Privacy policy

Last Updated: 13 August 2026

This Privacy Policy fully complies with the EU General Data Protection Regulation (GDPR) and German Federal Data Protection Act (BDSG), outlining how Celinae collects, processes, stores and safeguards your personal data when visiting www.celinae.shop.

Data Controller

Controller: Celinae

Registered Address: Schöne Aussicht 26, 22085 Hamburg-Nord, Germany

Privacy Inquiries Email: hello@celinae.shop

Categories Of Personal Data Collected

  1. Voluntarily provided personal information

    Full name, email address, telephone number, billing address, delivery address, order history and customer service correspondence.
  2. Automatically collected technical data

    IP address, device type, browser software, website browsing behaviour, cookies and tracking metrics from Google Analytics and Google Ads.
  3. Transaction-related data

    Order contents and payment status. We never store complete card numbers, CVV security codes or expiry dates on our servers; all payment transactions are handled by PCI DSS certified third-party payment providers.

Legal Bases For Data Processing

  1. Executing sales contracts, processing orders and arranging product delivery
  2. Answering customer enquiries, return applications, refunds and after-sales service requests
  3. Sending critical operational notifications such as order confirmations, delivery updates and policy revisions
  4. Optimising website functionality, performance and user experience
  5. Preventing fraudulent transactions and securing payment processes
  6. Distributing marketing materials only upon your explicit, voluntary opt-in consent
  7. Fulfilling German tax, accounting and legal record retention obligations

Third-Party Service Providers Authorised To Receive Data

We only share necessary personal data with vetted partners essential for business operations: Shopify e-commerce platform, licensed German payment processors, domestic delivery couriers, anti-fraud systems, Google Analytics, tax consultants and legal counsel.

Celinae will never sell, lease or trade your personal data to unrelated third parties for unsolicited advertising. All data processors are bound by GDPR-compliant data processing agreements.

Cookies And Tracking Technologies

Our website uses cookies, web beacons and advertising pixels to preserve shopping cart contents, maintain user sessions, strengthen security and run remarketing campaigns. You may disable non-essential cookies in your browser settings, though some checkout functions may become restricted.

Your GDPR Data Subject Rights

  1. Request a complete copy of all personal data we hold about you
  2. Demand correction of inaccurate or outdated personal information
  3. Apply for permanent deletion of your data where no legal or legitimate business purpose remains
  4. Object to or limit data processing for direct marketing at any time
  5. Request data portability in a machine-readable standard format
  6. Revoke previously granted marketing consent without invalidating prior lawful data processing
Submit formal verified requests to hello@celinae.shop to exercise your statutory GDPR rights.

Data Retention Period

Personal data is retained only for the shortest period required to fulfil orders, resolve disputes, mitigate fraud risks and satisfy German legal archiving requirements. Data is securely archived or permanently deleted once no longer needed.

Data Security Measures

All payments are processed via Shopify’s PCI DSS encrypted secure infrastructure. While no internet data transmission can be guaranteed entirely risk-free, we deploy industry-standard encryption and access permission controls to minimise data breach vulnerabilities.

Protection Of Minors

This online store is intended exclusively for customers aged 18 years and older. We do not knowingly collect personal information from children and adolescents under 18. Contact us immediately for data deletion if we receive records from a minor without valid parental consent.

Policy Amendments

We may revise this privacy policy to align with updated German and European data protection laws. The latest revision date will be displayed at the top of this page. Continued use of the website constitutes acceptance of the updated terms.

Filing A Formal Complaint

If you believe Celinae has violated GDPR or German data protection rules, please first contact our team at hello@celinae.shop. If the matter cannot be resolved mutually, you have the right to submit a complaint to the competent German data protection authority (Hamburg Datenschutzbehörde).

Privacy Support Contact

Email: hello@celinae.shop

Response within 24–48 working hours