpose.
Statutory retention obligations may also apply.
Once the relevant retention periods have expired, the data is deleted unless another legal basis justifies further storage.

18. Your rights

Subject to the statutory requirements, you have in particular the following rights:

  • right of access
  • right to rectification
  • right to erasure
  • right to restriction of processing
  • right to data portability
  • right to object
  • right to withdraw consent given

You also have the right to lodge a complaint with a data protection supervisory authority.

19. Withdrawal of consent

Consent that has been given may be withdrawn at any time with effect for the future.
Withdrawing consent does not affect the lawfulness of processing carried out up to the point of withdrawal.

20. Objection to direct marketing

You may object at any time to the processing of your personal data for direct marketing purposes.

21. International data transfers

Because we use international technical service providers and fulfilment partners, personal data may be transferred to countries outside the EU or the EEA.
Where necessary, such transfers take place on the basis of an adequacy decision, appropriate safeguards or another legally permissible basis.

22. Updates

We reserve the right to amend this privacy policy where legal, technical or organisational changes arise.
The current version published on our website applies in each case.

Last updated: August 2026

This is a translation for convenience. The German version is the legally binding one.