Datenschutzerklärung

Last Updated: August 11, 2026
This Privacy Policy applies to the website www.arvellae.com operated by Arvellae. It fully complies with the European General Data Protection Regulation (GDPR/DSGVO), German Federal Data Protection Act (BDSG), and the German Digital Services Act (DDG). This policy clearly defines how we collect, process, store, and protect your personal data, as well as your statutory data subject rights when you browse our website, register an account, or place online orders within Germany and the European Economic Area (EEA)。
By accessing our website and using our commercial services, you explicitly acknowledge and consent to the data processing practices outlined in this Privacy Policy.

1. Data Controller & Legal Contact

Arvellae is the sole data controller responsible for all personal data processing activities on this platform, complying with Article 13 GDPR and German local data protection regulations.
Website: www.arvellae.shop
Support Email: hello@arvellae.shop
Contact Phone: +49 421 5955166
Registered Business Address: Arndtstraße 2, 27570 Bremerhaven-Geestemünde, Germany
You may contact us at any time to submit data access requests, correction requests, erasure requests, data portability applications, or formal privacy-related complaints.

2. Categories of Personal Data Collected

We strictly adhere to GDPR data minimisation principles and only collect data necessary for contract performance and legitimate business operations:
  • User-Provided Personal Data: Full name, email address, contact telephone number, German/EU billing and delivery address, street name, postal code, order details, customer support messages, return and refund application information.
  • Transaction Data: Order records, purchase history, payment verification status and checkout preferences. We do not store complete credit card details or sensitive financial data. All payment processing is handled by EU-GDPR compliant payment service providers with official PCI DSS certification.
  • Automated Technical Data: Visitor IP address, device type, browser version, website access logs, cookie data and browsing behaviour, used for website optimisation, system security maintenance, fraud prevention and user experience improvement.

3. Legal Basis & Processing Purposes

All data processing activities are based on valid GDPR legal bases including contract performance, legitimate interest, and explicit user consent:
  • To process, confirm, pack and deliver customer orders across Germany and the European Economic Area
  • To respond to customer enquiries, after-sales consultations, return processing and refund services
  • To send order confirmations, shipping tracking updates, policy revisions and official service notifications
  • To maintain website operational security, prevent fraud and resolve abnormal transaction issues
  • To deliver promotional marketing content only with your explicit opt-in consent
  • To retain business and financial records to comply with German commercial law and statutory tax retention obligations

4. Third-Party Data Disclosure

We will never sell, rent or commercially trade your personal data. We only share limited essential user data with GDPR-compliant third-party service providers located within the European Union, including authorised payment institutions, German logistics carriers, professional website hosting providers and analytical tools. All third-party partners are bound by strict data protection contracts to ensure full compliance with DSGVO and BDSG regulations.

5. Cookies & Online Tracking

This website uses functional and analytical cookies to optimise browsing experience, fully complying with the EU ePrivacy Directive and German DDG requirements. You may freely adjust, disable or clear cookie permissions via your local browser settings at any time.

6. Your Statutory GDPR & German Data Protection Rights

As a data subject under GDPR and BDSG, you hold complete legal rights: the right to access stored personal data, the right to correct inaccurate data, the right to request full data erasure, the right to restrict data processing, the right to data portability, the right to withdraw consent at any time, and the right to lodge a formal complaint with a German regional data protection authority.

7. Data Retention Rules

Personal data is only stored for the legally required and operationally necessary duration. Financial and order records are retained in accordance with German tax law retention periods. Customer service data is stored until case closure, and marketing-related user data will be permanently deleted immediately after your opt-out request.

8. Data Security & Breach Protection

We implement end-to-end SSL encryption, secure EU-based server infrastructure and strict internal access control mechanisms to protect user personal data. All technical and organisational security measures fully meet GDPR requirements to prevent data leakage, unauthorised access and data breach incidents.

9. Minors Data Protection

Our website and commercial products are exclusively intended for users aged 18 years and above. We do not knowingly collect personal data from minors. Any unauthorised minor personal data discovered in our system will be permanently deleted immediately.

10. Policy Updates

We reserve the right to update this Privacy Policy to comply with amendments to EU GDPR and German local data protection laws. All revised versions will be published on this page with the latest official update date.