Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obligated to provide the data. Failure to provide it will have no consequences. This only applies unless otherwise stated during the subsequent processing operations.
“Personal data” means any information relating to an identified or identifiable natural person.

Server log files

You can visit our website without providing any personal information. Each time you access our website, usage data is transmitted to us or our web host/IT service provider via your internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider. Processing is based on Art. 6 (1) (f) GDPR, based on our overriding legitimate interest in ensuring the smooth operation of our website and improving our offering.

Your data may be transferred to third countries outside the EU, particularly to Canada and the USA, and processed there. An adequacy decision of the EU Commission exists for Canada. An adequacy decision of the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.

contact

Person responsible

The person responsible for data processing is:

Quilt service Ines Lichtenberg
Parkstrasse 71
01809 Heidenau
Germany
+49 178 5471671
info@maggieandme.de

Customer's proactive contact via email

If you initiate business contact with us by email, we will only collect your personal data (name, email address, message text) to the extent provided by you. The data is processed to process and respond to your contact request. If the contact is for the purpose of carrying out pre-contractual measures (e.g. advice in the event of a purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) (b) GDPR. If contact is made for other reasons, this data is processed on the basis of Art. 6 (1) (f) GDPR out of our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object to this processing based on Art. 6 (1) (f) GDPR at any time for reasons arising from your particular situation. We will only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Collection and processing when using the contact form

When you use the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. Data processing serves the purpose of establishing contact. If the contact serves to implement pre-contractual measures or concerns an already concluded contract, this data processing is based on Art. 6 (1) (b) GDPR. Otherwise, it is based on Art. 6 (1) (f) GDPR.

Customer account – Orders

Customer account

When you open a customer account, we collect your personal data to the extent specified therein. The purpose of this data processing is to improve your shopping experience and simplify order processing. Processing is based on Art. 6 (1) (a) GDPR with your consent. You can revoke your consent at any time.

Collection, processing and transfer of personal data when placing orders

When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to process your inquiries (Art. 6 (1) (b) GDPR). Your data may be shared, for example, with shipping companies (DHL), payment service providers, or service providers for order processing (Shopify).

Your data may be transferred to and processed in third countries outside the EU, particularly Canada and the USA. An adequacy decision by the EU Commission exists for Canada. The Trans-Atlantic Data Privacy Framework (TADPF) is recognized for the USA. Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.

Advertising – Analysis – Tracking

Analysis and marketing tools

We use the following services on our website:

  • Google Analytics 4 (with IP anonymization)
  • Google Tag Manager
  • Meta Pixels (Facebook/Instagram)
  • Pinterest Day
  • LinkedIn Insight Tag

These services are used to compile visitor statistics, track conversions, and display interest-based advertising. Your data may be transferred to the USA. Google, Meta, LinkedIn, and Pinterest are certified according to the TADPF. Processing is carried out with your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke this consent at any time via the consent banner (Consentmo).

Shipping service provider

We will pass on your email address to the transport company DHL as part of the contract processing, provided that you have expressly agreed to this during the ordering process.

Payment service providers

We use the following payment methods:

  • Shopify Payments / Stripe
  • PayPal
  • Klarna
  • Amazon Pay
  • Apple Pay
  • Google Pay

The purpose of data processing is to offer you payment via these services. Upon selection and use, your payment will be processed through the respective provider. This is based on Art. 6 (1) (b) GDPR. Some providers reserve the right to conduct credit checks (Art. 6 (1) (f) GDPR).

Further information can be found in the privacy policies of the providers:
Stripe
PayPal
Klarna
Amazon Pay

Cookies

Our website uses cookies. Cookies are small text files stored in your internet browser.

  • We use technically necessary cookies on the basis of Section 25 (2) TDDDG and Article 6 (1) (f) GDPR to ensure the functionality of the website.
  • We only use marketing and statistical cookies with your consent (Section 25 (1) TDDDG, Article 6 (1) (a) GDPR) via the consent tool Consentmo.

You can delete cookies in your browser at any time or adjust them via the consent banner.

Rights of the data subject

If the legal requirements are met, you are entitled to the following rights under Articles 15 to 20 of the GDPR: right to information, rectification, erasure, restriction of processing, and data portability. Furthermore, under Article 21 (1) GDPR, you have the right to object to processing based on Article 6 (1) (f) GDPR, as well as to direct marketing.

Storage period

After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, then in accordance with statutory retention periods (in particular under tax and commercial law: 6 or 10 years) and then deleted unless you have consented to further processing.

Right to lodge a complaint with the supervisory authority

According to Art. 77 GDPR, you have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data is unlawful.

Responsible is:
Saxon Data Protection and Transparency Commissioner
Devrientstraße 5
01067 Dresden
Phone: +49 351 85471101
Email: saechsdsb@slt.sachsen.de

Right of objection

If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation.

last updated: 09.09.2025