Controller
Florian Cafuta
Meinlettenstraße 11
85053 Ingolstadt
Germany
Email: support.grapl@gmail.com
Phone: +49 157 510 35539
General
We process personal data only to the extent necessary and on the basis of the GDPR. The legal bases are, in particular, Art. 6 para. 1 lit. a (consent), lit. b (contract) and lit. f (legitimate interest) GDPR.
Hosting (Shopify)
Our shop is operated via Shopify International Limited (Ireland). Shopify partly processes data on servers in the EU and, if applicable, the USA, secured by EU standard contractual clauses. When visiting, technically necessary data such as IP address, browser type and access time are processed.
Server Log Files
When accessing the website, information such as browser type, operating system, referrer URL, IP address and time is automatically collected. The purpose is the technical operation and security of our offering.
Cookies and Consent Management
We use a consent management tool. Technically necessary cookies are always active. All others, such as for marketing or analysis, are only set after your consent. You can revoke your selection at any time.
Newsletter and Email Marketing
For our newsletter and launch registrations, we use Klaviyo. Registration is done via a double opt-in procedure. After your registration, you will receive a confirmation email, and only after clicking on the link will you be subscribed. We store email address, time of registration and IP address to prove consent. You can unsubscribe at any time via the link in every email.
Shopify Analytics
Shopify provides us with aggregated statistics on visitor numbers and sales. These serve the operation and optimization of our shop.
Meta Pixel, TikTok Pixel and Google Analytics
If activated and consented to by you, we use advertising and analytics tools such as the Meta Pixel, the TikTok Pixel or Google Analytics 4 to measure and optimize our advertisements and to measure reach. Data transfer can also take place outside the EU. These tools are only activated after your consent via the cookie banner.
Order Processing and Payment
When placing an order, we process the data necessary for the fulfillment of the contract, such as name, address, email and order details. Payment service providers such as Shopify Payments, PayPal or Klarna process payment data independently according to their own data protection regulations.
Contacting Us
If you contact us by email, your details will be stored for processing your request.
Your Rights
You have the right to information, rectification, erasure, restriction of processing, data portability and objection. You can revoke given consents at any time. You also have a right to complain to a supervisory authority; for Bavaria, the Bavarian State Office for Data Protection Supervision is responsible.
Contact for all concerns: support.grapl@gmail.com
Status: 2026