Privacy Policy

Status: June 2026

1. Controller

The controller within the meaning of the GDPR is:
Edgard Goreluhin
Dahlienweg 16
71522 Backnang
Germany
Email: support@trio7.de

2. General Information

We process personal data only to the extent necessary to provide a functional website and our services.

3. Legal Bases

Consent: Art. 6 para. 1 lit. a GDPR
Contract Performance: Art. 6 para. 1 lit. b GDPR
Legal Obligation: Art. 6 para. 1 lit. c GDPR
Legitimate Interest: Art. 6 para. 1 lit. f GDPR

4. Hosting

This website is hosted by Shopify Inc. (150 Elgin Street, Ottawa, Ontario K2P 1L4, Canada). Shopify is certified under the EU-US Data Privacy Framework.
More information: shopify.com/legal/privacy

When you access the website, server log data is collected: browser type, IP address, date/time. Legal basis: Art. 6 para. 1 lit. f GDPR.

5. Order Process

When placing orders, we process: name, address, email, phone (optional), payment data, order history. Legal basis: Art. 6 para. 1 lit. b GDPR. Retention according to § 257 HGB / § 147 AO for up to 10 years. Payment data is processed directly by payment service providers — we do not have access to complete payment data.

6. Cookies

We use technically necessary cookies (shopping cart, session ID). These are essential for the operation and cannot be deactivated (Art. 6 para. 1 lit. f GDPR).
Optional cookies are only set with consent (Art. 6 para. 1 lit. a GDPR). Adjust cookie settings: Cookie Preferences

7. Contact

Contact form and email inquiries are stored for processing. Legal basis: Art. 6 para. 1 lit. b and f GDPR. No disclosure without consent.

8. Newsletter

When you sign up, we process your email to send you the newsletter. Legal basis: consent (Art. 6 para. 1 lit. a GDPR). Unsubscription is possible at any time — unsubscribe link in every newsletter.

9. Disclosure to Third Parties

Disclosure only with: explicit consent, fulfillment of contract (e.g., shipping service providers), legal obligation, or to assert legal claims.

10. Your Rights (Art. 15–21 GDPR)

Right of Access (Art. 15): Right to information about stored data.
Right to Rectification (Art. 16): Right to correct inaccurate data.
Right to Erasure (Art. 17): Right to erasure, unless there is a retention obligation.
Right to Restriction of Processing (Art. 18): Right to restrict processing.
Right to Object (Art. 21): Objection to processing based on Art. 6 para. 1 lit. f GDPR.
Right to Data Portability (Art. 20): Right to data in a machine-readable format.
Right to Lodge a Complaint: Complaint to the competent data protection supervisory authority.

Inquiries to: support@trio7.de

11. Right to Withdraw Consent

Consent can be withdrawn at any time with effect for the future. The lawfulness of the processing carried out until the withdrawal remains unaffected.