Datenschutzerklärung
Last updated: 15 October 2025
This Privacy Policy explains how Faimyxstitch – Kseniia Pilosian / sole proprietor (“we”, “us”) collects and processes your personal data when you visit or shop on this website.
1) Controller
Faimyxstitch – Kseniia Pilosian
Lydia-Rabinowitsch-Straße 6, 10557 Berlin, Germany
Email: faimyxstitch@gmail.com
This store is hosted on Shopify.
2) What data we collect
When you browse the site
- Technical and usage data collected by Shopify to run and secure the site (IP address, browser, pages viewed, basic diagnostics).
- Essential cookies required for cart, checkout, security (see our Cookie Policy).
When you place an order
- Contact details: name, email, billing/shipping address, phone (optional).
- Order details: items, prices, order notes.
- Payment details: payment method and tokens (processed by Shopify Payments or PayPal; we do not store full card numbers).
- Digital delivery events (to provide downloads, support, and prevent abuse).
When you contact us / subscribe
- Your name, email, and message content.
- If you subscribe via Shopify Email: your email and subscription preferences.
- If you leave a review via Judge.me: your name (or nickname), rating, review text, and any media you submit.
Sources
Primarily from you. We may receive limited fraud-prevention or risk signals from payment providers and security systems to protect our shop.
3) Why we process your data (legal bases – GDPR)
- Provide the shop, process orders, deliver digital downloads – Art. 6(1)(b) (contract).
- Payments, fraud prevention, security, record-keeping – Art. 6(1)(f) (legitimate interests) and Art. 6(1)(c) (legal obligations).
- Customer support and service messages – Art. 6(1)(b)/(f).
- Email marketing (only if you opt in) – Art. 6(1)(a) (consent; you can withdraw anytime).
- Product reviews you submit – Art. 6(1)(b) (post-purchase service) and/or Art. 6(1)(f) (show genuine reviews).
4) Who processes your data (recipients)
We share only what’s necessary to operate our store, deliver your purchases, and provide optional features you use (e.g., upsells, reviews)—and only with your consent where required.
Store platform (processor): Shopify (hosting, checkout, security).
Shopify apps (processors): Digital Downloads, Shopify Email, Shopify Forms, Flow, Translate & Adapt, Consentmo GDPR, Essential Upsell, Judge.me.
Payments (independent controllers): Shopify Payments, PayPal (if selected).
Shipping (independent controllers): Carriers (e.g., Deutsche Post/DHL).
International transfers: see section 5. DPAs are in place with our processors as required by Art. 28 GDPR.
5) International transfers
Your data may be processed outside the EU/EEA (e.g., by Shopify/PayPal or their sub-processors). Where applicable we rely on adequacy decisions and/or Standard Contractual Clauses (SCCs) with supplementary measures in line with GDPR.
6) Cookies
We currently use only essential/functional cookies needed to operate the shop, deliver downloads, and process payments. Details and options are in our Cookie Policy. If we later add analytics or advertising, they will load only with your consent, and we will update the banner and this Policy. You can change or withdraw non-essential cookie consent anytime via Cookie Preferences.
Our cookie banner and preference center are provided by Consentmo; you can manage non-essential cookies via Cookie Preferences in the footer.
7) Retention
- Order and invoice data: retained per German commercial/tax laws (generally 10 years).
- Support messages: until resolved and for documentation/defense (typically up to 3 years).
- Email marketing: until you unsubscribe.
- Download logs: as needed for delivery, support, fraud prevention.
8) Your rights (GDPR)
You can request access, rectification, erasure, restriction, data portability, and object to processing based on legitimate interests (Art. 6(1)(f)), including objecting to direct marketing at any time. Where processing relies on consent, you may withdraw consent at any time without affecting prior processing.
To exercise rights, email faimyxstitch@gmail.com. We respond within one month (extendable by two months for complex requests) and may ask for information to verify your identity. You also have the right to lodge a complaint with your supervisory authority (for EU residents: the authority of your habitual residence or place of work; in Germany, the competent state data protection authority).
9) Is data required?
To place an order we need certain information (name, address, email, payment details). Without it we cannot fulfill your order.
10) Children
Our store is not directed to children under 16. We do not knowingly collect children’s data.
11) Security
We apply appropriate technical and organizational measures (SSL/TLS, access controls). Payments are handled securely by Shopify Payments and PayPal. No method is 100% secure.
12) Automated decisions
No automated decisions with legal or similarly significant effects. Payment providers may run limited automated anti-fraud checks.
13) “Do we sell data?”
We do not sell personal data. If you are in a region with “do not sell/share” rights, see Your Privacy Choices in the footer.
14) Changes
We may update this Policy. The latest version will always be on this page with the updated date. If we add analytics/ads later, we’ll update this Policy and the cookie banner before those tools load.
15) Contact
Questions or requests? Email faimyxstitch@gmail.com