Last updated: June 2026, V1.2
We appreciate your interest in our online store, Sh!t the Glitter. Protecting your personal data is important to us. This Privacy Policy explains what personal data we collect when you visit our website or use our online store, how we process that data, and for what purposes it is used.
We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and all other applicable data protection laws.
We process personal data exclusively in accordance with the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and any other applicable data protection laws.
1. Data Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Zolution GmbH
Starnberger Straße 11
28215 Bremen
Deutschland
Telefon: +49 (0)421 9440471-0
E-Mail: info@zolution.net
2. Hosting
This website is hosted by webgo GmbH.
For the purpose of ensuring the secure and reliable operation of this website, our hosting provider processes personal data in so-called server log files. This may include, in particular:
• IP-Adress
• Date and Time of Access
• Browsertyp and Browserversion
• used Operatingsystem (e.g. Windows 11)
• Referrer-URL
• Pages accessed
• Host name of the accessing device
The fonts used on this website are hosted locally on our server.
When you visit our website, no connection is established to Google or any other third-party servers for the purpose of loading fonts.
As a result, no personal data relating to the use of fonts is transmitted to third parties.
The processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in ensuring the secure, reliable, and efficient operation of our online services.
3. SSSL or TLS encryption
For security reasons, this website uses SSL/TLS encryption. This ensures that all data you transmit to us, such as orders or contact enquiries, is encrypted during transmission.
You can recognise a secure connection by the "https://" prefix in your browser's address bar and the padlock icon displayed in your browser.
4. Cookies
Our website uses cookies.
Cookies are small text files that are stored on your device and contain certain information. They are used to ensure the proper functioning of our online store, improve user experience, and, where you have given your consent, collect statistical information about the use of our website.
We use the following types of cookies:
Strictly necessary cookies
Functional cookies
Analytics cookies (only with your consent)
The legal basis for the use of strictly necessary cookies is Article 6(1)(f) GDPR.
Für alle nicht technisch erforderlichen Cookies erfolgt die Verarbeitung ausschließlich auf Grundlage Ihrer Einwilligung gemäß Art. 6 Abs. 1 lit. a DSGVO.
5. Borlabs Cookie
We use Borlabs Cookie to manage your cookie consent preferences.
Borlabs Cookie stores your consent choices and other privacy-related settings.
No personal data is transferred to the provider of Borlabs Cookie.
Your consent is stored in order to comply with the legal documentation requirements set out in Article 7 GDPR.
Your consent preferences are stored solely for the purpose of documenting whether you have given or withdrawn your consent, in accordance with Article 6(1)(c) and Article 6(1)(f) GDPR.
6. Collection of personal data
We collect personal data only where it is necessary for the purposes described in this Privacy Policy.
This applies in particular when:
- you visit our online store;
- you place an order;
- you use our contact form;
- you submit a product review;
- you make a payment;
or you contact us.
The specific personal data we process depends on how you use our website and the services you choose to use.
Storage period
We retain personal data only for as long as necessary to fulfil the respective processing purposes or where we are required to do so by applicable legal retention obligations.
Once the relevant purpose no longer applies, personal data will be deleted unless we are required to retain it in accordance with applicable legal retention periods.
8. Your Rights
Under the applicable data protection legislation, you have the following rights:
- Right of access (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to erasure (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object (Article 21 GDPR)
- Right to withdraw your consent at any time
- Right to lodge a complaint with a supervisory authority
To exercise your rights, an informal request sent to the contact details provided above is sufficient.
9. Orders Placed Through Our Online Store
When you place an order through our online store, we process the personal data necessary to process and fulfil your order and to perform the purchase contract.
This may include, in particular:
- First and Last Name
- Billing Address
- E-Mail Address
- Telephone number (where provided)
- Order details
- Payment information
- Shipping information
• IP-Adress
- Date and time of the order
This processing is carried out for the purpose of performing the purchase contract concluded between you and us, in accordance with Article 6(1)(b) GDPR.
Providing this information is necessary for the conclusion and performance of the purchase contract. Without this information, we are unable to process your order.
As part of the order fulfilment process, we send automated emails, including:
- Order confirmation
- Payment confirmation
- Shipping confirmation
- Order status updates
This processing is carried out for the purpose of performing the purchase contract in accordance with Article 6(1)(b) GDPR.
10. Payment Processing
We work with external payment service providers to process payments.
Depending on the payment method you choose, the personal data required to process your payment will be transferred to the respective payment service provider.
This transfer is carried out solely for the purpose of processing your payment in accordance with Article 6(1)(b) GDPR.
Stripe, Apple Pay and Google Pay
Payments are processed through our payment service provider, Stripe Payments Europe Ltd.
If you choose to pay by credit card, Apple Pay, or Google Pay, the personal data required to process your payment will be transferred to Stripe.
This may include, in particular:
- Name
- Billing Address
- Payment Amount
- Payment information
- E-Mail Address
- IP-Address
- Device Information
- Transaction Data
Your personal data is processed solely for the purpose of processing your payment, in accordance with Article 6(1)(b) GDPR.
For more information about how Stripe processes personal data, please refer to Stripe's Privacy Policy:
https://stripe.com/de/privacy
PayPal
If you choose PayPal as your payment method, payments will be processed by PayPal (Europe) S.à r.l. et Cie, S.C.A.
For more information about how personal data is processed, please refer to the Privacy Policy:
https://www.paypal.com/de/legalhub/privacy-full
Klarna
If you choose Klarna as your payment method, payments will be processed by Klarna Bank AB (publ).
For more information about how personal data is processed, please refer to the Privacy Policy:
https://www.klarna.com/de/datenschutz/
Amazon Pay
Bei Auswahl von Amazon Pay erfolgt die Zahlungsabwicklung über Amazon Payments Europe.
For more information about how personal data is processed, please refer to the Privacy Policy:
https://pay.amazon.de/help/201212490
11. Shipping
To deliver your order, we share the personal data necessary for shipping with our shipping service provider.
This may include, in particular:
- Name
• Delivery Address
• Phone number (if provided)
• Delivery Information
To deliver your order, we share the personal data necessary for shipping with Deutsche Post AG.
We process this data for the purpose of fulfilling the purchase contract in accordance with Article 6(1)(b) GDPR.
12. Contact Form
If you use our contact form, we process the personal data you provide in order to respond to and handle your enquiry.
This may include, in particular:
- Name
- E-Mail Address
- Subject
- Message
Where your enquiry relates to a contract or to steps taken prior to entering into a contract, the processing is based on Article 6(1)(b) GDPR.
In all other cases, the processing is based on our legitimate interest in responding to and handling your enquiry efficiently, in accordance with Article 6(1)(f) GDPR.
We retain personal data only for as long as necessary to fulfil the respective processing purposes or where we are required to do so by applicable legal retention obligations.
13. Product Reviews
You may submit product reviews for products available in our online store.
The following personal data may be processed:
- Displayname
- Product Rating
- Review or Comment
- Date and time the review was submitted
We may review and publish product reviews to provide other customers with information about our products.
We process your personal data on the basis of your consent in accordance with Article 6(1)(a) GDPR.
You may withdraw your consent at any time. The withdrawal of your consent does not affect the lawfulness of any processing carried out before your consent was withdrawn.
We may review and publish product reviews on our website.
Only the display name you provide will be published. Please do not include any personal data that you do not wish to make publicly available.
14. Contacting Us By Email
If you contact us by email, we will store and process the personal data you provide solely for the purpose of responding to and handling your enquiry.
Depending on the nature of your enquiry, the processing is based either on Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.
We will not disclose your personal data to third parties unless this is necessary to process your enquiry or we are legally required to do so.
15. Google Analytics
Where you have given your explicit consent via our cookie banner, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to analyse how our website is used so that we can continuously improve our online services.
The following personal data may be processed:
• Pages accessed
• Time spent on the website
• Browser Used
• Operating System
• Device Type
• Approximate geographic location
• Anonymised IP address
• Referrer URL
We use Google Analytics only with your explicit consent in accordance with Article 6(1)(a) GDPR.
You may withdraw your consent at any time by changing your cookie preferences.
Where personal data is transferred to countries outside the European Union, such transfers are carried out only in accordance with the applicable provisions of the GDPR, including, where required, appropriate safeguards such as an adequacy decision of the European Commission or other transfer mechanisms permitted under Chapter V of the GDPR.
For more information about how personal data is processed, please refer to the Privacy Policy:
https://policies.google.com/privacy
16. Recipients of Personal Data
We disclose your personal data only where this is necessary to perform the purchase contract, where we are legally required to do so, or where you have given your consent.
Your personal data may be shared with the following recipients:
- Hosting provider
- Payment Service Providers
- Shipping Service Providers
- IT Service Providers
- Public authorities, where required by law
We do not disclose your personal data to any other recipients unless we are legally required or permitted to do so.
17. Storage period
We retain personal data only for as long as necessary to fulfil the respective processing purposes or where we are required to do so by applicable legal retention obligations.
Where we are subject to statutory retention obligations, in particular under commercial and tax law, the relevant personal data will be retained for the legally prescribed retention periods and deleted thereafter.
18. Data Security
We implement appropriate technical and organisational security measures to protect your personal data against loss, alteration, unauthorised access, or any other unauthorised processing.
Our security measures are continuously reviewed and improved in line with technological developments.
19. Your Rights as a Data Subject
You have the right at any time to:
- Right of access (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to erasure ("right to be forgotten") (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object (Article 21 GDPR)
- Right to withdraw your consent at any time
You also have the right to lodge a complaint with a competent data protection supervisory authority regarding the processing of your personal data.
20. Objection to Unsolicited Marketing Emails
The use of the contact details published in accordance with our legal notice obligations for the purpose of sending unsolicited advertising, promotional materials, or other marketing communications is hereby expressly prohibited.
The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising or promotional material, including spam emails.
21. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy where necessary to reflect changes in legal requirements, technical developments, or changes to our website and services.
The version of this Privacy Policy published on our website at the time of your visit shall apply.
