Privacy Policy (Germany & EU GDPR Compliant)

1. General Overview & Data Controller

We take the protection of your personal data very seriously. This Privacy Policy explains how we collect, process, and secure your personal information in strict compliance with the European General Data Protection Regulation (GDPR). The controller responsible for your data is Aeroshades DE, contactable at theaeroshades@gmail.com.

2. Information We Collect

When you visit our store or make a purchase, we collect the necessary personal data to process your transaction:

Identity & Contact Data: Full name, shipping address, billing address, email address, and phone number.
Transaction Data: Details about the specific products you purchased, order time, and total amount paid.
Technical & Usage Data: IP address, browser type and device information collected automatically by our platform hosting infrastructure. We only use technically necessary storage (for your cart and language choice). We do not use advertising, analytics or other non-essential cookies, and fonts are served from our own site.

3. Legal Basis for Processing Data

Under the GDPR, we process your personal data based on the following legal grounds:

Performance of a Contract (Art. 6(1)(b) GDPR): To process your order, manage shipments, and deliver the products you purchased.
Legal Obligation (Art. 6(1)(c) GDPR): To comply with tax and commercial record-keeping laws.
Legitimate Interests (Art. 6(1)(f) GDPR): To optimize our website functionality, provide effective customer support, and detect or prevent potential fraud.

4. Data Sharing & Third-Party Processors

In order to fulfill our contract with you as an authorized sales agent, we securely share your data only with verified essential service providers:

Platform Infrastructure (Whop): To securely host our online storefront, manage digital accounts, and structure user data.
Payment Providers: To safely process encrypted financial transactions (e.g., via Apple Pay, Google Pay, Credit Cards). We do not store your raw credit card information on our servers.
Fulfillment & Logistics Networks: Under our authorized agency framework, your shipping name, address, and phone number are synchronized directly with our official supplier and manufacturer networks solely to dispatch and deliver your 6-10 day premium package to Germany.
No data is sold to third parties or used for unrelated advertising purposes.
International transfers: Some of our service providers and suppliers may be located outside the EU/EEA. In that case, your data is transferred only with appropriate safeguards under Chapter V GDPR, such as EU Standard Contractual Clauses.

5. Your Rights Under the GDPR

As a resident of Germany and the European Union, you possess the following statutory rights regarding your personal data:

Right of Access (Art. 15 GDPR): You can request a copy of the personal data we hold about you.
Right to Rectification (Art. 16 GDPR): You can request that we correct any inaccurate or incomplete information.
Right to Erasure / “To be Forgotten” (Art. 17 GDPR): You can request that we permanently delete your personal data from our systems.
Right to Restriction of Processing (Art. 18 GDPR): You can request that we restrict the processing of your data in certain cases.
Right to Data Portability (Art. 20 GDPR): You can request a digital transfer of your data to another provider.
Right to Object (Art. 21 GDPR): You can object to data processing based on legitimate interests at any time.
Right to Lodge a Complaint (Art. 77 GDPR): You have the right to complain to a data protection supervisory authority, for example in your federal state of residence.

To exercise any of these rights, please email us at theaeroshades@gmail.com.

6. Data Retention

We retain your personal transaction data only for as long as necessary to fulfill the purposes outlined in this policy, or to comply with legally mandated statutory retention periods under European tax and commercial laws (in Germany generally 6 to 10 years for accounting records and business correspondence).